This policy is written to reflect exactly how the Kthema Gati mobile app, dashboard and backend handle data today. Sections marked with a bracketed note still need a final detail confirmed with legal counsel before this page is treated as final and binding.
1. Who We Are
Kthema Gati is a vehicle maintenance platform operated from Elbasan, Albania. [Registered company name and NUIS/NIPT business registration number to be added once confirmed.] For any question about this policy or your data, contact us at info@kthemagati.al or by phone at +355 69 997 8135, Monday–Friday, 08:00–18:00.
For the services booked through our platform, Kthema Gati acts as the data controller for account, booking and payment data. Partner garages receive the data needed to perform the repair (vehicle details, request description, your contact info) and act as independent controllers for the data they generate while servicing your vehicle, such as internal job notes.
2. What Personal Data We Collect
We only collect what's needed to run the booking, tracking and payment experience:
- Identity & contact: full name, email address, phone number (Albanian format)
- Account & security: password (stored bcrypt-hashed, never in plain text), account role (Client/Staff/Admin), account creation date
- Profile: profile picture, stored via our media provider Cloudinary
- Device & push notifications: Firebase Cloud Messaging (FCM) token and basic device info, used only to deliver your notifications
- Vehicle data: brand, model, year, license plate and VIN (if provided)
- Service data: repair request descriptions, scheduled date/time, status history, ratings and comments you leave
- Media uploads: photos, videos and audio recordings you attach to a repair request, plus pickup/return photos and signatures. Photos and videos can carry embedded GPS location data — please be aware of this before uploading media taken with location services enabled
- Financial data: invoice amounts, payment method type, and payment timestamps. [Name of payment processor to be added once billing is fully wired up; card numbers are never stored on Kthema Gati's own servers.]
3. How We Collect It
- Directly from you — when you register, fill out a form, or upload media
- Automatically — device information, FCM token, and timestamps generated as you use the app
- From partner garages — status updates and invoices tied to your booking
4. Why We Process Your Data
- Contract performance — to book and deliver the repair service you request
- Legitimate interest — service quality, fraud prevention, and notifying you about your own requests
- Consent — for optional marketing communications, which you can opt out of at any time
- Legal obligation — invoicing and tax record-keeping under Albanian law
5. Who We Share Data With
- Cloudinary — stores uploaded photos, video, audio and documents. Cloudinary is a US-based processor, meaning your media may be transferred outside Albania/the EU for storage.
- Firebase (Google) — delivers push notifications via FCM; the same cross-border transfer note applies.
- Partner garages — receive the repair request, relevant vehicle details and your contact information needed to perform the service.
- Payment processor — handles the actual card transaction. [Name to be added once a payment gateway is integrated.]
- Our database is hosted on PostgreSQL. [Hosting provider and country to be confirmed for data-residency disclosure.]
We do not sell your personal data to third parties for advertising purposes.
6. How Long We Keep Your Data
Service history is kept according to your plan: Essential retains 6 months of visible history; Comfort and VIP retain your full history for as long as your account is active. [Whether Essential history is deleted or simply hidden after 6 months is to be confirmed.] Photos and videos attached to a completed job are kept for the same period as the related service record. Invoices are retained for the period required by Albanian tax law.
7. Your Rights
- Access, correct or delete the personal data we hold about you
- Request account deletion from the app's account settings, or by emailing info@kthemagati.al
- Withdraw consent for marketing communications and optional push notifications at any time
For questions or complaints about how your data is handled, contact us first at info@kthemagati.al. If you are not satisfied with our response, you may contact Albania's data protection authority, the Commissioner for the Right to Information and Protection of Personal Data (Komisioneri për të Drejtën e Informimit dhe Mbrojtjen e të Dhënave Personale), or the relevant EU authority if you are located in the EU.
8. How We Protect Your Data
- Passwords are hashed with bcrypt and never stored or transmitted in plain text
- Authentication uses signed, time-limited JWT tokens
- Access to data is restricted by role (Client / Staff / Admin)
9. Children's Privacy
Kthema Gati is intended for users aged 18 and over, as an account implies legal ownership or authorized use of a registered vehicle. We do not knowingly collect data from minors.
10. Cookies & Tracking
Our marketing website and dashboard do not currently use analytics or advertising cookies. If that changes, this page will be updated and a cookie consent banner will be added before any tracking begins.
11. Changes to This Policy
If we make material changes to this policy, we'll notify registered users by email or in-app notification before the changes take effect.
12. Contact
Kthema Gati — Elbasan, Albania
Email: info@kthemagati.al
Phone: +355 69 997 8135