Privacy policy

Who we are

Shoqata bamirëse "Jetimat e Ballkanit" ("Jetimat e Ballkanit") is the controller of your personal data. Reach us at Bekim Muhaxheri 18, Prizren, Kosovo, at info@jetimat.org, or on +383 49 259 931.

This policy covers the mobile app and the services behind it. It does not cover third-party sites you may open from the app.

What we collect

Your profile

The first name, last name, and phone number you enter during onboarding. These stay on your device and are never sent to us.

Your donations

Amount, currency, date, the project you gave to, and any message you choose to write. These are stored in our database.

Data from PayPal

When a payment succeeds, PayPal returns the transaction identifier along with the name, email address, and phone number on the account you paid with. We never see your card number or your PayPal credentials.

Notifications

If you allow notifications, OneSignal issues a device identifier that lets us send them. It carries neither your name nor your number.

Technical data

The IP address of requests to our server, used to limit abuse, and error logs when something fails.

The app does not request or collect your location, contacts, photos, or calendar.

Why we process it

• To complete the donation you started and confirm it to you — performing the relationship you initiate.
• To keep the association’s financial records — a legal obligation and our accountability to donors.
• To protect the service from abuse and to find faults — legitimate interest.
• To send you project notifications — only with your consent, which you can withdraw at any time.

Where it is stored

Your profile and your local donation history live on your device. Uninstalling the app deletes them with it.

The donation record is stored in a PostgreSQL database hosted in Frankfurt, Germany, inside the European Union, with encrypted backups. Connections to the server always use HTTPS.

Who we share it with

We do not sell your data and we do not share it for advertising. We rely on these providers to run the service:

PayPal

Payment processing. PayPal acts as an independent controller under its own privacy policy.

OneSignal

Delivery of push notifications.

Vercel

Hosting for our server.

Neon

The database, hosted in Frankfurt.

Upstash

Request rate limiting, to protect against abuse.

Sentry

Technical error reporting.

Cloudflare R2

Storage for encrypted backups.

We also disclose data where the law or a competent authority requires it.

How long we keep it

• The payer name, email, phone number, and PayPal payer identifier are deleted automatically 400 days after the donation. The amount, date, and project remain, because they are a financial record.
• Technical records that prevent duplicate payments are deleted after 30 days.
• The profile on your device stays until you change it or uninstall the app.

Your rights

You may request access to your data, its correction or erasure, restriction of or objection to processing, and a copy in a readable format. You can withdraw consent for notifications at any time from the app or your device settings.

To exercise any of these, write to info@jetimat.org. We respond within 30 days. If our answer does not satisfy you, you may complain to the Information and Privacy Agency of the Republic of Kosovo.

When you ask for erasure, we strip your identifiers from the donation record. The amount and date remain without a name attached, because the law requires us to keep financial records.

Children

The app is not directed at anyone under 18 and we do not knowingly collect data from them. If you learn that a child has sent us data, tell us and we will delete it.

Security

Traffic between the app and the server is encrypted. Database access is restricted to our systems and separated by role. Backups are stored encrypted. No system is perfectly secure, so if a breach puts you at risk we will tell you without delay.

Changes

When we update this policy we change the effective date above. For material changes we also tell you in the app.