Legal
Privacy Policy
This policy explains how SF Technologies EOOD handles personal data when you use our mobile apps, software products, and this website.
Last updated:
1. Who we are
SF Technologies EOOD ("SF Technologies", "we", "us") is a company based in Sofia, Bulgaria, with company ID (EIK/UIC) 208781081. We are the data controller for the personal data described in this policy.
You can reach us about anything related to privacy at contact@sftechnologies.dev.
2. Scope
This policy applies to all apps and software products published by SF Technologies (together, the "Apps") and to the website sftechnologies.dev. Some Apps process additional data specific to their features; those details are listed in App-specific information below and form part of this policy.
3. Data we may collect
We aim to collect as little data as possible. Depending on the App and how you use it, this may include:
- Account information, such as your email address and name, when you create an account or sign in with a provider like Apple or Google.
- Content and preferences you create or choose inside an App, such as settings, saved items, and progress.
- Usage data, such as which features are used, app version, and interaction events, collected in aggregated or pseudonymous form.
- Device and diagnostic data, such as device model, operating system version, language, time zone, crash logs, and performance data.
- Purchase information, such as whether you have an active subscription. Payments are processed by Apple or Google; we never receive your card details.
- Notification tokens, if you allow push notifications.
- Communications, such as the content of emails you send us.
This website does not use cookies or tracking technologies and does not collect personal data beyond standard server logs kept by our hosting provider for security purposes.
4. How we use data
- To provide, maintain, and sync the features of our Apps.
- To create and manage your account and authenticate you.
- To process and verify in-app purchases and subscriptions.
- To send notifications you have opted in to, such as reminders.
- To diagnose crashes, fix bugs, and improve performance and usability.
- To respond to your questions and support requests.
- To prevent fraud and abuse and to comply with legal obligations.
We do not sell your personal data and we do not use it for third-party advertising.
5. Legal bases for processing
Under the EU General Data Protection Regulation (GDPR), we rely on the following legal bases:
- Performance of a contract, to provide the App and features you request.
- Legitimate interests, to keep our Apps secure, fix problems, and improve them.
- Consent, for example for push notifications or optional analytics. You can withdraw consent at any time.
- Legal obligations, for example accounting and tax requirements.
6. Third-party services
We use trusted service providers that process data on our behalf, under contracts that require them to protect it. Depending on the App, these may include:
- Cloud hosting and databases, to store account and app data securely.
- Analytics, to understand aggregated usage and improve our Apps.
- Crash reporting, to detect and fix errors.
- In-app purchases through the Apple App Store and Google Play, and subscription management services. Purchases are also subject to the privacy policies of Apple and Google.
- Sign-in providers, such as Sign in with Apple and Google Sign-In.
- Push notification services provided by Apple, Google, and their intermediaries.
The specific providers used by each App are listed in the app-specific sections below.
7. International transfers
Some providers may process data outside the European Economic Area. When that happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.
8. Data retention
We keep personal data only as long as needed for the purposes above. Account data is kept while your account is active and deleted, or anonymized, within 30 days after you delete your account, unless we must keep certain records longer by law (for example, accounting records). Diagnostic and crash data is typically kept for no more than 12 months. Emails you send us are kept as long as needed to handle your request.
9. Your rights
If you are in the EU/EEA or a country with similar laws, you have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- request deletion of your data;
- restrict or object to certain processing;
- receive your data in a portable format;
- withdraw consent at any time, without affecting earlier processing.
To exercise these rights, email contact@sftechnologies.dev. Where an App offers account deletion in its settings, you can also use that option. We will respond within one month. You also have the right to lodge a complaint with a supervisory authority; in Bulgaria this is the Commission for Personal Data Protection.
10. Security
We use appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, and working only with reputable providers. No system is completely secure, but we work to protect your information and will notify you and the authorities of a data breach where required by law.
11. Children
Our Apps are not directed at children under 13, or the minimum age required in your country, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. We will change the "Last updated" date above and, for significant changes, let you know inside the relevant App or by email.
13. App-specific information
Noktu
Noktu uses an account so your streaks, saved facts, and progress stay in sync across devices. We do not sell your data or show third-party ads.
Data collected:
- Account details from Sign in with Apple or Google Sign-In (email address and, if you share it, your name).
- Profile and preferences, such as the topics you are interested in, your display name, and your time zone.
- Learning progress, such as facts read and saved, streaks, achievements, and league points. Your display name and league points may be visible to other users on leaderboards.
- A push notification token, if you allow notifications, so we can send reminders.
- Subscription status, if you purchase a subscription. Payment details are handled by Apple or Google and never reach us.
Service providers:
- Supabase: Authentication, database, and hosting of app data.
- Apple and Google: Sign-in, in-app purchases, and push notification delivery.
- RevenueCat: Managing subscription status across platforms.
- Expo: Delivering push notifications to your device.
You can delete your Noktu account and associated data from within the app or by emailing contact@sftechnologies.dev.
14. Contact
SF Technologies EOOD
Sofia, Bulgaria
Email: contact@sftechnologies.dev
See also our Terms of Use.