Privacy policy

In short

• You can start without saying who you are. Your steps are then stored on an account with no name, until you save it with email, Apple or Google.
• We store your steps so you can see what they mean and carry on on a new phone. What you ate or swapped out stays on your phone.
• No analytics, no ads, no tracking across apps and websites. We never sell data.
• The data is kept by Google Firebase in the EU (Finland).
• You can download your data and delete your account right in the app.

Who is responsible

The controller is Oscar Nilsson, as a private person. Hopp för djuren is his personal project and doesn't belong to any company. The app is free.

Questions about your data: hej@hoppfordjuren.se.

Before you save your account

The first time you open the app, an account is made without a name or email. From your first step, your steps are stored on it, on our server, not only on your phone. That is why they stay if the app closes, and why they come along when you save the account.

The account is yours before it has a name. You can download your data and delete it under Settings → Account, just like a saved account. Logging out comes once you've saved, because until then there is nothing to log back in to.

When you save with Apple, Google or email, it stays the same account with the same steps. If you never save and the account is not used for 12 months, it is deleted with everything in it.

What we store and why

This is stored on our server when you use the app:

• An account ID, without a name or email. It is created when you first open the app (see Before you save your account).
• If you save your account: your email address (when you sign in with email and password), or what Apple or Google send when you sign in with them: an ID, an email address and sometimes a name and a link to your profile picture. With Apple you can choose a hidden address. Passwords are handled by Firebase Authentication and we never see them.
• Your profile: the name you choose (it doesn't have to be your real one), your animal and your language.
• Your steps: what kind of step, the area (for example food or clothes), when you took it, and an estimate of how many animals it adds up to. Hops, days in a row and step count are worked out from them and kept with your profile.
• Your flock, if you join one: that you are in it, the first name and animal you chose, your hops this week, how many days in a row you have hopped, the kind of step you took last and how many people have cheered you on. The flock’s name and code.
• Your code: a personal code you can give to others.
• Who brought you, if you agree to it: that person’s code. Your dot then sits under theirs in the tree.
• Your dot in the tree: it is created with your first step and holds your animal, when you started and how many steps you have taken. The dot has no name.

What we don't store

What you ate, bought or swapped out, and what you write in the tools, stays on your phone. Emails you send to politicians or companies go from your own mail app; we don't see them.

The meal planner runs on your phone in this version. Nothing is sent.

Reminders and news alerts are created on your phone in this version. We don't store a notification token.

We use no analytics, no crash reporting, no ads and no cookies, in the app or on the website.

What others see

People in your flock (12 at most) see the name and animal you chose, your hops this week, how many days in a row you have hopped, the kind of step you took last and how many people have cheered you on.

When you take a step it can show in the shared feed, without your name: the kind of step, the area, your animal and when. The line has no name or ID. Your own phone recognises it against your own steps and writes You. A line expires after 7 days and is then removed automatically.

In the tree you show as a dot without a name, with your animal. How many steps a dot has taken shows only once at least five people are in that tree or branch. With fewer, only the dots show.

The counter for everyone together shows totals without names, also while there are few of us.

Legal basis

• Contract (Article 6(1)(b) GDPR): your account, steps, flock, and your data following you to a new phone. That is what you ask the app to do.
• Consent (Article 6(1)(a)): who brought you. You can withdraw it at any time under Settings → Account → Remove who brought me. The code is then removed and your dot leaves their tree.
• Legitimate interest (Article 6(1)(f)): anonymous totals, the feed and the dots in the tree, and protecting the service against abuse.

Where the data is

The database is Google Cloud Firestore in the europe-north1 region (Finland). Sign-in is handled by Firebase Authentication. Google is our processor under Google's data processing terms, and Google may in some cases process data outside the EU. The EU Standard Contractual Clauses and the EU–US Data Privacy Framework, under which Google is certified, then apply.

If you sign in with Apple or Google, their own terms also apply to the sign-in itself. We only get what is listed under What we store and why.

Everything is sent encrypted (HTTPS). Only you can read your data through the app. As the person responsible, Oscar can access the database for running and fixing the service, and only does so when needed.

How long

• For as long as you keep your account. When you delete it, your profile, steps, flock membership, code and sign-in are removed at once. What stays can no longer be linked to you: an anonymous dot in the tree, anonymous totals in the shared counters, and feed lines without a name that expire within 7 days. A flock you started stays for the others.
• An account that was never saved (no email, Apple or Google) and has not been used for 12 months is deleted.
• Lines in the feed expire after 7 days.
• Emails to us are kept until the matter is closed.

Your rights

You have the right to know what we hold about you, to have it corrected, deleted or moved, to object to processing based on legitimate interest, and to withdraw consent.

In the app: Settings → Account → Download my data gives you your data as a file. Ask for anything else at hej@hoppfordjuren.se. We reply within one month.

If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se, or the data protection authority where you live.

Delete your account

In the app: Settings → Account → Delete account. The account and what can be linked to you is deleted at once. What stays is listed under How long.

If you no longer have the app: email hej@hoppfordjuren.se from the address you sign in with, or tell us which account it is. We delete it within 30 days and confirm when it is done.

If you only remove the app, a saved account stays so you can sign in again. An unsaved account is deleted after 12 months.

Children

Hopp is made for people aged 13 and over. The film at the start is for people aged 15 and over, and you can skip it. If you think a child under 13 has an account, let us know and we'll delete it.

The website

hoppfordjuren.se has no cookies and no analytics. The pages are served by Firebase Hosting, and Google's servers process your IP address to send you the page. The form on Want to help? opens your own mail app and sends nothing by itself.

Changes

If we change anything about your data, we say so in the app before it applies, and the date at the top changes.