Privacy
In short: the details of your business, clients and invoices are yours. Without an account they stay only on your device. With an account they're stored on our server so you have them on every device. We don't sell them or use them for ads. The app doesn't track you; the website counts visits only if you allow it.
This is a translation. The Serbian version is the binding one.
What this covers
In effect from 19 October 2026 for Tefter for computers (Windows, macOS, Linux), phones (Android, iOS), the web version at app.tefter.online and this website.
Who is responsible
Jovan Savić PR Creativity and Strategy DEVDES, Salakovac, Serbia. For any question about your data: podrska@tefter.online.
Without an account
The computer and phone apps work without an account. Then all data (business details, clients, invoices, expenses, the KPO book) is stored only on your device. We don't receive it and can't see it. Backups are wherever you save them.
For invoices in a foreign currency the app fetches the NBS middle rate from kurs.resenje.org (only the currency and date are sent). For a fiscal receipt the app asks the Tax Administration (suf.purs.gov.rs) for that receipt's data (only the link from the QR code is sent).
With an account
- Sign-in details: your email address. The account is managed by WorkOS, and we email the sign-in code through Resend.
- Data you enter: business details, clients, invoices, payments, expenses and the KPO book, in a Convex database in the European Union (Ireland), only so you can reach them on every device.
- Subscription: payment reference, plan, amount and date, and whether the payment was confirmed.
- Abuse protection: the number of sign-in attempts, with a shortened fingerprint (hash) of the email and IP address, not the addresses themselves.
Data travels encrypted (HTTPS). In the app only you can see it; the administrator sees only your email and subscription status, to confirm payments. Technically the database operator can access the data; we do so only when you ask (support) or the law requires it.
This website
tefter.online counts visits with Google Analytics, but only if you allow it in the bar at the bottom of the page. Until you do, nothing is sent to Google and no cookie is set. If you allow it, Google Analytics sets its cookies (_ga) and records which pages you opened, from what kind of device and from which country; we see this only as aggregate statistics. You can change your choice at any time with the "Visit statistics" link in the footer. The site also remembers the device you chose in the guides and your statistics choice, only in your browser. The Tefter app uses no analytics.
Who we share data with
With no one for advertising or sale. Data is processed only by the service providers that let us operate, on our instructions: Convex (database), WorkOS (accounts), Resend (sign-in code emails and support), Vercel (website and web version) and, only on the website and only with your permission, Google (visit statistics). If the law requires it, we may give data to the competent authority.
How long
We keep account data while the account exists. When you ask for deletion, we delete the account and all data on it within 30 days. Records of subscription payments are kept as long as accounting law requires.
Your rights
You can ask to see, correct, copy or delete your data, and complain to Serbia's Commissioner for Information of Public Importance and Personal Data Protection. You can also export all your data from the app yourself (“Settings” → “Export all data”).
Children and changes
Tefter is meant for entrepreneurs, not children. If these rules change, the new version will be on this page with a new date.