Privacy Policy | Smekalka

The data controller is Sharq Software LLC, a Delaware limited liability company operating the Smekalka construction planning service at smekalka.app and related mobile applications.

By using the Service you confirm that you have read this policy and the Cookie Policy, and the Terms of Use to the extent they apply.

We process only data necessary for expense tracking, material planners, account management, subscription billing, user support, and service security. We do not sell personal data.

Account: name, email address, password hash, interface language, security and two-factor authentication settings.
Profile: phone, profession, location (country, city, area), profile photo, and social profile URLs when you provide them.
Data you enter: projects, expenses (including uploaded receipts), contacts, tasks, planner scenes and calculations (tiling, laminate, landscaping, and other modules).
OAuth (Google, Apple): provider ID, email, name, and avatar URL when you sign in through the respective service.
Contact form: name, email, subject, and message text.
Payments: transaction metadata (amount, status, order ID) via Stripe. Smekalka does not store full card details.
Landscape AI (when enabled): site photos you upload for segmentation may be sent to Hugging Face for processing.
Mobile app: API tokens (Laravel Sanctum) stored on the server; they are not used in the browser.
Technical data: IP address, browser and device type, server logs, and demo-mode data (which may be purged on a schedule).

Contract performance (Terms of Use): registration and sign-in, project storage, sync between web and mobile, material calculations, and subscription payments.

Consent: contact form submission, registration, OAuth sign-in, optional features (including landscape AI), and non-essential cookie choices (see the Cookie Policy).

Legitimate interest: service security and stability, abuse and spam prevention, and technical logging.

Legal compliance: retaining data required for accounting and tax records, and responding to lawful requests from authorities.

As of this policy date, Smekalka does not use third-party visit analytics cookies (Google Analytics, Meta Pixel, and similar) on the website.

Cloudflare Turnstile — contact form spam protection (IP address and verification token).
Stripe — card payments; payment data processed by Stripe under its policies.
OAuth providers (Google, Apple) — authentication when you choose that sign-in method.
Hugging Face — image segmentation in the landscaping module when the feature is enabled by the user.
Mail service (SMTP) — delivery of registration codes, notifications, and support replies.

We share data only with parties that help deliver the Service, and only to the extent necessary. We do not sell personal data.

Account and user content data are kept while the account is active and for a reasonable period after deletion — for backups, dispute resolution, and legal compliance.

Registration confirmation codes (OTP) and cached operational data are removed automatically after a short period.

Contact form messages are kept until the request is handled and for the period needed to maintain correspondence records.

Server technical logs are retained for a limited time required for diagnostics and security.

Smekalka is operated by a Delaware company. Personal data may be processed in the United States and in other countries where our service providers operate (including payment, authentication, email, spam protection, and AI image processing).

Such transfers occur only as needed to provide the features you use, with contractual and technical safeguards applied by the respective providers.

Depending on your location, you may have rights to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent where processing is consent-based.

Send requests via the Contact form or to legal@smekalka.app. We respond within a reasonable time and may ask you to verify your identity to protect your account.

You may also lodge a complaint with a data protection authority in your country or region where applicable.

The Service is not intended for anyone under 16. We do not knowingly collect children’s personal data. If you believe a child provided data without a guardian’s consent, contact us and we will take steps to delete it.

We may update this policy. The current version is always available at https://smekalka.app/privacy-policy. The last update date is shown at the top of this document.

We may notify you of material changes by email or through the app interface.