Privacy policy

This policy explains what personal data we process when you use the dibsi app and this website, why, who sees it and what you can do about it.

Who we are

Seniorito AB, based in the Gothenburg area, Sweden, is the controller of the personal data described here. You reach us at hi@dibsi.se.

What we process

• Account: email address, name, username and profile photo. If you sign in with Apple or Google, we receive your name and email from them.
• Lists and wishes: what you add, such as titles, links, prices, notes, photos, categories and dates.
• Friends: who you are friends with, friend requests and which lists you follow.
• Reservations: the name you give, an optional message and contact detail, and an optional receipt when you reserve a gift, also when you reserve through a link without an account.
• Notifications: a device token, so we can send push notifications if you allow them.
• Crash reports: technical information such as device model, app version and what happened when the app crashed.
• Support: what you write when you email us.

Why, and on what legal basis

• To provide the app (your account, lists, friends, reservations and the reveal): to fulfil our agreement with you (GDPR art. 6.1 b).
• Push notifications: your consent, given in your phone's settings, which you can withdraw there at any time (art. 6.1 a).
• Crash reports, security and preventing misuse: our legitimate interest in an app that works and is safe (art. 6.1 f).
• Answering support: our legitimate interest in helping you (art. 6.1 f).

We don't sell personal data, show no ads and don't use your data for marketing.

Who sees what

• Your lists are visible to the friends and people you share them with, and to anyone who has a list's link.
• Your name, username and profile photo are visible to your friends and to people you share lists with.
• On reservation lists, the owner can't see who reserved what until after the list's date. Then they see the name you gave, your message and any receipt.
• Other guests only see that a wish is taken, not by whom. When several people buy a gift together, those taking part see each other.

Services we use

We use these providers to run the service. They process data only on our behalf and under data processing agreements:

• Supabase: database, sign-in and file storage.
• Vercel: hosting this website and fetching product information from links you add.
• Google Firebase: push notifications.
• Sentry: crash reports.
• Apple and Google: sign-in, if you choose it, and distributing the app.

Transfers outside the EU/EEA

Some of these providers are based in the USA. When data is transferred there, it is protected by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep it

• Your account and everything in it is kept until you delete it or your account.
• When you delete your account, it is removed straight away. Files such as list photos are removed by our nightly cleanup.
• Receipts are deleted automatically 60 days after a list is revealed.
• Crash reports are kept for a limited time, normally up to 90 days.
• Support emails are kept as long as needed to help you.

This website

The website uses no cookies and no analytics or tracking. Fonts and icons are served from our own domain. Our host stores technical logs, such as IP addresses, for a short time to keep the site running and secure.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you,
• have incorrect data corrected,
• have your data deleted,
• restrict or object to our processing,
• receive your data in a portable format,
• withdraw a consent you have given,
• complain to the supervisory authority, in Sweden the Swedish Authority for Privacy Protection (IMY).

Email hi@dibsi.se from the address linked to your account to use any of these rights. You can delete your account yourself at any time, see Delete account.

Children

The app is not intended for children under 13. If we learn that we have data about a child under 13, we delete it.

Does your child want a wishlist? Create it in your own account and share it with family and friends.

Changes

If we make significant changes to this policy, we tell you in the app before they take effect. The date at the top always shows the latest version.