Obaveštenje o privatnosti
Verzija od 13. oktobra 2026. · Popravimo je u pilot fazi.
1. Ko obrađuje podatke
Rukovalac podacima je Innovatica Technologies FZ-LLC, društvo registrovano u slobodnoj zoni Ras Al Khaimah, Ujedinjeni Arapski Emirati. Za sva pitanja o podacima pišite na info@innovatica.ai.
2. Koje podatke obrađujemo i zašto
| Podaci | Svrha | Osnov |
|---|
| Nalog: e-adresa, uloga (građanin, nadležna služba, dežurni, administrator), datum prihvatanja pravila i uslova. Kod za prijavu čuvamo samo u šifrovanom obliku (heš) i važi 10 minuta. | Prijava na nalog, dnevna ograničenja, zaštita od zloupotrebe. | Izvršenje ugovora (Uslovi korišćenja). |
| Prijave i radnje („i ja“, „još uvek je tu“, potvrda, osporavanje…): fotografija, vrsta problema, kratka napomena o tome gde tačno je problem (nije obavezna; kod „Drugi problem“ je opis problema), GPS položaj telefona i njegova preciznost u trenutku radnje, vreme, naziv ulice i mesta očitan sa mape. | Javna evidencija problema u javnom prostoru; provera da je osoba bila na licu mesta; precizniji položaj problema iz više merenja. | Izvršenje ugovora; legitimni interes da evidencija bude tačna i javna. |
| E-poruke o slučajevima: kada se promeni slučaj u kome ste učestvovali (objavljen, primljen, javljeno da je popravljeno, popravljen…), pošaljemo vam kratku e-poruku na jeziku koji koristite u aplikaciji. Beležimo šta smo poslali, da istu vest ne pošaljemo dva puta. Uključene su dok ih ne isključite (Meni → Nalog, ili jednim klikom iz svake poruke). | Da znate šta je bilo sa vašom prijavom i da možete da proverite na licu mesta. | Izvršenje ugovora; legitimni interes. |
| Prijave fotografija i zahtevi za uklanjanje: razlog i kratko objašnjenje; kod zahteva bez naloga i e-adresa na koju šaljemo potvrdu i odluku. Beležimo odluku dežurnog i kada je doneta. | Uklanjanje sadržaja koji krši pravila ili nečija prava; evidencija odluka. | Legitimni interes; poštovanje zakonskih obaveza. |
| Provere u blizini: da bismo vam pokazali slučajeve u blizini kojima treba provera, aplikacija šalje vaš trenutni položaj. Koristimo ga samo za tu pretragu i ne čuvamo ga. | Predlog sledeće korisne provere. | Izvršenje ugovora. |
| Identifikator uređaja: slučajan broj koji aplikacija napravi i čuva u vašem pregledaču, a šalje uz prijave i radnje. | Dnevno ograničenje broja prijava po uređaju, da jedna osoba ne bi zaobilazila pravila sa više naloga. | Legitimni interes (sprečavanje zloupotrebe). |
| Tehnički podaci: IP adresa (samo u radnoj memoriji servera, za ograničenje broja zahteva u minuti; ne upisuje se u bazu); serverski zapisi o radu (vreme, tražena adresa bez parametara — dakle bez položaja, greške). | Bezbednost i rad servisa. | Legitimni interes. |
Pre čuvanja fotografije uklanjamo sve njene metapodatke, uključujući GPS položaj i podatke o uređaju zapisane u fotografiji.
3. Šta je javno, a šta nije
Javno je: čim pošaljete prijavu — položaj problema na mapi, vrsta problema, ulica i mesto, stanje slučaja i njegova istorija sa datumima (bez sati); fotografija — kad je dežurni pogleda, ili odmah kod proverenih naloga — i napomena „Gde tačno?“, kad je propusti AI provera ili dežurni. Ako je fotografija uklonjena, javan je razlog. Ko je šta uradio prikazuje se samo kao „građanin“, ime nadležne službe (nikad ime zaposlenog) ili „provera“, pod oznakom koja važi samo za taj slučaj, pa se ista osoba ne može pratiti od slučaja do slučaja.
Nikada nije javno: vaša e-adresa, GPS položaji pojedinačnih radnji i tačna vremena.
Važno: položaj prijave je mesto na kome ste stajali kada ste je poslali, jer se prijavljuje samo sa lica mesta. Iz javnog položaja problema može se zaključiti da je neko tu bio tog dana.
4. Ko još vidi podatke
- Dežurni gledaju fotografije novih naloga pre objave, prijavljene fotografije i zahteve za uklanjanje (razlog, objašnjenje i da li je zahtev stigao bez naloga — ne i e-adresu). Administrator vidi spisak naloga: e-adresu, ulogu, službu (za zaposlene u nadležnoj službi, uz belešku kako je to provereno), datum otvaranja i poslednje prijave, broj prijava, i zapis promena uloga; odluku na zahtev za uklanjanje šaljemo automatski na adresu iz zahteva. Proveru trenutno rade ljudi; automatska provera fotografija (veštačka inteligencija) nije uključena — pre nego što je uključimo, izmenićemo ovo obaveštenje.
