Zasebnost
Zadnja sprememba: 26. 9. 2026
Upravljavec
Gal Aleksej Komljanec, fizična oseba, Slovenija · [email protected]
Na kratko
- Za polno uporabo potrebuješ račun: to je tvoj e-naslov in nič drugega. Gesla ni, prijaviš se s kodo iz pošte. Brez prijave te aplikacija pozna samo po naključni oznaki naprave, ki jo ustvari brskalnik.
- Tvoji odgovori v vprašalniku, zapiski, pogovori in všečki so shranjeni v tvojem brskalniku; če si prijavljen, jih hranimo tudi pri tvojem računu, da so enaki na vseh napravah. Pošiljamo pa dvoje: anonimno statistiko dogodkov (da je bil nek oglas odprt ali všečkan) in posnetek uporabe — kaj je bilo na zaslonu, kam si tapnil in kaj si vpisal — da vidimo, kje se aplikacija zatakne. Posnetki ostanejo pri nas, hranimo jih 30 dni, izklopiš jih v Profilu. Ena stvar se ne posname nikoli: šestmestna prijavna koda.
- Sporočilo najemodajalcu pošlješ sam (WhatsApp, SMS ali e-pošta); njegova vsebina ne gre prek nas.
- Piškotkov za oglaševanje ali sledenje ne uporabljamo. Edini piškotek je nj_s, ki te drži prijavljenega; velja eno leto in ga izbrišeš z odjavo.
Katere podatke obdelujemo
1. Račun in prijava. Tvoj e-naslov (hranimo ga, dokler račun obstaja, in najdlje 400 dni po zadnji uporabi), izbrani jezik in oznaka naprave, s katere je bil račun ustvarjen. Prijavna koda je shranjena samo kot enosmerna razpršena vrednost in velja 15 minut; po uspešni prijavi jo izbrišemo. Prijava sama je piškotek nj_s, od katerega je pri nas shranjena samo enosmerna razpršena vrednost; velja eno leto. Da nas nihče ne zasuje s prijavnimi kodami, za dve uri hranimo enosmerno razpršeno vrednost tvojega IP-naslova in števec — samega IP-naslova ne shranimo nikoli. Za pošteno delitev preizkusa hranimo še zapis »ta račun je preizkus že porabil« (400 dni; ta preživi brisanje računa, sicer bi bil preizkus neskončen) in števec »s te naprave sta bila začeta dva preizkusa« (180 dni). Namen: prijava, izvedba pogodbe in preprečevanje zlorab (izvedba pogodbe in zakoniti interes).
2. Stanje računa. Če si prijavljen, pri tvojem računu hranimo, kar si v aplikaciji povedal in naredil: odgovore v vprašalniku in filter (vključno z imenom, starostjo in ciljem poti, če si jih vpisal), pogovore z zapiski, osnutki sporočil in kontrolnim seznamom ter skrite, všečkane in primerjane oglase. Kje si na strani ostal in jezik vmesnika ostanejo samo v brskalniku. Tega ne beremo, ne analiziramo in nikoli ne zapišemo v dnevnike; odpre ga samo prijava v tvoj račun, tudi prek povezave iz maila obvestil (7 dni) — zato takega maila ne posreduj. Brez prijave pri nas ni ničesar od tega. Namen: da je aplikacija enaka na vseh napravah in v vseh brskalnikih (izvedba pogodbe). Hramba: 400 dni po zadnji uporabi; izbrišemo ga skupaj z računom.
3. Oznaka naprave, statistika uporabe in posnetki seje. Naključna oznaka naprave in dogodki v aplikaciji (na primer »odprt oglas«, »vklopljena obvestila«, oznaka oglasa, čas). Poleg tega snemamo potek uporabe: kaj je bilo na zaslonu, kam si tapnil, kako si se pomikal in besedilo, ki ga vpišeš — vključno z osnutkom sporočila najemodajalcu in odgovori v vprašalniku. Namen je en sam: videti, kje se aplikacija zatakne, ker nam tega skoraj nihče ne pove sam. Šestmestne prijavne kode ne posnamemo nikoli — zamaskirana je, preden zapusti tvoj brskalnik. Kartičnih podatkov v aplikaciji ni, ker jih vpišeš neposredno pri Stripe. Posnetki so shranjeni pri nas na Cloudflare in ne gredo nobenemu novemu obdelovalcu; tuje storitve za analitiko ne uporabljamo in posnetek ne postavi nobenega piškotka. Snemanje izklopiš v Profilu → Ne snemaj me, izklop velja takoj. Namen: delovanje in izboljševanje storitve (zakoniti interes; zoper to obdelavo lahko kadarkoli ugovarjaš). Hramba: dogodki 180 dni, posnetki 30 dni.
4. Obvestila o novih oglasih. Če jih vklopiš: e-naslov tvojega računa in/ali naslov za potisna obvestila enega brskalnika na telefonu, tvoj filter (vrsta nastanitve, proračun, število oseb), jezik in tihi čas. Namen: pošiljanje obvestil (tvoja privolitev). Hramba: 180 dni od zadnje vklopitve; izbrišemo takoj, ko obvestila izklopiš ali klikneš odjavo v sporočilu.
