Privacy Policy

Last updated: October 2026

1. Introduction

Mehanko is operated by Devisium d.o.o. ("we", "our", "us"). We respect your privacy. This privacy policy explains how we collect, use, and protect your personal data when using our application and website mehanko.si.

2. Data controller

The data controller responsible for processing your personal data is:
Devisium d.o.o.
Email: info@mehanko.si

3. Data we collect

When you register and use Mehanko, we collect the following data:

  • Email address and, optionally, a name shown to your colleagues in the shop
  • Shop name and the details you provide for documents (address, IBAN, VAT number, logo) and your bookkeeper's email address
  • Client, vehicle, and job data you enter into the application, including the customer's signature on a work order
  • Photographs you take in the app - work photos, VIN labels, and licence plates
  • Short audio recordings when you use dictation or voice commands
  • A device identifier (for the two-devices-per-account limit) and a push notification token, if you switch notifications on
  • Subscription status and purchase identifiers from Apple App Store, Google Play, or Stripe
  • App usage data (which screens and features you use), without the content of your jobs

A vehicle registration number can count as personal data in the Slovenian context, so we treat it with the same care as the rest of your client data.

4. How we use your data

We use your data exclusively for:

  • Providing the application functionality
  • Authentication and account security
  • Processing payments and managing subscriptions
  • Service improvements
  • Service-related communications (e.g., change notifications)
  • Notifications you switch on in the app (push notifications and email), and emails at sign-up, during the trial and when a subscription ends
  • Sending documents to your bookkeeper's email address when you trigger it yourself

5. Features that send data to our server

Four features process data on our server and, through it, with an external language and image processing provider (OpenAI, acting as our subprocessor):

  • Dictation: the audio clip you record is sent to our server, where it is transcribed into text and tidied up.
  • Voice commands: the audio clip is transcribed and turned into a proposal (a new job, a line item, a status change) that you confirm or reject on the screen. The recording is not stored.
  • Licence plate scan: the photograph of the plate is sent to our server, where the registration number is read from it.
  • Suggested line items: the job description is sent to our server, where a draft of line items is prepared from it. Prices are taken from your own past line items and stay within your shop.

We use this data solely to perform the feature you trigger. We do not use audio recordings, photographs, or job descriptions for advertising or tracking, and we do not sell them. All four features require an internet connection; if you do not use them, none of this data is sent anywhere.

5a. Notifications, email and usage measurement

Push notifications are delivered through Apple (APNs) and Google (Firebase Cloud Messaging); they receive your device token and the notification text (for example "A job was assigned to you"), not your client data. You switch notifications on and off in the Notifications menu. Email (sign-in codes, notifications, documents for your bookkeeper) is sent through the provider Resend.

To improve the app we measure its use with Mixpanel: which screens and features are used and how often, linked to your account identifier. We do not send the content of jobs, client or vehicle data. This data is not used for advertising.

6. Cookies and the Meta Pixel

On mehanko.si we use essential cookies and local storage so the site works and so we can remember your cookie choice. These do not require consent.

With your consent we also load the Meta Pixel (Meta Platforms Ireland Limited). It tells us how many visitors arrive through our Facebook and Instagram ads and lets us measure how well that advertising works. The pixel stores the _fbp and _fbc cookies in your browser and sends Meta your IP address, browser details, and the address of the page you are visiting.

The legal basis for this is your consent (Article 6(1)(a) GDPR). Until you give it, the Meta Pixel is not loaded. You can withdraw your consent at any time, as easily as you gave it, through the Cookies link in the footer. Withdrawal does not affect the lawfulness of processing carried out beforehand.

Meta may process this data outside the European Economic Area, including in the United States, under the EU-US Data Privacy Framework and standard contractual clauses. We use the Meta Pixel on the website only; it is not in the Mehanko mobile app.

7. Subprocessors

We use the following subprocessors to operate the service:

  • Supabase - database hosting and authentication
  • OpenAI - speech-to-text, voice commands, reading licence plates, and preparing suggested line items
  • Apple, Google, and Stripe - payment and subscription processing
  • Apple (APNs) and Google (Firebase) - delivery of push notifications
  • Resend - sending email
  • Mixpanel - app usage measurement
  • Meta Platforms Ireland Limited - measuring website ad performance, only with your consent

8. Data security

All data is stored in a secure, encrypted database. Each shop can only access its own data. We do not sell your data. Payments are processed through Apple App Store or Google Play in-app purchases, or through Stripe for subscriptions taken out on the web; we do not store card details.

9. Data retention

We retain your data for as long as your account is active. Upon account deletion, your data will be permanently removed within 30 days.

10. Your rights

Under applicable data protection laws (including GDPR), you have the right to access, correct, export, or delete your personal data. To exercise these rights, contact us at info@mehanko.si.

11. Contact

For privacy-related questions, contact us at info@mehanko.si.