Privacy Policy
Last updated: May 11, 2026
"ONZI EU" LLC ("we", "us", "our") operates the mobile application "Vhod Pro" (the "App"). This policy describes how we collect, use, and protect your information.
1. Information We Collect
We collect only the minimum information necessary for the App to function:
- Account credentials: Username and password, used to authenticate with the access control system.
- User profile: Your first name, as provided by the server, used to personalize the greeting in the App.
- Door preferences: Custom door names and display order you set within the App.
- App settings: Language preference (Bulgarian or English) and the server you have selected.
- Bluetooth scan data (in memory only): While scanning for nearby door beacons, the App temporarily processes Bluetooth identifiers and signal strength on your device. This data is not stored persistently and is not transmitted; only the identifier of a door you choose to open is sent to the server.
2. Information We Do Not Collect
- We do not collect, store, or transmit your geographic location. Android requires the location permission in order for any app to scan for Bluetooth Low Energy devices, but the App never reads GPS coordinates, network location, or other location-based identifiers. See Section 4 for details.
- We do not collect persistent device identifiers, advertising IDs, or hardware information.
- We do not use analytics, tracking, or advertising frameworks.
- We do not collect usage statistics or telemetry.
- We do not share any data with third parties.
3. How We Use Your Information
Your information is used solely to:
- Authenticate you with the door access control system.
- Display your doors and allow you to open them.
- Detect when you are physically near a door you are authorized to open, so the App can offer one-tap access.
- Save your display preferences (door names, order, language).
4. Permissions and Background Operation
This section explains the sensitive Android permissions the App requests and what each is used for. iOS uses an equivalent set of permissions (Core Bluetooth, notifications) declared in the App's Info.plist.
- Bluetooth (BLUETOOTH, BLUETOOTH_ADMIN, BLUETOOTH_SCAN, BLUETOOTH_CONNECT): The App scans for short-range Bluetooth Low Energy (BLE) beacons installed at building entrances. Detecting a beacon means you are physically near a door you may be authorized to open. Scanning is performed entirely on your device.
- Location (ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION): Android requires the location permission for any app that scans for BLE devices, because BLE beacons can in principle reveal location. The App requests this permission solely to satisfy the operating-system requirement for Bluetooth scanning; it does not read your GPS coordinates, network location, or any other location-based identifier, and does not transmit any location data to our servers.
- Foreground service (FOREGROUND_SERVICE, FOREGROUND_SERVICE_CONNECTED_DEVICE): So that the App can still detect doors when it is not in the foreground — for example, when your phone is in your pocket as you approach the building — a foreground service runs while you are signed in. Android requires that a persistent notification be shown while this service is active; tapping it returns you to the App. The foreground service is used only to scan for door beacons; it does not collect data in the background.
- Notifications (POST_NOTIFICATIONS): Used solely to display the persistent foreground-service notification described above. The App does not send marketing or remote push notifications.
- Wake lock (WAKE_LOCK): Used briefly to allow the door-unlock request to complete when the phone screen is off.
- Companion Device pairing (REQUEST_COMPANION_RUN_IN_BACKGROUND, REQUEST_COMPANION_USE_DATA_IN_BACKGROUND, REQUEST_COMPANION_START_FOREGROUND_SERVICES_FROM_BACKGROUND, BIND_COMPANION_DEVICE_SERVICE — optional): On Android phones with aggressive battery-management policies (for example, some Xiaomi/MIUI devices), you may be invited to pair each door beacon with the operating system once, using the system "Companion Device" pairing dialog. This is a one-time setup that asks the operating system to wake the App when a paired door is in range. It does not grant us any new data; the pairing exists only on your device.
- Internet (INTERNET): Used to communicate with the access-control server you have selected.
5. Multi-Server Architecture
The App can connect to several independent access-control servers, each operated by a different company (for example, "ONZI EU" LLC, "RECOM 99" LLC, "БГ ДОМОУПРАВИТЕЛ" LLC). When you log in, you select the server that is operated by the company managing your building. The selected company is the data controller for your account information and door logs on that server. Each server is independent — your data on one server is not shared with another, and selecting a server does not transfer any data between operators.
6. Data Storage
Your authentication token, username, first name, language preference, and selected server are stored locally on your device using standard platform storage. This data is removed when you sign out of the App.
Your account credentials and door preferences are stored on the server you connect to, which is managed by your building or property administrator.
7. Data Transmission
All communication between the App and the server is encrypted using HTTPS. Your password is transmitted only during login and password change operations, and is never stored locally on your device.
8. Data Deletion
You can delete all locally stored data at any time by signing out of the App or by uninstalling it. To request deletion of your server-side account data, contact your building administrator or reach out to us directly at the address below.
9. Children's Privacy
The App is not intended for use by children under 13. We do not knowingly collect information from children.
10. Changes to This Policy
We may update this policy from time to time. Changes will be posted on this page with an updated date.
11. Contact Us
If you have questions about this privacy policy, contact us at: