MojApp Beta Privacy Notice

The entity operating the MojApp platform is the controller of personal data processed in connection with MojApp.

The operator's legal name, registered address, registration details, and other information that must be published by law may be provided in a separate Legal Information section of the website rather than in this Notice.

You may use the following channels for privacy or personal data requests:

Support: support@mojapp.me General contact: info@mojapp.me

Including “Privacy Request” in the email subject line will help us direct your request appropriately.

This Notice covers personal data processing connected with:

• the MojApp website and any MojApp applications that may later be made available to users, • user accounts and sign-in, • real estate and vehicle listings, • favorites, • in-app messaging, where available, • professional user and agent profiles, • contact, support, advertising, and partnership forms, • map and location features, • language and cookie preferences, and • security, error, and server logs.

We do not claim to process data through features that have not yet been launched. If a new feature requires different personal data processing, this Notice will be updated as appropriate.

Depending on how you use MojApp, the following categories of data may be processed:

• Identity and profile data: name, profile image, role, and company or office details where applicable. • Contact data: email address and optional telephone number. • Account and authentication data: user identifier, session information, password hash, and basic account data received from the social sign-in provider you use. • Listing data: title, description, price, property or vehicle characteristics, city, address, coordinates, and photographs. • Professional profile data: office, position, contact details, and related professional profile fields. • Contact and form data: name, email, telephone number, subject, message, and the page from which a form was submitted. • Messages: in-app messages sent between users if the feature is available. • Favorites and usage preferences: listings saved to an account, language, and interface preferences. • Technical data: IP address, date and time, request and error logs, and standard information about the browser, device, and operating system. • Location data: approximate device location used to provide the map's “my location” feature only when you grant permission. • Cookie and consent records: information concerning sessions, language, cookie choices, and analytics consent.

MojApp does not currently process users' card payment information.

Personal data may be obtained from:

• you directly when you submit an account, profile, listing, message, favorite, or form, • your device and browser through cookies, local storage, and technical requests, • the authentication or social sign-in provider you choose, • map, image storage, and similar technical service providers, and • the organization or authorized representative connected to your professional account.

MojApp does not systematically collect personal data from unrelated public sources to build user profiles.

Personal data may be processed for the following purposes where there is an appropriate legal basis under applicable law:

• creating, verifying, and managing your account, • creating, publishing, displaying, and managing listings, • providing search, filters, favorites, messaging, and map features, • responding to contact, support, and partnership requests, • protecting the platform and preventing fraud and misuse, • identifying technical problems and maintaining service performance, • complying with legal obligations and responding to lawful requests from competent authorities, • performing analytics where you have given consent, • using device location where you have granted permission, and • sending marketing communications in the future where separate consent or another appropriate legal basis exists.

Depending on the processing activity, the legal basis may be the performance of a contract, steps taken before entering into a contract, compliance with a legal obligation, legitimate interests, or consent.

Where processing is based on consent, you may withdraw that consent with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Listings and some professional profile pages may be publicly accessible.

Depending on the content you publish, visitors may be able to see:

• your name or professional profile name, • company or office details, • contact details such as a telephone number or email address that you choose to publish, • listing title, description, and price, • photographs, • city, area, address, or map location, and • vehicle or property characteristics.

Do not upload unnecessary personal data or another person's information to public areas.

Search engines may index public pages. Removing content from MojApp does not mean that copies held in search engine or third-party caches will be deleted immediately.

MojApp does not sell personal data.

To operate the service, personal data may be shared with or processed by the following parties to the extent necessary:

• Supabase for hosting, database, and authentication services, • Cloudinary for image hosting and delivery, • Google Maps for map features, • Vercel and/or other server infrastructure used by MojApp for application hosting and delivery, • Google or Facebook, depending on the social sign-in service you choose, • Google Tag Manager and Google Analytics 4 for analytics where you have given consent, • the OpenAI API when automatic listing translation is used, • authorized advisers and service providers supplying technical, legal, or security support, and • courts, regulators, law enforcement bodies, or other competent authorities where there is a legal obligation.

In the event of a merger, acquisition, restructuring, or transfer of the business, data may be transferred to the relevant successor subject to applicable law and appropriate privacy safeguards.

The service providers used may change as the platform develops. This Notice will be updated when there are material changes.

Some service providers may process personal data in Montenegro, the European Economic Area, or other countries.

Where an international transfer is required, MojApp aims to use contractual, organizational, or other appropriate safeguards required by applicable data protection law.

Because of the infrastructure used by our service providers, we do not guarantee that all data is processed only within Montenegro.

You may contact us through the privacy channels for more information about a specific transfer.

We retain personal data for as long as necessary for the purpose for which it was collected and as required by legal obligations.

When determining a retention period, we consider the nature of the data, the status of the account or listing, security needs, periods for disputes and claims, and statutory record-keeping obligations.

