Privacy Policy — NITKasa

NITKasa mobile app (rs.nitsolutions.nitkasa)

Privacy Policy (English)

Effective: 10 October 2026.

1. Who we are

The NITKasa app is developed and maintained by NEBOJŠA DAMNJANOVIĆ PR OSTALE USLUGE INFORMACIONE TEHNOLOGIJE NIT SOFTWARE SOLUTIONS VALJEVO (“NIT Software Solutions”, “we”), Vojvode Mišića 172, 14000 Valjevo, Serbia, registration no. 66413888. Contact: play@nitsolutions.rs, nitsolutions.rs.

2. What the app is for

NITKasa is a business app for staff of retail and hospitality venues that use the NITKasa point-of-sale system: waiters take table orders, and managers and owners view sales, shift and other reports for their venue. The app is not intended for consumers or children.

3. Where data lives and who controls it

The app does not send data to NIT Software Solutions. The phone connects only to the venue server (a computer in the venue or a server chosen by the business using NITKasa) and, for reports, to that business’s ERP system, and exchanges data only with them. The business using NITKasa (the employer) is the data controller. NIT Software Solutions supplies the software and, when the business requests support, may access its system on its behalf as a processor.

4. Data the app processes

DataPurposeStored
Staff name/code and login PINSign-in and permissions (waiter, manager, owner)On the venue server; the PIN is not stored on the phone
Device registration key and venue server addressSo the phone knows which server to use and the server recognises itOn the phone and the venue server
Orders, tables, receipts, items and pricesWaiter work and sales recordsOn the venue server; temporarily on the phone while in use
Sales, shift, staff and stock reportsBusiness overview for managers and ownersOn the venue server; the phone only displays them
Customer on a receipt (e.g. company name or tax ID, loyalty card number), when entered by staffIssuing receipts and the venue’s loyalty programmeOn the venue server

The app does not collect location, contacts, photos, messages, browsing history or the advertising ID, shows no ads, and uses no third-party tracking or analytics.

5. Camera

The camera is used only when the user turns it on, to scan a QR code when pairing the phone with the venue server. Images are not stored or sent; only the scanned code is used.

6. Transfer and security

Communication between the phone and the venue server is encrypted (HTTPS). Access depends on the staff role set by the employer. Data is not sold or shared with third parties for marketing.

7. Demo mode

In demo mode the app shows made-up data of a sample venue, does not connect to any server and processes no personal data.

8. Retention and deletion

Retention on the venue server is set by the employer in line with the law (e.g. fiscal and accounting rules). Data on the phone is deleted by signing out/resetting the device registration or uninstalling the app. Requests to access, correct or delete personal data should be sent to your employer; you may also contact us at play@nitsolutions.rs and we will forward the request to the business that controls the data and help it carry it out.

9. Your rights

Under the Serbian Law on Personal Data Protection (and the GDPR where applicable) you have the right to access, rectification, erasure, restriction, objection and portability, and the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs).

10. Changes

We announce changes by publishing a new version on this page with a new effective date.