NUVIOPrivacy policy
Last updated: 30 September 2026. Applies to nuvio.team, the web application/PWA and the NUVIO Android application.
The NUVIO service is provided by Delamont, Barbara Ledinek s. p., Slovenia, VAT ID SI63459876. For privacy, data and account deletion matters, contact us at podpora@nuvio.team.
Request deletion of your NUVIO account and associated data
After signing in on the website or in the Android app, open My account → Account deletion → Request account deletion. Read the explanation and follow the confirmation steps to submit a support request from your signed-in account. Check Customer support for the reply and the outcome. You can also email your request to podpora@nuvio.team without signing in or having the app installed.
- Email podpora@nuvio.team with the subject “Izbris računa NUVIO” (NUVIO account deletion).
- Provide the account email address or username and, if you use Business, the company code. If possible, write from the account email address. Do not attach your password, card details or identity document.
- We handle requests manually. If necessary, we will contact you for proportionate identity verification or to clarify the scope of the request. We will notify you of completion or the reasons for any partial retention of data.
Deletion covers the user account, sign-in and session data, and associated personal data, including private Personal records, settings and support data where there is no valid basis for retaining them. For data NUVIO processes on behalf of an employer, we coordinate the request with that employer. Employer or accounting records required by law, and data needed for specific security incidents or legal claims, cannot always be deleted immediately. Retention criteria are described in section 7.
Submitting a request does not mean that deletion has been completed or a subscription cancelled. If you have an active subscription, mention it; when handling your request, we will also explain how it will be dealt with and any outstanding obligations. Disabling your account, signing out or uninstalling the application does not delete your account. We generally respond to requests within one month; we will notify you of any lawful extension and the reasons for it.
1. Who is responsible for processing
For Personal accounts, subscriptions, billing and our own support, the controller is Delamont, Barbara Ledinek s. p. For employee records in Business, the controller is generally your company or employer; NUVIO processes these records under its instructions. The employer determines and explains the purpose, legal basis, access and retention of these records.
2. What data we process
The scope depends on the features used. Data is entered by you or an authorised person at your company, while technical data is generated during use.
- Account: name, username, email, sign-in verification data, language, company or group, roles and account status. We store passwords as hashes.
- Work and Personal records: arrivals, departures, breaks in Personal, manual entries and corrections, hours, balances, work sites, schedules, approvals and, where these features are used, projects, employers, hourly rate and estimated earnings.
- Business: absences and reasons, travel orders, routes and expenses, examinations and training, validity, notes, messages and notifications. Some entries may contain health data; enter only necessary data, without unnecessary diagnoses or medical reports.
- Location: for location-based work recording in Business, coordinates, accuracy, event time and distance; for work sites, addresses, coordinates and the permitted radius. Personal records do not store GPS coordinates.
- Subscription and support: contact and billing details, plan, licences, discounts, payment status, Stripe identifiers and the content of requests, conversations and support records.
- Operation and security: sessions, email confirmations and access recovery, hashed data derived from IP addresses to limit abuse, and logs of important actions and errors. Infrastructure providers also process technical connection data, such as IP addresses and client information.
3. Purposes and legal bases
We use data for sign-in, provision of the ordered service, records, calculations, exports, support and subscriptions on the basis of performance of a contract or steps prior to entering into a contract. We process mandatory accounting and tax documentation to comply with legal obligations. Security, abuse prevention and troubleshooting are based on the legitimate interest of protecting the service and its users. Where processing is based on consent, you may withdraw it.
For employer records, particularly location and health data, the employer determines the appropriate legal basis and necessity. A phone's location permission does not in itself replace that basis. Without mandatory account data, the service cannot be provided; without location, it may not be possible to record work in the manner required by the company. In that case, contact your company administrator.
4. Location and maps
For a location-based arrival or departure, the application obtains your location with the device's permission to check the distance from the work site. At your request, you can also use it when choosing a work site. NUVIO does not track routes or movement in the background. You can change the permission in your phone or browser settings.
Address searches send a query to Nominatim/OpenStreetMap. When a map is displayed, the map tile provider receives requests for the selected area and technical connection data. If you open Google Maps yourself, the selected address or coordinates are sent to Google.
5. Access and providers
Authorised company users access Business data according to their role and assigned scope. Your private Personal records are not shown to your employer in Business. Authorised NUVIO staff access data to the extent necessary for administration, support and security. We may disclose data to competent authorities if required by law. We do not sell data for advertising.
Hosting and data infrastructure, email and customer support, payment processing, and map and location search providers help us deliver the service. They process the data necessary for their respective services. You enter card details with the payment provider; NUVIO does not store the full card number or security code in its database.
Providers may also process data outside the European Economic Area. You can request information about the providers used, processing locations and safeguards for international transfers at podpora@nuvio.team.
6. Security and storage on your device
The published application uses HTTPS. The server checks that the sign-in, role and access scope are valid. Sign-in cookies last for a maximum of 30 days; signing out or revoking access may end a session earlier. Session expiry does not delete records. Android stores the sign-in token in encrypted form.
The browser or application stores settings and data needed to operate, such as language, the selected company and the sign-in session. The PWA may cache application files. Exported reports remain on the device or with the recipient with whom you share them; account deletion does not delete these copies. Payment and other external pages have their own cookie policies.
7. Retention and data that may remain after account deletion
| Data type | Retention period or criterion |
|---|---|
| Account and private Personal records | During use of the service or until the deletion request has been handled, except for the justified exceptions described below. Removing an individual Personal entry hides it from the regular records; the entry and change trail remain until permanent deletion has been handled. |
| Business records | Under the employer's instructions and according to the legal obligations for each type of record. Deleting a user's access does not remove the employer's obligation to retain its records. |
| Accounting and tax data | For the period required by applicable legislation for each type of documentation, including after the subscription ends or the account is deleted. |
| Support and deletion requests | For as long as necessary to resolve the request and related outstanding issues; a limited record of its handling may remain to the extent necessary to demonstrate compliance with obligations or for specific legal claims. |
| Security and audit data | To the extent necessary to investigate specific abuse, incidents or legal claims, and until the reason for such retention ceases. |
| Backups | Any copies remain until the provider's actual backup cycle expires. We explain the applicable period or criterion when handling a deletion request. |
Disabling an account and ending a subscription do not in themselves delete its history. If we retain certain data following a deletion request, we explain which data, why, and until when or under which criterion we will stop retaining it.
8. Your rights
Under the conditions of the GDPR, you may request access, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interest. You may withdraw consent; withdrawal does not affect the lawfulness of earlier processing. Write to podpora@nuvio.team; the account deletion procedure is at the beginning of this page. For employer records, we coordinate requests with the responsible company. You may lodge a complaint with the Information Commissioner of the Republic of Slovenia.
9. Calculations and changes to this policy
NUVIO automatically totals hours, checks the distance from the work site and checks access based on role or subscription. It does not pay wages and is not a system for making autonomous employment decisions. Report errors to your company administrator or support.
We update this policy when the service or data processing changes. The date of the change appears at the beginning; we appropriately notify users of significant changes.