Privacy policy
Your data is controlled by AGRIA-GRUP DOOEL, Blagoj Gjorev 92, 1400 Veles, North Macedonia. This page explains what we collect, why, who we share it with, and what you can do. This policy is published bilingually, in Macedonian and English; in case of any discrepancy between the two versions, the Macedonian version prevails.
What data we collect
What you give us: name; email address and/or phone number; password (stored only as a cryptographic hash — we cannot see it); saved delivery addresses; and whether you want promotional messages. If you sign in with Google, we receive from Google your name, email address and basic profile data (account identifier and a link to your profile picture) — we do not receive your password or access to your Google account. If you sign in with Apple, we receive from Apple your name and email address (or a hidden Apple relay address, if you choose so) and an account identifier — no password. What is created by using the app: orders (products, weights, amounts, shop, time, the notes you write, and the delivery address and phone), the ratings you give for orders (stars, tags and comment), favourite products, app language, and a technical device identifier if you allowed notifications. Technical logs: the providers we use record the IP address and time of requests, for security. We do not collect location, phone contacts, or card data.
Why we use it
To fulfil your order, to notify you about its status, to respond if there is a problem, and to protect the app from abuse. We do not send promotional messages without your consent.
Legal basis
We process account and order data to perform our contract with you — the order. After the order is completed we keep it for a limited time on the basis of legitimate interest — for complaints and possible disputes. Notifications and promotional messages are based on your consent, which you can withdraw at any time. Technical logs are processed on the basis of legitimate interest — security and abuse prevention.
Who we share it with
We do not sell your data or share it for advertising. We share it only as far as the service requires. With the courier company: the address and phone, only for the specific delivery. With technical providers acting on our behalf: Supabase (database and sign-in), Vercel (web server), Resend (sending codes by email), Infobip (sending codes by SMS), Google (Google sign-in and notification delivery on Android), Apple (Apple sign-in and notification delivery on iPhone) and Expo (notification delivery).
Transfers abroad
The main database is in the European Union (Frankfurt). Some providers — Vercel, Resend, Google, Apple and Expo — are companies based in the USA and may process data there. They offer contractual data protection safeguards (standard contractual clauses).
How long
We keep account data for as long as you have the account. Personal data in orders (name, phone, delivery address, notes and the rating comment) is kept for 2 years from the order, for complaints and possible disputes; after that it is deleted and only the products, amounts, dates and the rating stars and tags remain, with no link to you. Verification codes are short-lived (5 minutes for SMS, 60 minutes for email). Technical logs at our providers are kept briefly, according to their own retention periods.
Your rights
You have the right to access your data, to rectification, erasure, restriction of processing, portability and objection, and to withdraw consent at any time. Write to the email below or to our data protection officer — we reply within one month. For now, consent to promotional messages is withdrawn by writing to the same address. If you believe your rights have been infringed, you may contact the Personal Data Protection Agency of North Macedonia (azlp.mk). Data protection officer: Zagorka Bochvarova Perchinkov, zage_92@hotmail.com, tel. +389 72 208 818.
Deleting your account
From Profile → Delete account — immediately, with no waiting period. If you cannot access the app, instructions are at app.agria.mk/delete-account. Deleted: sign-in (email, phone, password, Google or Apple link), name, saved addresses, favourite products, notifications and the device identifier. From past orders we delete the delivery address and phone, your notes and your rating comments. Only the products, amounts, dates and the rating stars and tags remain, with no link to you. Deletion is not possible while you have an active order.
Notifications
Notifications are used only for the status of your order. You grant the permission and can turn it off at any time in your phone settings — ordering keeps working without it.
Children
The app is not intended for persons under 16 and we do not knowingly collect their data. If you believe a person under 16 has given us data, write to us and we will delete it.
Security
The connection to the app is encrypted. Passwords are stored only as a cryptographic hash. Orders can be accessed only by staff of the shop you order from and by administrators, each with their own sign-in. No system is perfectly secure; if a breach affects you, we will notify you as required by law.