Privacy policy
Last updated
12 April 2026. This privacy policy complies with the EU General Data Protection Regulation (GDPR) and Swedish law (the Data Protection Act).
1. Data controller
The Kvitt app is operated by Izak Johansson. For questions about the processing of your personal data, contact us via the app or the email address stated in the app. As data controller we are responsible for ensuring your data is processed lawfully and securely.
2. What data we collect
We may process: email address, name, phone number (if you provide it), content you create in the app (e.g. groups, expenses and payment information) and technical data (device information, logs). All data is collected to provide the service and fulfil our agreement with you.
3. Legal basis and purpose
We process your data on the basis of contract (GDPR Art. 6.1(b)) to provide the Kvitt service, and where applicable on the basis of consent (Art. 6.1(a)). Processing is carried out to manage your account, groups, expenses and payment information and to communicate with you about the service.
4. Retention period
We retain your data for as long as you have an account and thereafter as long as we need it to meet legal requirements (e.g. accounting) or handle disputes. You may request deletion of your account and data at any time.
5. Your rights (GDPR)
You have the right to: access your data (Art. 15), rectification (Art. 16), erasure – the "right to be forgotten" (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), object to processing (Art. 21) and withdraw consent. You also have the right to complain to a supervisory authority; in Sweden this is the Swedish Authority for Privacy Protection (IMY), imy.se.
6. Sharing and transfers
We do not share your personal data with third parties unnecessarily. The service may use providers (e.g. cloud services) that process data on our behalf in the EEA or in countries with an adequate level of protection. Transfers to third countries take place only in accordance with GDPR Chapter V.
7. Security
We apply appropriate technical and organizational measures to protect your data against unauthorized access, loss or alteration.
8. Changes
We may update this policy. For material changes we will inform you via the app or email. The updated version applies from the date stated in the heading.