- Microsoft (Azure) nam pruža servere, bazu podataka i slanje e-pošte. Podaci se čuvaju u Evropskoj uniji (Švedska).
- Automatsko zamagljivanje i AI prepoznavanje. Odmah posle snimanja, umanjena kopija fotografije (do 1024 piksela, bez metapodataka, bez vaše e-adrese i bez položaja) šalje se — pre zamagljivanja — servisu Microsoft Azure AI Vision na našoj platformi u Švedskoj (EU), koji pronalazi ljude, registarske tablice i brojeve telefona; aplikacija ih zamagljuje na vašem telefonu. Tako zamagljena kopija zatim ide jednom od modela veštačke inteligencije koje koristimo, koji na fotografiji traži ostale stavke sa naše liste za zamagljivanje (na primer imena na vratima, dokumente, ekrane, decu, unutrašnjost stanova) i prepoznaje vrstu problema; i te delove aplikacija zamagli pre slanja prijave. Modele pozivamo preko platforme Microsoft Azure AI Foundry; to mogu biti modeli kompanija Anthropic (Claude), OpenAI, xAI (Grok) i drugih, a obrada može biti i van Srbije i Evropske unije, uključujući SAD, na osnovu ugovora o obradi podataka sa standardnim ugovornim klauzulama. Ljude samo pronalazimo da bismo ih zamaglili — nikoga ne prepoznajemo i ne pravimo biometrijske šablone. Osnov je legitimni interes zaštite privatnosti ljudi koji se slučajno nađu na fotografiji. Pružaoci ne koriste fotografije za obuku modela; radi sprečavanja zloupotreba mogu ih kratko čuvati, najduže 30 dana. Listu za zamagljivanje vodimo mi i dopunjujemo je kad nam javite da nešto nije sakriveno. Ako automatska provera ne uspe, fotografiju pre objave pogleda dežurni. Automatsko zamagljivanje može nešto da propusti — fotografiju možete prijaviti ili zatražiti njeno uklanjanje. Kratku napomenu uz prijavu („Gde tačno?“) — samo tekst, bez fotografije, e-adrese i položaja — isti modeli proveravaju pre objave, da u njoj ne bi bilo podataka o ljudima, uvreda, politike ili reklama.
- Kada otvorite aplikaciju, vaš pregledač sam preuzima mapu od OpenFreeMap, fontove od Google Fonts i biblioteku za mapu sa cdnjs (Cloudflare). Ti servisi pri tome vide vašu IP adresu, a OpenFreeMap i deo mape koji gledate.
- Pri prijavi na nalog Cloudflare Turnstile proverava da niste automatizovani program; Cloudflare pri tome vidi vašu IP adresu i osnovne podatke o pregledaču. Osnov je legitimni interes zaštite servisa od lažnih naloga.
Ne prodajemo i ne iznajmljujemo lične podatke. Nemamo reklame ni kolačiće za praćenje.
5. Koliko dugo čuvamo podatke
- Nalog dok ga ne obrišete. Prijava na nalog (sesija) traje 30 dana.
- Prijave i radnje čuvamo kao javnu evidenciju dok slučaj postoji, uključujući GPS položaj svake radnje — on služi samo za precizniji položaj problema i nikada se ne objavljuje. Kada obrišete nalog, one ostaju, ali bez veze sa vama: brišemo vezu sa nalogom i identifikator uređaja.
- Identifikator uređaja uz radnju (za dnevno ograničenje po uređaju) brišemo posle 90 dana.
- Uklonjene fotografije (sklonjene ili uz uklonjenu prijavu) brišemo 30 dana posle odluke dežurnog, a fotografiju povučene prijave 30 dana posle povlačenja; fotografija sklonjena samo zbog prijave čeka odluku dežurnog; slučaj i razlog ostaju u evidenciji. Uklonjene prijave nisu javne.
- Prijave fotografija i zahteve za uklanjanje čuvamo kao evidenciju odluka dok slučaj postoji.
- Zamagljivanje i AI prepoznavanje: kopije poslate detektoru i modelu ne čuvamo — samo otisak (SHA-256, da istu fotografiju ne plaćamo dvaput), koji servis ili model je odgovorio, gde je našao šta treba zamagliti (pravougaonici, bez slike), šta je predložio, koliko je trajalo i koštalo; uz prijavu i koji ste predlog videli, da bismo merili tačnost modela.
