Privacy Policy

This privacy policy applies to the Budi Mi Podrška app for mobile devices, together with any related services operated by Savez Društava Multiple Skleroze Hrvatske (collectively, the “Application”). Savez Društava Multiple Skleroze Hrvatske is hereby referred to as the “Service Provider”.

What information does the Application obtain and how is it used?

When the Application is first opened, it asks you to provide your first name, last name, and email address. This information is stored locally on your device so that the Application can address you by name, and is transmitted once to a server operated by the Service Provider’s technical partner, Pelion d.o.o., for the purpose of maintaining a record of Application users. Transmission occurs only on first entry, or when you change the information you previously entered. Providing this information is voluntary, and this processing is based on your consent under Article 6(1)(a) GDPR. No user account is created and no password is set.

The Application provides tools for keeping personal health notes, in the “Bilješke” and “Moj planer” sections. These include:

  • a food diary,
  • an activity diary covering walking, exercise, and sleep,
  • daily notes,
  • history of your condition and test results,
  • therapies and medication,
  • scheduled appointments and activities.

This information remains solely on your device. It is stored in the Application’s local database and is not transmitted to the Service Provider, to Pelion d.o.o., or to any third party. The Service Provider has no access to it and cannot view it.

If Android backup is enabled on your device, the Android operating system may copy the Application’s data, including these notes, to your private Google account. Such a copy is governed by Google’s terms and can be disabled in your device settings.

If the Application is used with an active internet connection, technical protocol data (such as your ephemeral IP address) is transmitted to facilitate network connectivity when educational content is retrieved. The Application does not collect crash diagnostic data and uses no error-reporting or analytics service. The Application displays no advertising and performs no user profiling.

Does the Application collect precise real time location information of the device?

This Application does not collect precise information about the location of your mobile device. The only permission the Application requests is internet access, which is required to retrieve content. The Application does not access your contacts, camera, microphone, photos, or files.

Do third parties see and/or have access to information obtained by the Application?

The first name, last name, and email address described above are processed by Pelion d.o.o., which acts as a data processor on the Service Provider’s behalf and also maintains the content management system from which the Application retrieves its educational content.

Educational videos and podcasts are played through the embedded YouTube player. During playback, Google LLC may collect data in accordance with its own privacy policy, available at https://policies.google.com/privacy.

The Application also contains links to external websites, including sdmsh.com.hr and pliva.hr. Opening those websites is governed by the privacy policies of their respective owners.

No other third-party services receive data from the Application. The personal health notes described above are not shared with anyone. Personal data is never sold, rented, or used for marketing purposes.

What are my opt-out rights?

You have control over the information held by the Application:

  • Logging out within the Application deletes the first name, last name, and email address stored on your device.
  • Uninstalling the Application stops all data transmission from your device and permanently deletes all data held by it, including all personal health notes. This action is irreversible, as these notes cannot be recovered or exported.

You may also request the removal of voluntarily-provided personal information at any time by contacting the Service Provider at sdms_hrvatske@sdmsh.hr.

How long is data retained?

The first name, last name, and email address are retained for as long as the record of Application users serves its purpose, or until you request deletion. Personal health notes remain on your device until you delete them or uninstall the Application; the Service Provider does not retain them, as it never receives them. Voluntarily-provided information sent to us by other means is retained only as long as necessary to respond to your inquiry, or as required by applicable law.

Children

The Application is not intended for children under 16 years of age, or such higher age as required by applicable law. The Service Provider does not knowingly solicit data from children or market to them. If you voluntarily provide personal information and are under 16 years of age, your parent or guardian must provide consent on your behalf where permitted by law. If a child under 16 has provided personal information, a parent or guardian may request its deletion at sdms_hrvatske@sdmsh.hr.

Security

Educational content is retrieved into the Application over encrypted connections (HTTPS). Personal health notes are stored in the Application’s internal storage, which other applications on the device generally cannot access. The Application does not add further protection such as a PIN or biometric lock, so securing your device with a screen lock is recommended. The Service Provider implements reasonable safeguards to protect systems and any data it holds. However, no security system is completely secure.

Data Breach Notification

If a breach occurs involving data collected by the Application or voluntarily provided to the Service Provider, the Service Provider will notify affected users as required by applicable law (including, where applicable, Article 33 and 34 GDPR).

Changes

The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with an effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.

Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at sdms_hrvatske@sdmsh.hr.

This privacy policy is effective as of 1.1.2026.

Your Consent

If you voluntarily provide information to the Service Provider and processing is based on consent, you may withdraw that consent at any time without affecting processing carried out before withdrawal, by logging out within the Application or by contacting the Service Provider.

Contact Us

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at sdms_hrvatske@sdmsh.hr.