Privacy Policy

1. Data controller

The data controller is the operator of the “Porodične priče” service (porodicneprice.com). For any questions about your data or to exercise your rights, email podrska@porodicneprice.com.

2. What data we collect

• Account: name, email address and password (stored encrypted — we cannot see it).
• Content you create: voice recordings, photos, transcribed and edited story text, titles and dedications.
• Family tree: the names and relationships of family members you enter.
• Technical data: basic data needed to run the service and for security (e.g. browser type) and login cookies.

Important about elders who record: when you send someone a link to tell a memory, their voice and story are their personal data. Share the link only with people who consent to being recorded — as the organizer, you are responsible for having their consent.

3. Why we process data and on what basis

• To provide the service — account, storage and display of stories: performance of a contract.
• To turn a recording into written text: necessary for the service, and voice recordings are processed with the consent of the person recording.
• To communicate with you about the service and support: legitimate interest and the contract.

We never use your stories for advertising, and we never sell them.

4. Voice and recordings — specifically

Voice is sensitive personal data. The original recording is kept exactly as spoken, unchanged, and belongs to the person who spoke it. We forward data to processors (section 5) solely to provide the service — they do not use it for their own purposes or to train their models.

5. Who we entrust data to (processors)

To provide the service we use trusted processors that process data solely on our instructions and under a data-processing agreement:

• Supabase — database, storage of recordings and photos, and login. Data is stored in the EU (Ireland).
• ElevenLabs — voice-to-text (transcription). USA.
• OpenAI — drafting the polished written text from the transcript. USA.
• unlimited.rs — web hosting. Serbia.

We do not share your data with anyone else for marketing.

6. International transfers

The main storage (Supabase) is in the EU. Some processors (ElevenLabs, OpenAI) are in the USA; those transfers rely on appropriate GDPR safeguards (standard contractual clauses).

7. How long we keep data

We keep data while you have an account and until you request deletion. When you delete a story or your account, we delete the associated recordings and text from active systems; backups rotate within a reasonable period.

8. Your rights

Under the GDPR, you have the right to:

• access your data and receive a copy;
• correct inaccurate data;
• erase your data (“right to be forgotten”);
• data portability — export all your books and recordings at once, in a single file;
• restrict or object to processing;
• withdraw consent at any time;
• lodge a complaint with a supervisory authority (in Serbia: the Commissioner for Information of Public Importance and Personal Data Protection; in the EU: your country’s authority).

To exercise your rights, email podrska@porodicneprice.com — we respond within the time limits set by the GDPR.

9. Cookies

We use only essential cookies (for login and session security). We do not use advertising or cross-site tracking cookies.

10. Children

Accounts and organizing stories are intended for adults. Stories may contain data about family members of all ages — you, as the organizer, decide what is kept and shared.

11. Security

We protect data with technical and organizational measures (encrypted transfer, access control). No system is perfectly secure, but we take protecting your memories seriously.

12. Changes to this policy

If we change it significantly, we will notify you in the app or by email. The last-updated date is shown at the top of this page.

13. Contact

For any privacy questions: podrska@porodicneprice.com.