- Upozorenja i zabrane zbog zloupotrebe: kad dežurni ukloni prijavu kao zloupotrebu, čuvamo zapis o upozorenju ili zabrani — nalog, oznaku telefona sa kog je prijava poslata, slučaj, ko je odlučio, do kada zabrana traje i, za trajnu zabranu administratora, pisani razlog. Oznaka telefona ostaje u tom zapisu i posle 90 dana i ako se nalog obriše, da zabrana ne bi mogla da se zaobiđe novim nalogom. Osnov je legitimni interes zaštite servisa od zloupotrebe; zapis brišemo dve godine posle isteka zabrane (upozorenje ističe istog dana); zapis o trajnoj zabrani čuvamo dok zabrana traje.
- Serverske zapise najduže 30 dana.
6. Kolačići i podaci u pregledaču
Koristimo jedan neophodan kolačić, civi_session, koji vas drži prijavljenim (30 dana). U pregledaču čuvamo izabrani jezik, temu, način bojenja mape i identifikator uređaja.
7. Vaša prava
Imate pravo na pristup svojim podacima, ispravku, brisanje, ograničenje obrade, prenosivost i prigovor na obradu zasnovanu na legitimnom interesu. Nalog možete sami obrisati u aplikaciji (Meni → Nalog → Obriši nalog). Ako se na nekoj fotografiji prepoznajete vi ili vaša imovina, pošaljite zahtev za uklanjanje (nalog nije potreban): fotografiju sklanjamo odmah, a odluku vam šaljemo e-poštom. Za ostale zahteve pišite na info@innovatica.ai.
Imate pravo na pritužbu Povereniku za informacije od javnog značaja i zaštitu podataka o ličnosti, Bulevar kralja Aleksandra 15, 11000 Beograd, www.poverenik.rs.
8. Uzrast
Popravimo je namenjen osobama starijim od 16 godina.
9. Izmene
Kada se ovo obaveštenje bitno promeni, izmenićemo datum verzije i zamoliti vas da ga ponovo prihvatite pre sledeće prijave.
Privacy notice
Version of 13 October 2026 · Popravimo is in a pilot phase.
1. Who processes the data
The controller is Innovatica Technologies FZ-LLC, a company registered in the Ras Al Khaimah free zone, United Arab Emirates. For any question about your data, write to info@innovatica.ai.
2. What we process and why
| Data | Purpose | Basis |
|---|
| Account: e-mail address, role (citizen, authority, reviewer, administrator), the date you accepted the rules and terms. The sign-in code is stored only as a hash and is valid for 10 minutes. | Signing in, daily limits, preventing abuse. | Performance of the contract (Terms of use). |
| Reports and actions ("me too", "still there", confirm, dispute…): the photo, the problem type, a short note on where exactly the problem is (optional; for "Other problem" it describes the problem), the phone's GPS position and its accuracy at the time, the time, the street and place name read from the map. | A public record of problems in public space; checking the person was on the spot; a more precise problem location from several readings. | Performance of the contract; legitimate interest in an accurate public record. |
| Case e-mails: when a case you took part in changes (published, acknowledged, reported fixed, fixed…), we send you a short e-mail in the language you use in the app. We keep a record of what we sent so the same news is never sent twice. They are on until you switch them off (Menu → Account, or one click from any e-mail). | So you know what happened to your report and can check on the spot. | Performance of the contract; legitimate interest. |
| Photo reports and takedown requests: the reason and a short explanation; for a request without an account also the e-mail address we send the receipt and the decision to. We record the reviewer's decision and when it was made. | Taking down content that breaks the rules or someone's rights; a record of decisions. | Legitimate interest; compliance with legal obligations. |
| Checks near you: to show you nearby cases that need a check, the app sends your current position. We use it only for that search and do not store it. | Suggesting a useful next check. | Performance of the contract. |
| Device identifier: a random number the app creates and keeps in your browser, sent with reports and actions. | A daily report limit per device, so one person cannot get around the rules with several accounts. | Legitimate interest (preventing abuse). |
| Technical data: IP address (only in the server's memory, for a per-minute request limit; never written to the database); server operation logs (time, the address requested without its parameters — so no positions — and errors). | Security and operation of the service. | Legitimate interest. |
Before a photo is stored we remove all its metadata, including any GPS position and device details recorded in it.
3. What is public and what is not
Public: as soon as you send a report — the problem's location on the map, the problem type, the street and place, the case's status and its history with dates (no times); the photo — once a reviewer has looked at it, or at once for established accounts — and the "Where exactly?" note, once the AI check or a reviewer has passed it. If a photo was taken down, the reason is public. Who did what is shown only as "citizen", the responsible service's name (never a staff member's) or "review", under a label valid for that one case, so the same person cannot be followed from case to case.
Never public: your e-mail address, the GPS positions of individual actions and exact times.
Note: a report's location is where you stood when you sent it, because reports are made only on the spot. The problem's public location can therefore show that someone was there that day.