In general:

• active account and profile data may be retained while the account remains open, • listings and images may be retained while they are published or needed for account management, • support and contact records may be retained while a request is resolved and for a reasonable follow-up period, • security and technical logs may be retained for a limited period necessary to maintain security and investigate issues, and • cookie and session information may be retained for the lifetime of the relevant cookie or session.

After a deletion request, some data may be retained for a limited period because of legal obligations, fraud prevention, dispute resolution, or backup cycles. Data will be deleted or anonymized when the need for retention ends.

MojApp may use the following cookies and similar technologies:

• Strictly necessary cookies: to maintain sessions, protect accounts, and provide essential features. • Preference cookies: to remember language and interface choices. • Analytics cookies: to measure visits and usage statistics only where you have given consent. • Marketing cookies: if introduced, only with the required consent or other legal basis.

Google Tag Manager and Google Analytics 4 are not loaded before analytics consent is given.

Essential session and language technologies may be used independently of analytics consent because they are needed for the service to function.

You can change your choices through the Cookie Preferences section of the website. Your consent preference may be stored in the mojapp_consent_v1 cookie for 180 days.

When you publish a real estate or vehicle listing, its title and description may be sent to the OpenAI API to create Montenegrin, English, and Turkish versions.

The listing text is sent for this purpose. Your login credentials, private messages, email address, and telephone number are not sent for translation.

The data processing terms applicable to OpenAI's API service apply. OpenAI states that data submitted through its API is not used to train models by default; limited logs may be retained for security and abuse prevention.

Automatic translations may contain errors. A user or authorized administrator may edit the translation.

Where you give consent, MojApp may use Google Tag Manager and Google Analytics 4 to understand and improve use of the platform.

Measured events may include page views, searches, filters, listing views, favorites, contact interactions, lead forms, registration, sign-in, and language changes.

We aim not to send names, email addresses, telephone numbers, private message content, or free-text form content to the analytics system.

You may withdraw analytics consent through the Cookie Preferences section.

Service emails such as account verification, security alerts, and password resets may be sent to operate your account.

If MojApp's general marketing newsletter or preference center is not yet available, creating an account does not automatically add you to a marketing list.

If marketing messages are sent in the future, the necessary legal basis will be established and an appropriate method of unsubscribing will be provided.

A listing location may consist of a city, address, or coordinates entered by the advertiser.

When you use the map's “my location” feature, your browser or device may ask for location permission. If you do not grant permission, you can still use the platform and map search without this shortcut.

You may withdraw location permission through your device or browser settings.

MojApp does not create a continuous GPS history of your movements as a user profile feature.

MojApp aims to use access controls, HTTPS, authentication mechanisms, provider security features, and appropriate technical and organizational measures to protect personal data.

No internet transmission or data storage method is completely secure, and absolute security therefore cannot be guaranteed.

You should use a strong password, protect your device, and contact us if you suspect unauthorized access to your account.

Under applicable personal data protection law, you may have the right to:

• access your personal data, • correct inaccurate or incomplete data, • request deletion where the relevant conditions are met, • restrict processing where the relevant conditions are met, • object to certain processing, • data portability where applicable, • withdraw consent where processing is based on consent, • receive information about decisions based solely on automated processing that produce significant effects, and • lodge a complaint with the competent data protection authority.

These rights are not absolute and may be subject to statutory exceptions.

You may use the contact channels in section 1 to submit a request. Before fulfilling it, we may ask for reasonable information to verify your identity.

Your right to contact the competent personal data protection supervisory authority in Montenegro remains unaffected.

You may stop using MojApp at any time.

Requests to close an account, delete personal data, or remove listings may be submitted through support@mojapp.me, info@mojapp.me, or the contact form. Including the email address associated with your account will help us process your request.

A self-service account deletion feature may not yet be available.

Following a deletion request, data will be deleted or anonymized subject to applicable legal retention obligations, security needs, ongoing disputes, and backup cycles.

MojApp is not a service directed at children. The platform is intended for persons who have the legal capacity under applicable law to use real estate and vehicle listing services.

Persons who do not have the required legal capacity should not use MojApp or publish listings without the involvement of a parent or legal representative.

If we become aware that a child's personal data has been processed unlawfully, we will take appropriate steps to delete the data or restrict processing in accordance with applicable law.

Search results and filters may be arranged according to the criteria you select, listing information, and ordinary product ranking methods.

MojApp does not use decisions based solely on automated processing that produce legal or similarly significant effects on users as part of its current service.

Security systems may detect misuse, automated requests, or unusual activity and temporarily restrict access.

This Privacy Notice may be updated as the platform's features, service providers, or legal requirements change.

The effective and last-updated dates appear at the top of the document.

Material changes may, where appropriate, be announced on this page, within the platform, or through your registered contact details.

For requests concerning privacy, accounts, data deletion, or personal data rights:

Support: support@mojapp.me General contact: info@mojapp.me

You may include “Privacy Request” in the email subject line.

Information about the operator that is legally required to be published may be provided in a separate Legal Information section rather than in this Notice.