Privacy Policy

Last updated: Mon, 8 June

This Privacy Policy describes how the eCity digital platform (Voznesensk, Ukraine) collects, uses, and protects personal data of users of the mobile app and website.

1. Who we are

The service is operated by the eCity development team for residents, businesses, and the city administration of Voznesensk.

Privacy contact: caxnoigor@gmail.com

2. What data we collect

Account

  • name (optional);
  • email address;
  • password hash (passwords are never stored in plain text);
  • session and authentication cookies (Better Auth).

Service usage

  • messages in the city chat;
  • feedback and improvement suggestions;
  • marketplace listings and product photos;
  • events, job posts, and business profiles you create;
  • technical data: page path when submitting feedback, interface language (ecity_locale cookie).

Location and maps

  • when using shelter, business, or other map features, the app may request device location only with your consent in the browser or OS.

Push notifications and PWA

  • if you allow notifications, subscription identifiers are stored to deliver push messages (e.g. air alerts).

OAuth

  • when signing in with GitHub, we receive profile data provided by the provider (email, name, account identifier).

3. Why we use data

  • to provide and improve municipal digital services;
  • authentication and account security;
  • content moderation (chat, marketplace, feedback);
  • responding to your requests;
  • infrastructure-level stability and error analytics on hosting platforms.

4. Legal bases

We process data based on:

  • contract performance (providing the service after registration);
  • your consent (location, push, OAuth);
  • legitimate interest (security, abuse prevention).

5. Storage and third parties

Data is stored on servers in the EU or countries where our infrastructure providers are located:

  • Vercel — application hosting;
  • Supabase (PostgreSQL) — database;
  • GitHub — optional OAuth sign-in;
  • third-party public APIs (weather, Prozorro tenders, exchange rates, etc.) receive requests without your account personal data unless you explicitly provide it.

We do not sell personal data to third parties.

6. Retention

Data is kept while your account is active or as needed to provide the service and meet legal obligations. You may request account deletion by emailing caxnoigor@gmail.com.

7. Your rights

You have the right to:

  • access your data;
  • correct inaccurate profile data;
  • request deletion (subject to legal exceptions);
  • withdraw consent where applicable;
  • lodge a complaint with a data protection authority.

8. Security

We apply organizational and technical measures: HTTPS, restricted database access, password hashing, and moderation of public content.

9. Children

The service is not intended for children under 14 without parental or guardian consent.

10. Changes

We may update this policy. The current version is always available on this page. Material changes will be communicated in the app or by email where appropriate.