Privacy Policy

PRIVACY POLICY for SPELDOSA

Last updated: 2026-07-07

Speldosa (“we”, “us”, “our”) is operated by Speldosa AB, Stora Nygatan 60, 211 37 Malmö, Sweden.

For questions about your personal data, contact .

1. Personal Data We Collect

We collect only the personal data strictly necessary to operate Speldosa:

  • Email address

    Purpose: To manage and authenticate user accounts

    Legal basis: Performance of a contract (Article 6(1)(b) GDPR)

  • User preferences and saved data

    Purpose: To provide personalized functionality

    Legal basis: Performance of a contract (Article 6(1)(b) GDPR)

  • Push notification subscription data

    Purpose: To deliver optional push notifications to devices that have opted in

    Legal basis: Consent (Article 6(1)(a) GDPR)

We also collect anonymous metrics for platform performance and improvements; these do not identify any user.

2. Data Retention

  • System logs are retained only as long as necessary for operational and security purposes.
  • Usage metrics are retained according to provider policies.
  • Account-related data is retained only as long as necessary to provide the service.
  • Push notification subscription data is deleted when you disable notifications or when a subscription expires.
  • Contract-related information (billing, invoices) is retained 7 years to comply with Swedish law.

3. Data Recipients and Processors

We use service providers to operate and secure the service, including Neon, Vercel, Cloudflare, Mux, Sentry, Plausible, and Resend. Browser push services such as Apple Push Notification service, Firebase Cloud Messaging, Mozilla autopush, and equivalent browser vendors may process push delivery data when you enable push notifications. They process personal data only on our instructions and as necessary to provide their services.

4. Data Processing Agreements

We have GDPR-compliant Data Processing Agreements with our service providers. Copies are available upon request at .

5. International Data Transfers

Primary processing occurs within the EU/EEA. Some providers may process personal data outside the EU/EEA; in such cases, processing is conducted under applicable data-protection requirements.

6. Your GDPR Rights

You have the right to:

  • Access, correct, or delete your data
  • Restrict or object to processing
  • Receive your data in a portable format
  • Withdraw consent (if given)
  • Lodge a complaint with the Swedish Authority for Privacy Protection (IMY)

To exercise these rights, contact .

7. Security

We implement appropriate technical and organizational measures to protect personal data.

8. Policy Updates

We may update this policy. The “Last updated” date reflects the current version. Continued use indicates acceptance.

9. Contact

Speldosa AB

Stora Nygatan 60, 211 37 Malmö, Sweden

Email: