Privacy policy

LivsStyrker stores only what the service needs to work, both in the app and in the browser. We use no analytics, show no ads and do not track you, neither in the app, in the web app nor on this website.

Who is responsible

Incredible AS (organisation number 921 197 799), Platous gate 9B, 0190 Oslo, Norway, is the data controller for the personal data in LivsStyrker and on livsstyrker.no. Send questions about privacy to hello@livsstyrker.no.

What we store

• Your name, as you write it in the app.
• Your email address, or Apple’s relay address if you hide your email when you sign in with Apple. When you sign in with Apple, we also store a fixed identifier that Apple gives us.
• Your invite code, which is part of your personal invite link.
• Your moments: the title, when the moment was made, who it is from, whether you have seen it, and the strengths with reasons.
• Photos you attach to a moment. The app sees only the photos you choose, and makes them smaller before they are uploaded.
• Your contacts, meaning who you are connected to in the app.
• Your language, if you have chosen Norwegian or English under “Settings”.
• Notification tokens: a code from Apple that lets us send notifications to your phone, if you have turned on notifications in the iPhone app.
• Browser notifications: if you turn on notifications in the browser, we store a push address and keys for each browser, and which language the notifications should use.

When the app fetches and saves data, technical details such as IP address and time are recorded in server logs. We do not collect phone numbers, location or the contact list on your phone, and we have no analytics that record what you do in the app.

Storage in the browser

The web app at livsstyrker.no/app keeps your sign-in and your language choice in the browser’s local storage, so that you stay signed in. While you sign in with Apple, a one-time code that protects the sign-in is stored too. This is needed for the service to work, and is not used for tracking. Neither the website nor the web app uses cookies for tracking or advertising. When you sign out, the sign-in is removed from the browser.

Who sees what

• Only you see the moments in your list.
• When you send strengths to someone, the moment goes to them, with your name as the sender. You keep no copy in the app.
• Your contacts see your name and which strengths you have received, with counts. They do not see the moments, titles, photos or reasons.
• Someone who opens your invite link sees your name only after signing in, and can then choose “Add”. Before sign-in, the link shows nothing about you.

Why we process the data

We use the data to deliver the service you have asked for: signing you in, saving your moments, connecting you to your contacts, delivering strengths you send, sending notifications and showing your strength profile. The legal basis is our agreement with you, under Article 6(1)(b) of the General Data Protection Regulation.

You get notifications only if you have allowed them. On iPhone, you turn them off in the iPhone settings, and in the browser under “Settings” in LivsStyrker or in the browser’s settings.

We use the server logs to keep the service secure and fix errors. The basis is our legitimate interest in running a safe service, under Article 6(1)(f).

We do not use the data for advertising or profiling, and we do not sell it.

Who processes the data for us

• Supabase runs the database, the sign-in and the photo storage as our data processor. The data is stored in the EU, in Supabase’s data centre in Stockholm. Supabase Inc. is an American company. If data is processed outside the EEA, this is done under the EU’s standard contractual clauses.
• Apple handles Sign in with Apple and delivers notifications to the iPhone app. Apple then receives the notification token and the text of the notification, for example “Kari sent you strengths”.
• The browser’s push service delivers notifications in the browser: Google for Chrome and other Android browsers, Mozilla for Firefox, Apple for Safari and Microsoft for Edge. The service receives the push address and the notification itself, encrypted so that only your browser can read the content.
• Resend sends the sign-in code to your email address and receives the address and the code. Resend Inc. is an American company. If data is processed outside the EEA, this is done under the EU’s standard contractual clauses.
• Google delivers our email through Google Workspace. If you write to us, your email is stored there.
• Vercel hosts this website and the web app, and processes technical details such as IP address to deliver the pages. When you sign in with Apple in the web app, Apple’s answer passes through a small function at Vercel, which hands it on to your browser without storing it. Vercel Inc. is an American company. If data is processed outside the EEA, this is done under the EU’s standard contractual clauses.

How long we keep the data

• The data is kept for as long as you have an account.
• If you delete a moment, it is deleted together with its strengths, reasons and photo.
• The notification token and browser notifications are deleted when you sign out, or when Apple or the browser’s push service reports that they no longer work. We keep notifications for at most ten browsers per account.
• Server logs are deleted automatically after a short time, normally within seven days.
• Deleted data can remain in backups for up to seven days before it disappears.

How to delete your account

Open “Settings” in the app or in the browser, and choose “Delete account”. In the app, “Settings” is behind the gear under “My profile”. We then delete your name, email address, invite code, moments, contacts, notification tokens, browser notifications and all the photos you have uploaded. Strengths you have sent to others stay with the people who received them, but without your name and without photos.

If you cannot get into the app, you can ask for deletion by email to hello@livsstyrker.no.

Your rights

You have the right to see the data we hold about you, and to have errors corrected. You can ask for the data to be deleted, receive it in a machine-readable format, ask for processing to be restricted, and object to processing based on legitimate interest. Send an email to hello@livsstyrker.no, and we will answer within one month.

If you believe we process personal data in breach of the rules, you can complain to the Norwegian Data Protection Authority at datatilsynet.no. We would appreciate it if you contacted us first.

Changes

We update this policy when the app changes. The date at the top shows when it was last changed, and we announce important changes in the app.

This is a translation. If the English and Norwegian versions differ, the Norwegian version applies.