What we hold, and what we deliberately never receive
This is an English rendering of the Swedish notice at /integritet, which is the version we are accountable for.
The most important thing first: the calorie diary never leaves your browser
What you eat, what you weigh and what you are aiming for are stored locally on your own device and are never transmitted to us. There is no copy on our servers, which means there is no copy to leak, to subpoena or to sell. The consequence is that the diary does not follow you to a new phone, and we would rather have that limitation than the data.
Controller
Gaddr is the controller for the processing described here. Contact details and the data protection contact address are on the Swedish page.
What we process
- Account: email address, name if you give one, and a password stored as a scrypt hash. Legal basis: performance of the contract.
- Orders: what you ordered, from where, to which address, and what it cost. Legal basis: performance of the contract, and accounting law for the retention period.
- Payment: handled by our payment provider. We store the last four digits and the card type, never the full number.
- Allergies you have set: to filter what we show you. Health data, and therefore processed on your explicit consent, which you can withdraw at any time by clearing the setting.
- Delivery address and position while an order is live: to route the courier. Position history is deleted once the order is closed.
We do not profile you
No behavioural advertising, no sale of data, no third-party trackers, and no inference about your health, your finances or your household from what you order. The recipe filter runs on the choices you set, not on a model of you.
Automated decision-making
None that has a legal or similarly significant effect on you. Fraud checks may flag an order, but a person decides before an account is suspended, and that person tells you why in writing and can be asked to look again.
Recipients
The restaurant receives what it needs to cook and label your order. The courier receives your address and first name while the delivery is live, and loses that access when it completes. Our payment provider and our hosting provider process on our instructions under written agreements.
Transfers outside the EU and EEA
Our infrastructure runs inside the EU. Where a processor has support staff outside it, the transfer rests on the standard contractual clauses and the list of processors is on the Swedish page.
Your rights
Access, rectification, erasure, restriction, portability and objection. Export and deletion are buttons in the portal rather than a request you have to write, and they take effect immediately except for records accounting law requires us to keep. You may also complain to the Swedish Authority for Privacy Protection.