Last updated 10 October 2026.

1. Who is responsible for your data

The data controller is:

Sitepoint Systems ApS
CVR 39299739
Rådhusstræde 15, 1466 Copenhagen K, Denmark
Email: lennart@sitepoint.dk

This policy also covers products published under one of the company's secondary names (binavne) and products that link to this page. In all those cases Sitepoint Systems ApS is the controller.

2. What this policy covers

This policy covers mobile apps, games, desktop and web software, and the websites that support them (together "products"). It does not cover websites, services or content run by others, even if a product links to them or lets you sign in with them. Their own privacy policies apply.

3. What we collect

We collect only what a product needs to work, to keep it secure and to meet our legal obligations. Not every product collects every category below. The app store listing (Apple's privacy label and Google Play's data safety section) shows what a specific app collects.

  • Account data. Name, email address, a hashed password, and an account identifier, if the product has accounts. If you sign in with Apple, Google or another provider, we receive the details that provider shares with us, typically your name, email address and an identifier.
  • Content you provide. Text, images, files, settings, messages, game progress and anything else you create, enter or upload.
  • Technical and usage data. Device type, operating system, app version, language, IP address, timestamps, error logs and crash reports, and basic information about which features are used.
  • Device permissions. Camera, microphone, photos, location, contacts, calendar, and Face ID or fingerprint are used only when you use a feature that needs them and only after you have allowed it in your device settings. Face ID and fingerprint data stay on your device and never reach us.
  • Notifications. If you allow push notifications, we store a push token so Apple or Google can deliver them.
  • Purchases. If you buy something, we receive confirmation of the purchase, the product and the price. Payments are handled by the App Store, Google Play or Stripe. We never see or store your full card number.
  • Communication. If you contact us, we keep the message and our reply.

4. What we do not do

  • We do not sell your personal data.
  • Unless a product clearly tells you otherwise before you use it, it shows no third-party advertising and does not track you across other companies' apps and websites. If a product does, we ask for your consent where the law requires it.
  • We do not use your content to train our own or third parties' AI models without your consent.

5. Why we use your data, and on what legal basis

  • To provide the product you asked for, including your account, your content, sync and support: performance of a contract (GDPR Art. 6(1)(b)).
  • To operate, secure, debug and improve our products, prevent abuse and fraud, and defend legal claims: our legitimate interests (Art. 6(1)(f)).
  • Notifications, device permissions, optional analytics and anything else we ask your permission for: your consent (Art. 6(1)(a)). You can withdraw consent at any time in the product or in your device settings. Withdrawal does not affect processing that took place before.
  • Bookkeeping, tax and responding to lawful requests from authorities: legal obligation (Art. 6(1)(c)).

6. AI features

Some products have features powered by AI models. When you use such a feature, the content you send to it is processed by us and by the AI model provider we use for that feature, only to produce the response. We choose providers that do not use the content to train their models. AI output can be wrong, incomplete or inappropriate; see our terms.

7. Who we share data with

We share personal data only with the following categories of recipients:

  • Processors acting on our instructions under a data processing agreement: hosting on our own servers at Hetzner in the EU; Cloudflare for network delivery and protection against attacks; Amazon Web Services for sending email; AI model providers for AI features; and error and crash reporting services.
  • Platform providers: Apple and Google for app distribution, sign-in, push notifications and in-app purchases, and Stripe for payments outside the app stores. They process data under their own terms and privacy policies.
  • Other users, but only content you choose to share in a product that has sharing or community features.
  • Authorities, courts and advisers where we are legally required to, or where it is necessary to establish, exercise or defend legal claims.
  • A buyer or successor if a product or the company is sold, merged or restructured, in which case this policy continues to apply to your data.

8. Transfers outside the EU/EEA

Our own servers are in the EU. Some providers may process data outside the EU/EEA, for example in the United States. Such transfers rely on an EU adequacy decision, including the EU-U.S. Data Privacy Framework, or on the European Commission's standard contractual clauses. You can ask us for a copy of the relevant safeguards.

9. How long we keep data

We keep your data for as long as you have an account or use the product. When you delete your account, we delete or anonymise your personal data within 30 days, except where we must keep it longer: bookkeeping records are kept for five years under the Danish Bookkeeping Act, and data needed for an ongoing dispute is kept until it is resolved. Backups are overwritten on a rolling schedule. Technical logs are kept only as long as operation and security require, normally no longer than 90 days. Products without accounts keep data only as long as needed for the purpose it was collected for.

10. Security

We protect data with encryption in transit, access control and regular updates. No system is completely secure, so we cannot guarantee that data will never be lost, misused or accessed without authorisation. If a breach is likely to put your rights at high risk, we will tell you as the law requires.

11. Deleting your account

Where a product has accounts, you can delete your account in the product. You can also email lennart@sitepoint.dk from the address linked to your account, naming the product, and we will delete it for you. Deleting an app from your device does not delete your account. Store subscriptions must be cancelled separately in your Apple or Google account.

12. Your rights

Under the GDPR you have the right to access your data, have it corrected or erased, restrict or object to its processing, and receive it in a portable format. Where processing is based on consent, you can withdraw it at any time. Email us and we will answer within one month. We may ask you to confirm your identity first.

You can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, Denmark, datatilsynet.dk, or to the supervisory authority where you live.

13. Children

Our products are not directed at children under 13, and we do not knowingly collect personal data from them. Where a product relies on consent and you are under the age of digital consent in your country, a parent or guardian must give it. If you believe a child has given us personal data without the required consent, contact us and we will delete it. A product may set a higher minimum age, which then applies.

14. Third-party links and services

Products may link to or embed services run by others, such as maps, payment pages, sign-in providers or external websites. We are not responsible for how those services handle your data.

15. Changes to this policy

We may update this policy. The date at the top shows the latest version. If a change materially affects how we use your data, we will tell you in the product or by email before it takes effect.

16. Contact

Questions about this policy or your data: lennart@sitepoint.dk, or by post to Sitepoint Systems ApS, Rådhusstræde 15, 1466 Copenhagen K, Denmark.