Mobile Apps Privacy Policy

1. Apps Covered by This Policy

This Privacy Policy applies to the following native iOS applications published by IMFS Group S.R.L.:

• Radar Dosare
  (ro.imfs.avocati)A companion app for monitoring court case files (from the public portal.just.ro) linked to your IMFS One account, with push notifications on case updates.
• IMFS One
  (ro.imfs.one)The mobile client for the IMFS One business platform (CRM, invoicing, contacts, and related modules), reflecting the data of your company's IMFS instance.

2. Data We Collect

We only collect the data strictly necessary to provide the service. Presented by category, aligned with the App Store "privacy nutrition label":

The authentication session (JWT) is stored exclusively in the device's secure enclave (iOS Keychain) and is never transmitted to third parties.

3. Purpose of Processing

• Creating and authenticating your account, and providing access to your company's IMFS One platform.
• Displaying and managing the content you enter (monitored case files, invoices, contacts, and other business records).
• Sending push notifications regarding events relevant to you (e.g., updates to a monitored case file, activity in the platform).
• Ensuring the technical operation, security, and stability of the service (minimal technical data necessary for the app to function).

4. Legal Basis

• Contract performance (Art. 6(1)(b) GDPR) — for account creation and delivery of the services you request.
• Consent (Art. 6(1)(a) GDPR) — for sending push notifications; you can withdraw this consent at any time from your device's notification settings.

5. Storage and Security

All data is stored on servers located in the European Union (Romania), with encryption in transit (TLS) and access restricted by authentication. We do not sell your personal data and do not use it for third-party advertising.

Certain functions rely on third-party service providers acting strictly as processors or independent controllers for their own service: Apple Inc. (push notification delivery via APNs, and App Store subscription payment processing) and PayU (payment processing for web-initiated subscriptions). We do not share your data with any other third party, and we do not sell it under any circumstances.

6. Data Retention

We keep your data for as long as your account is active. If you delete your account, your personal data is removed within a reasonable period, except where retention is required by law (e.g., financial/accounting records subject to statutory retention periods).

7. Your GDPR Rights

Under the General Data Protection Regulation (EU) 2016/679, you have the right to: access your data, rectify inaccurate data, erase your data ("right to be forgotten"), restrict or object to processing, and data portability. You may also lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP, www.dataprotection.ro).

To exercise any of these rights, contact us at one@imfs.ro.

8. Account Deletion

You can delete your account and associated personal data directly from the app (Settings section), or by sending a written request to one@imfs.ro.

9. Children's Privacy

Radar Dosare and IMFS One are business-to-business (B2B) applications intended for legal and business professionals. They are not directed at, and are not intended for use by, individuals under the age of 18. We do not knowingly collect personal data from minors.