5. Naročnina. Ključ tvojega računa, paket, datum veljavnosti, soglasje k takojšnjemu začetku ter oznaki stranke in naročnine pri Stripe. Ob začetku plačila Stripu pošljemo e-naslov tvojega računa, da je račun izstavljen nanj. Ime in kartične podatke vpišeš neposredno pri Stripe in do nas ne pridejo. Namen: izvedba pogodbe in računovodske obveznosti. Hramba: do konca plačanega obdobja in 30 dni po njem; Stripe hrani plačilne podatke po svojih pravilih in predpisih.
6. Povratne informacije. Besedilo, ki ga pošlješ prek obrazca, z oznako naprave in zaslona. Namen: odgovor in izboljšave (zakoniti interes). Hramba: 180 dni. Vanj ne piši osebnih podatkov, ki jih ne želiš deliti.
7. Povezave za deljenje in namestitev. Ko aplikacijo namestiš na začetni zaslon ali deliš povezavo, lahko naslov vsebuje kopijo tvojih nastavitev. Takih povezav ne deli z drugimi, če tega ne želiš.
Podatki najemodajalcev
Iz javno objavljenih oglasov (nepremicnine.net, bolha.com, javne skupine na Facebooku) obdelujemo besedilo oglasa, naslov ali lokacijo, fotografije (samo povezave, ne kopij) ter kontakt, ki ga je oglaševalec sam objavil (telefon, e-pošta, ime). Namen: da lahko iskalec oglas najde in se sam obrne na oglaševalca (zakoniti interes iskalca in naš). Besedilo oglasa lahko za povzetek obdela ponudnik umetne inteligence. Kontakt izbrišemo najpozneje 7 dni po zadnjem pojavu oglasa, besedilo oglasa pa 30 dni po tem, ko oglasa ni več; po izteku teh rokov od številke ostane samo enosmerna razpršena vrednost, s katero prepoznamo istega oglaševalca. Izjema so redki oglasi, ki jih označimo kot preizkusni vzorec za naše teste: pri teh besedilo ostane, kontakt pa se izbriše enako kot pri vseh drugih. Dokler je oglas aktiven, je objavljena kontaktna številka vidna v aplikaciji vsakemu obiskovalcu, ki oglas odpre. Najemodajalcem nikoli ne pišemo v imenu iskalcev. Če si oglaševalec in ugovarjaš obdelavi, piši na [email protected] in tvoj oglas oziroma kontakt odstranimo.
Obdelovalci in prenosi
- Cloudflare — gostovanje strani, shramba podatkov, pošiljanje e-pošte.
- Stripe — plačila in upravljanje naročnine.
- Ponudniki potisnih obvestil tvojega brskalnika (Google, Apple, Mozilla).
- Anthropic — povzemanje besedila oglasov (brez podatkov uporabnikov).
- Apify — branje javnih skupin na Facebooku.
Nekateri od njih podatke obdelujejo tudi v ZDA, na podlagi okvira EU–ZDA za zasebnost podatkov ali standardnih pogodbenih klavzul. Fotografije oglasov nalaga tvoj brskalnik neposredno z izvornih strani, zato te strani vidijo tvoj IP-naslov.
Tvoje pravice
Imaš pravico do dostopa, popravka, izbrisa, omejitve obdelave, prenosljivosti in ugovora ter pravico, da privolitev kadarkoli prekličeš. Piši na [email protected]. Piši z e-naslova svojega računa, da te lahko prepoznamo. Račun s celotno vsebino (upravičenost, shranjeno stanje, vse prijave na vseh napravah in naročnine na obvestila) izbrišeš tudi sam v aplikaciji, pod Profil → Izbriši račun; morebitna Stripe naročnina se ob tem prekliče takoj. Zapis »ta račun je preizkus že porabil« po brisanju ostane, ker je edina ovira proti neskončnemu preizkusu. Podatke v brskalniku izbrišeš tako, da počistiš podatke strani najemko.app. Pritožbo lahko vložiš pri Informacijskem pooblaščencu (ip-rs.si).
Ne izvajamo avtomatiziranega odločanja ali profiliranja, ki bi imelo pravne učinke zate.
Privacy
Last updated: 26 Sep 2026
Controller
Gal Aleksej Komljanec, private individual, Slovenia · [email protected]
In short
- Full use requires an account: that is your email address and nothing else. There is no password — you sign in with a code sent to your inbox. Without signing in, the app knows you only by a random device ID created by your browser.
- Your questionnaire answers, notes, conversations and likes are stored in your browser; when you are signed in we also keep them with your account, so they are the same on every device. We do send two things: anonymous event statistics (that some listing was opened or liked) and a recording of your use — what was on the screen, where you tapped and what you typed — so that we can see where the app gets stuck. Recordings stay with us, we keep them for 30 days, and you turn them off in Profile. One thing is never recorded: the six-digit sign-in code.
- You send messages to landlords yourself (WhatsApp, SMS or email); their content does not pass through us.
- We use no advertising or tracking cookies. The only cookie is nj_s, which keeps you signed in; it lasts one year and signing out deletes it.