4. Who else sees the data
- Reviewers look at new accounts' photos before they are published, at reported photos and at takedown requests (the reason, the explanation and whether the request came without an account — not the e-mail address). The administrator sees the list of accounts: e-mail address, role, service (for staff of a responsible service, with a note on how that was verified), date joined and of the last sign-in, number of reports, and the record of role changes; the decision on a takedown request is sent automatically to the address in the request. Review is currently done by people; automated (AI) photo checks are not switched on — before we switch them on, we will update this notice.
- Microsoft (Azure) provides our servers, database and e-mail delivery. The data is stored in the European Union (Sweden).
- Automatic blurring and AI recognition. Right after you take the photo, a reduced copy (up to 1024 pixels, without metadata, your e-mail address or your location) is sent — before blurring — to Microsoft Azure AI Vision on our platform in Sweden (EU), which finds people, number plates and phone numbers; the app blurs them on your phone. The blurred copy then goes to one of the artificial-intelligence models we use, which looks for the other items on our blur list (for example names on doors, documents, screens, children, the inside of homes) and recognises the type of problem; the app blurs those too before the report is sent. We call the models through Microsoft Azure AI Foundry; they may be models by Anthropic (Claude), OpenAI, xAI (Grok) and others, and processing may take place outside Serbia and the European Union, including in the United States, under data-processing agreements with standard contractual clauses. People are only found in order to blur them — no one is identified and no biometric templates are made. The basis is our legitimate interest in protecting the privacy of people who happen to be in a photo. The providers do not use the photos to train models; to prevent abuse they may keep them briefly, for at most 30 days. We keep the blur list and add to it when you tell us something was left visible. If the automatic check fails, a reviewer looks at the photo before it is public. Automatic blurring can miss something — you can report a photo or ask for it to be taken down. The short note with a report ("Where exactly?") — the text only, without the photo, your e-mail address or location — is checked by the same models before it is published, so that it carries no details about people, insults, politics or adverts.
- When you open the app, your browser itself downloads the map from OpenFreeMap, fonts from Google Fonts and the map library from cdnjs (Cloudflare). These services see your IP address, and OpenFreeMap also sees the part of the map you view.
- When you sign in, Cloudflare Turnstile checks that you are not an automated program; Cloudflare sees your IP address and basic information about your browser. The basis is our legitimate interest in protecting the service from fake accounts.
We do not sell or rent personal data. There are no ads and no tracking cookies.
5. How long we keep data
- Your account until you delete it. A sign-in session lasts 30 days.
- Reports and actions are kept as the public record while the case exists, including each action's GPS position — it only makes the problem's location more precise and is never published. When you delete your account they stay, with no link to you: we delete the link to the account and the device identifier.
- The device identifier stored with an action (for the per-device daily limit) is deleted after 90 days.
- Photos taken down (hidden, or with a removed report) are deleted 30 days after a reviewer's decision, and a withdrawn report's photo 30 days after the withdrawal; a photo hidden only because it was reported waits for a reviewer's decision; the case and the reason stay on record. Removed reports are not public.
- Photo reports and takedown requests are kept as the record of decisions for as long as the case exists.
- Blurring and AI recognition: we do not keep the copies sent to the detector and the model — only a fingerprint (SHA-256, so the same photo is not paid for twice), which service or model answered, where it found what to blur (rectangles, no image), what it suggested, how long it took and what it cost; with a report, also which suggestion you saw, to measure the models' accuracy.
- Warnings and bans for misuse: when a reviewer removes a report as misuse, we keep a record of the warning or ban — the account, the identifier of the phone the report came from, the case, who decided, until when and, for an administrator's permanent ban, the written reason. The phone identifier stays in that record beyond 90 days and if the account is deleted, so the ban cannot be got around with a new account. The basis is our legitimate interest in protecting the service from misuse; the record is deleted two years after the ban ends (a warning ends the day it is given); the record of a permanent ban is kept while the ban lasts.
- Server logs for at most 30 days.
6. Cookies and data in your browser
We use one necessary cookie, civi_session, which keeps you signed in (30 days). In your browser we keep your chosen language, theme, map colouring and the device identifier.
7. Your rights
You have the right to access your data, to rectification, erasure, restriction of processing and portability, and to object to processing based on legitimate interest. You can delete your account yourself in the app (Menu → Account → Delete account). If you recognise yourself or your property in a photo, send a takedown request (no account needed): we take the photo down at once and e-mail you the decision. For any other request write to info@innovatica.ai.
You have the right to complain to the Commissioner for Information of Public Importance and Personal Data Protection (Serbia), Bulevar kralja Aleksandra 15, 11000 Belgrade, www.poverenik.rs.
8. Age
Popravimo is for people aged 16 and over.
9. Changes
When this notice changes materially we will update the version date and ask you to accept it again before your next report.