This application ("Dovezou") is operated by Karel Attl, a natural person based in the Czech Republic (hereinafter "we" or "operator"). We take the protection of your personal data seriously. This document explains what data we process, why, and how we protect it.
1. Data We Collect
| Data |
Purpose |
Storage |
| Email address |
Sign in with Apple authentication |
Supabase (EU) |
| Package tracking numbers |
Tracking package delivery status |
Device + Supabase + iCloud |
| Carrier name |
Querying the correct carrier API |
Device + Supabase + iCloud |
| Device token (APNs) |
Delivering push notifications |
Supabase (EU) |
| Location |
Showing nearest pickup points on the map |
On-device only, never sent to our servers |
| Camera input |
Scanning barcodes and QR codes |
On-device only, never stored |
2. Data We Do Not Collect
- We do not use any third-party analytics tools (no Google Analytics, Firebase, Mixpanel, etc.)
- We do not track your behavior within the app
- We do not display advertisements
- We do not share your data with third parties for marketing purposes
- We do not use tracking pixels or cross-app identifiers
3. Why We Process Data
All data is processed solely for the purpose of providing the package tracking service:
- Tracking numbers — sent to the respective carrier's API (Ceska Posta, Zasilkovna, PPL, DPD, GLS) to retrieve the current delivery status.
- Email — used for user account identification and cross-device data synchronization.
- Device token — used to deliver push notifications when a package status changes.
- Location — processed exclusively on-device to display nearest pickup points. Never sent to our servers.
4. Where Data Is Stored
- On-device — local database (SwiftData) within the app and in a shared container for the widget and share extension.
- iCloud (Apple CloudKit) — package synchronization across your devices and family sharing. Data is stored in your private iCloud account and encrypted by Apple.
- Supabase — backend hosted in the EU. Stores email, device tokens, and tracking numbers for server-side package status polling.
5. Third-Party Data Sharing
We share your tracking numbers with carrier APIs solely to retrieve delivery status:
- Ceska Posta (ceskaposta.cz)
- Zasilkovna (zasilkovna.cz)
- PPL (ppl.cz)
- DPD (dpd.cz)
- GLS (gls-czech.cz)
No other data is shared with these carriers. We do not share your data with any other third party.
6. Subscriptions and Payments
The "Dovezou Plus" subscription is processed exclusively through the Apple App Store. We do not have access to your payment information (card number, billing address). Subscription verification is performed on-device using StoreKit 2.
7. Your Rights
Under GDPR, you have the right to:
- Access — request a copy of your data.
- Rectification — request correction of inaccurate data.
- Erasure — request deletion of your account and all data. In the app: Settings → Delete Account.
- Portability — request export of your data in a machine-readable format.
- Objection — object to data processing.
To exercise these rights, contact us at info@dovezou.cz.
8. Account Deletion
You can delete your account and all associated data directly in the app under Settings. After account deletion:
- We remove your email, device tokens, and tracking numbers from the Supabase server.
- Local data on your device remains until you uninstall the app.
- iCloud data is governed by your Apple account settings.
9. Security
- All communication uses HTTPS.
- Authentication uses Sign in with Apple (security tokens, no passwords).
- The backend (Supabase) is secured with Row Level Security — each user can only access their own data.
- Push notifications use Apple Push Notification service (APNs) with JWT authentication.
10. Children
The app is not intended for children under 13. We do not knowingly collect data from children.
11. Changes
We may update this policy from time to time. We will notify you of significant changes through the app or by email.
12. Contact
If you have questions about privacy, contact us:
Karel Attl
Email: info@dovezou.cz
Website: dovezou.cz