What we process
1. Account and sign-in. Your email address (kept for as long as the account exists, and at most 400 days after you last used it), your chosen language and the ID of the device the account was created on. The sign-in code is stored only as a one-way hash and is valid for 15 minutes; we delete it once you have signed in. The sign-in itself is the nj_s cookie, of which we store only a one-way hash; it lasts one year. So that nobody can flood us with sign-in codes, we keep a one-way hash of your IP address and a counter for two hours — we never store the IP address itself. To keep the trial fair we also keep a record that “this account has used its trial” (400 days; this one survives deleting the account, otherwise the trial would be endless) and a counter that “two trials have been started from this device” (180 days). Purpose: signing in, performing the contract and preventing abuse (performance of the contract and legitimate interest).
2. Account state. When you are signed in we keep with your account what you have told the app and done in it: your questionnaire answers and filter (including your name, age and commute destination, if you entered them), conversations with notes, message drafts and checklists, the landlord phone numbers you revealed, and hidden, liked and compared listings. Where you left off on the page and the interface language stay in your browser only. We do not read or analyse this and never write it to logs; it is opened only by signing in to your account, including through a link in an alert email (7 days) — so do not forward such an email. Without signing in we hold none of this. Purpose: so that the app is the same on every device and browser (performance of the contract). Kept: 400 days after you last used it; deleted together with the account.
3. Device ID, usage statistics and session recordings. A random device ID and in-app events (for example "listing opened", "alerts turned on", listing ID, time). On top of that we record how you use the app: what was on the screen, where you tapped, how you scrolled and the text you type — including the draft message to a landlord and your questionnaire answers. The purpose is a single one: to see where the app gets stuck, because almost nobody tells us themselves. We never record the six-digit sign-in code — it is masked before it leaves your browser. There are no card details in the app, because you enter them directly with Stripe. Recordings are stored with us on Cloudflare and go to no new processor; we use no third-party analytics service and the recording sets no cookie. You turn recording off in Profile → Don’t record me, and it takes effect immediately. Purpose: running and improving the service (legitimate interest; you can object to this processing at any time). Kept: events 180 days, recordings 30 days.
4. New-listing alerts. If you turn them on: your account’s email address and/or the push address of one browser on your phone, your filter (type of place, budget, number of people), language and quiet hours. Purpose: sending alerts (your consent). Kept for 180 days from the last time you turned them on; deleted immediately when you turn alerts off or click unsubscribe in a message.
5. Subscription. Your account key, plan, expiry date, consent to immediate start, and your Stripe customer and subscription IDs. When a payment starts we send Stripe the email address of your account, so that the receipt goes to it. You enter your name and card details directly with Stripe and they never reach us. Purpose: performing the contract and accounting duties. Kept until the end of the paid period plus 30 days; Stripe keeps payment data under its own policy and the law.
6. Feedback. The text you send through the form, with the device ID and screen. Purpose: replying and improving (legitimate interest). Kept for 180 days. Do not include personal data you do not want to share.
7. Share and install links. When you install the app to your home screen or share a link, the address may contain a copy of your settings. Do not share such links if you do not want to.
Landlords’ data
From publicly posted listings (nepremicnine.net, bolha.com, public Facebook groups) we process the listing text, address or location, photos (links only, never copies) and the contact the advertiser published (phone, email, name). Purpose: so that a seeker can find the listing and contact the advertiser themselves (the seeker’s and our legitimate interest). Listing text may be summarised by an AI provider. Contacts are deleted at the latest 7 days after the listing was last seen, and the listing text 30 days after the listing is gone; once those periods pass, all that is left of the number is a one-way hash, which we use to recognise the same advertiser. There is one exception: a small number of listings marked as a test sample for our own tests keep their text — their contacts are deleted just like all the others. While a listing is active, the phone number the advertiser published is visible in the app to any visitor who opens that listing. We never message landlords on behalf of seekers. If you are an advertiser and object to this processing, write to [email protected] and we will remove your listing or contact.
Processors and transfers
- Cloudflare — hosting, data storage, sending email.
- Stripe — payments and subscription management.
- Your browser’s push services (Google, Apple, Mozilla).
- Anthropic — summarising listing text (no user data).
- Apify — reading public Facebook groups.
Some of them also process data in the USA, under the EU–US Data Privacy Framework or standard contractual clauses. Listing photos are loaded by your browser directly from the source sites, so those sites see your IP address.
Your rights
You have the right to access, rectification, erasure, restriction, portability and objection, and you can withdraw consent at any time. Write to [email protected]. Write from your account's email address so that we can identify you. You can also delete the account and everything in it (entitlement, saved state, every sign-in on every device, and alert subscriptions) yourself in the app, under Profile → Delete account; any Stripe subscription is cancelled immediately at the same time. The record that “this account has used its trial” remains after deletion, because it is the only thing standing between us and an endless trial. You can delete the data in your browser by clearing site data for najemko.app. You can lodge a complaint with the Slovenian Information Commissioner (ip-rs.si).
We do not carry out automated decision-making or profiling with legal effects on you.