Privacy policy

Who is responsible

Vladan Brdaric is the data controller for the personal data processed in JagKoll. You can reach us at support@jagkoll.se with any question about your data.

What we store

Only what the service needs to work:

• Your account: email address, a display name, your password (stored only as a salted hash, never in plain text), language and theme.
• Your household: its name, time zone and currency, and the profiles in it: each person's name and role and, if you add them, a profile picture and a calendar colour. Pets have a name, a species and an optional picture.
• What you add: documents and other items (title, category, dates, who they concern, and your notes), reminders, calendar events, trips, chores, rewards, allowance balances and transactions, and savings goals.
• Notifications: if you turn on push notifications, the delivery address your browser or phone gives us for that device, and a description of the device's browser (the user agent).
• Security log: sign-ins, changes and other events, with the time, the email address and profile involved, the IP address and the user agent. We use it to detect and investigate misuse.

We never ask for or store personal identity numbers, passport or card numbers, bank details or copies of your documents. JagKoll keeps track of dates, not of the documents themselves.

What is stored on your device

Your sign-in session, and your email address if you choose to be remembered, are kept in your browser's local storage. To work without a connection, the web app keeps a copy of pages and recently fetched data in a cache on your device, kept separate for each profile. We use no advertising or tracking cookies and no analytics tools.

Why we process it

• To provide the service you signed up for: storing your household's information and showing it to the right profiles (GDPR article 6(1)(b), performance of a contract).
• To send email that belongs to the service: confirming your email address, resetting your password, and the weekly allowance summary and approval reminders for parents. The last two can be turned off in Settings.
• To send push notifications, only after you turn them on for a device (article 6(1)(a), consent). You can turn them off at any time in Settings or in your device's settings.
• To keep the service secure through the security log (article 6(1)(f), our legitimate interest in protecting our users and the service).

We do not sell your data, show ads, or use your data to profile you.

Children

JagKoll is meant for parents and other adults. A child can use JagKoll through a child profile that an adult in the household creates and manages. A child profile has no email address or password of its own, and the adult who holds the account decides what the child's profile contains and can change or delete it at any time. We do not knowingly collect personal data directly from children, and child profiles are never used for marketing.

Who else handles your data

We use a small number of service providers, bound by data processing agreements, and only for these tasks:

• Hosting: the app, the database and its backups run on a rented server in the EU.
• Brevo (Sendinblue SAS, France) sends our emails. It receives the recipient's email address and the content of the message.
• Push services: notifications are delivered by the push service of your browser or phone (for example Google, Apple, Mozilla or Microsoft). In the JagKoll apps they are delivered through Google Firebase Cloud Messaging and, on iOS, the Apple Push Notification service. On the web, the content of a notification is encrypted so that the push service cannot read it.

Your data is stored in the EU. The push services may be operated from outside the EU, for example from the USA. Where they are, the transfer relies on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep it

• Everything in your household is kept for as long as your account exists.
• Profiles, pets and items you remove are hidden at once but stay in the database until the account is deleted. If you want something you removed erased sooner, contact us and we will do it.
• When you delete your account, the account and all of your household's data are deleted immediately and permanently.
• Database backups are kept for up to 28 days, so deleted data is gone from them within 28 days.
• The security log is kept for as long as we need it to protect the service. When an account is deleted, its entries are anonymised: email addresses, names, IP addresses, user agents and descriptions are removed.
• A device's notification address is removed when you turn notifications off, or when the push service reports that it no longer works.

How we protect it

All traffic is encrypted with HTTPS. Passwords are stored as salted hashes. Every request is checked against your household and profile, so no household can see another household's data. And because we never store identity numbers or copies of documents, there is far less that could leak.

Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw your consent. Much of this you can do yourself in the app: edit or remove information, turn notifications off, or delete the account. For anything else, write to support@jagkoll.se and we will answer within one month.

If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection (IMY) or to the data protection authority where you live.

Changes to this policy

When we change this policy in a way that matters, we update the date at the top of this page and, for significant changes, tell you in the app or by email.