Privacy Policy
Last updated: 9 March 2026
1. The data controller and its contact details
| Name of the data controller | SZERECZ GEPESZ Kft. |
|---|---|
| Registered seat | 7434 Mezőcsokonya, Ady Endre utca 29. |
| Tax number | 32393994-2-14 |
| Company registration number | |
| Data protection contact | adatvedelem@ingeen.hu |
| General contact | info@ingeen.hu |
2. Scope and legal background of this privacy policy
This privacy policy applies to the processing of personal data carried out in connection with the use of the Ingeen mobile application (hereinafter: the "Application") and the ingeen.hu website (hereinafter: the "Website").
The legal background of the processing is provided by the following legislation:
- Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR)
- Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Infotv.)
- Act CVIII of 2001 on Certain Issues of Electronic Commerce Services (Eker. tv.)
- Act XLVIII of 2008 on the Basic Requirements of Commercial Advertising Activity (Grt.)
3. Purpose and legal basis of the processing
3.1. Registration and account management
| Personal data processed | Purpose | Legal basis | Retention period |
|---|---|---|---|
| E-mail address | Creating an account, signing in, communication | Performance of a contract (GDPR Article 6(1)(b)) | Until the account is deleted |
| Full name | Identifying the user within the application | Performance of a contract (GDPR Article 6(1)(b)) | Until the account is deleted |
| Phone number | Keeping in contact, client management | Performance of a contract (GDPR Article 6(1)(b)) | Until the account is deleted |
| Company name, company address (optional) | Invoicing, identifying business users | Performance of a contract (GDPR Article 6(1)(b)) | Until the account is deleted |
| Profile picture (optional) | Personalising the user profile | Consent (GDPR Article 6(1)(a)) | Until the account is deleted or consent is withdrawn |
| Password (stored hashed) | Authentication, security | Performance of a contract (GDPR Article 6(1)(b)) | Until the account is deleted |
3.2. Data processed while using the Application
| Personal data processed | Purpose | Legal basis | Retention period |
|---|---|---|---|
| Client data (name, e-mail, phone, address, type of project) | Client management, project records | Performance of a contract (GDPR Article 6(1)(b)) | Until deleted by the user |
| Drawings and survey data | Providing the service, editing drawings | Performance of a contract (GDPR Article 6(1)(b)) | Until deleted by the user |
| Notes (text, audio, photo) | Project documentation, reminders | Performance of a contract (GDPR Article 6(1)(b)) | Until deleted by the user |
| Audio recordings | Voice note feature | Consent (GDPR Article 6(1)(a)) | Until deleted by the user |
3.3. Analytics and error tracking
| Service | Purpose | Legal basis | Storage location |
|---|---|---|---|
| PostHog (EU instance) | Usage statistics, product development | Legitimate interest (GDPR Article 6(1)(f)) / Consent | EU (eu.i.posthog.com) |
| Sentry | Error tracking, stability of the application | Legitimate interest (GDPR Article 6(1)(f)) | EU |
| Google Analytics (Website) | Website traffic data | Consent (GDPR Article 6(1)(a)) | EU/US (Google data transfer safeguards) |
| Firebase Analytics | Application usage patterns | Consent (GDPR Article 6(1)(a)) | EU (europe-central2) |
3.4. Subscriptions and payment handling
Subscriptions are handled by the RevenueCat service, using the infrastructure of the Apple App Store and the Google Play Store. SZERECZ GEPESZ Kft. does not process bank card or payment data directly.
4. Data storage infrastructure
User data is stored in the following systems:
- Firebase (Google Cloud Platform) - region: europe-central2 (Warsaw, EU). Data stored in the Firestore database and in Firebase Storage is accessible solely to the user through their own authentication (owner-based access control).
- Firebase Authentication - storage of user authentication data (e-mail address, hashed password).
5. Transfer of data to third parties
We may transfer your personal data to the following third parties:
| Recipient | Purpose | Type of data | Transfer safeguard |
|---|---|---|---|
| Google LLC (Firebase) | Data storage, authentication, analytics | Account data, application data | EU SCC, EU region (europe-central2) |
| PostHog Inc. | Product analytics | Anonymised usage data | EU instance (eu.i.posthog.com) |
| Functional Software Inc. (Sentry) | Error tracking | Technical error data | EU SCC |
| RevenueCat Inc. | Subscription management | User identifier, type of subscription | EU SCC |
| Apple Inc. / Google LLC | App Store payments | Purchase data | EU SCC, own privacy policy |
Each of the service providers listed above offers appropriate data protection safeguards (EU Standard Contractual Clauses or data storage within the EU).
6. Rights of data subjects
Under the GDPR you have the following rights:
- Right of access (Article 15): You may request information about which of your personal data we process.
- Right to rectification (Article 16): You may request the rectification of inaccurate data.
- Right to erasure (Article 17): You may request the erasure of your personal data (deletion of your account).
- Right to restriction of processing (Article 18): You may request the restriction of the processing.
- Right to data portability (Article 20): You may request your data to be provided in a machine-readable format.
- Right to object (Article 21): You may object to processing based on legitimate interest.
- Withdrawal of consent: You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
To exercise your rights, please contact us at adatvedelem@ingeen.hu. We fulfil such requests within 30 days at the latest.
7. Deletion of the account and the data
You may request the deletion of your account and of all related data in the following ways:
- Directly from the Profile menu of the application
- By e-mail at adatvedelem@ingeen.hu
The deletion covers all personal data, including client data, drawings, notes and account data. Deletion is irreversible.
8. Data security
We apply the following technical and organisational measures to protect your data:
- Encrypted data transmission (HTTPS/TLS)
- Access control based on Firebase Security Rules (owner-based)
- Hashing of passwords (Firebase Authentication)
- Upload size limit (max. 10 MB per file)
- MIME type validation on upload
- Use of server-side timestamps to prevent manipulation
- Regular security reviews
9. Protection of children's data
The Application is not intended for users under the age of 16. If we become aware that we are processing the data of a person under the age of 16, we delete such data without delay.
10. Remedies
If you believe that your data protection rights have been infringed, you may seek the following remedies:
- Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH - Hungarian National Authority for Data Protection and Freedom of Information):
Address: 1055 Budapest, Falk Miksa utca 9-11., Hungary
Phone: +36 (1) 391-1400
E-mail: ugyfelszolgalat@naih.hu
Website: www.naih.hu - Judicial remedy: You may turn to the court (törvényszék) competent for your place of residence or place of stay.
11. Amendment of this policy
We reserve the right to amend this privacy policy. We notify users of any changes on the website and/or in the application. We send a separate notification about material changes.
12. Contact
Please send your data protection questions and requests to the following contact details:
E-mail: adatvedelem@ingeen.hu
General: info@ingeen.hu