Privacy in the app

Who is responsible

SIRT Sverige AB (company reg. no. 556828-4193), Karlslundsvägen 12, 177 44 Järfälla, Sweden, is the controller for the Live Trafik app. Reach us under Account › Contact us or at [email protected].

What we process and why

Account

When you sign in with Google or Apple we store your email address, your name and an id from Google or Apple. With Apple the email address may be an anonymous relay address. From Apple we also store an encrypted key that is only used to end the sign-in with Apple when you delete your account.

If you create an account with email and password, we store your email address, your name if you give one, and your password in hashed form (bcrypt), never in plain text. To confirm the address or choose a new password we send you a code by email. The code is also stored only in hashed form and is valid for 15 minutes. Codes are deleted after a day.

Why: so you can sign in, and to tie your watches and Plus to you. Basis: our agreement with you. Kept until you delete your account.

Watches

A watch holds what you choose: a name, places (start and destination of a trip, or the centre of an area), a road, times, days and which notifications you want. The places can be, for example, your home and your workplace, which is why we only store the ones you save yourself.

Why: to tell you when something happens there. Basis: our agreement with you. Kept until you remove the watch or your account.

The morning summary is written by an AI service (Mistral, within the EU). It gets the watch's name, the names of its places and the traffic situation, but never your email address or exact coordinates.

Notifications

Only if you allow notifications do we register your phone: a notification token from Google (Firebase), a random id for the phone, phone model, system version, app version, language and time zone. Before you allow notifications, neither the token nor the id exists.

Why: to send notifications in the right language at the right time. Basis: our agreement with you. Notifications in the inbox are kept for 30 days. If you turn notifications off, your phone is switched off on our side and deleted after 90 days.

Your location

The app asks for your location only when you tap, for example, "Use my location" or "Near me", and only while the app is open. The location is sent to our server to show traffic near you, name the place or work out a route. It is not stored unless you save it in a watch.

To work out routes, the start and destination are sent to OSRM, an open routing service. When you search for a place, the search text is sent to Google.

Usage statistics

We want to know how many people use the app and where new users get stuck, without recognising your phone. So the app makes a random id each time it starts. It exists only in memory and is gone when the app closes. With it go the platform, app version and language, and when you reach certain steps for the first time, for example saving a watch.

If you are signed in, we also note which days you used the app.

Why: to understand how the app is used and make it better. Basis: legitimate interest. Data without an account is deleted after 90 days, days for signed-in users after 13 months, and everything is deleted with the account.

Buying Plus

Plus is bought in the App Store or Google Play. Neither we nor RevenueCat, which handles purchases for us, ever get your card details. RevenueCat gets your account id (a number) so that the purchase can be tied to your account. We store which product it is, when Plus started and ends, and whether it was a trial.

Why: to give you Plus. Basis: our agreement with you. Events from RevenueCat are kept for 90 days and the Plus periods as long as the account exists.

Scan a parking sign

When you photograph a parking sign, the photo goes through our server to Anthropic, whose AI (Claude) reads what the sign says. The photo is used for nothing else. We remove location data from the photo before it is sent, and we don't store it: on the server it exists only in memory while the sign is read. Anthropic does not use it to train its AI models and deletes it within 30 days. What the sign means right now is worked out by the app on your phone.

Earlier scans are kept only on your phone: a small copy of the photo, what the sign says and when you scanned it, not where. The app keeps the latest 30. You can delete them whenever you like, and they are deleted when you sign out or delete your account.

We store that you made a scan: when, in which country, whether the sign could be read, which AI model was used and how large the request was. We need this to count how many scans you have left.

Why: to read the sign for you and keep track of how many scans your plan includes. Basis: our agreement with you. Scans that could not be read are deleted after 90 days, the others when you delete your account.

Contact us

When you write to us we store your message, your email address if you are not signed in, and up to three images. We remove location data from the images before they are sent. With the message go the phone model, system version, app version, country, the screen you wrote from and the event it is about, so that we can help you.

Why: to answer you. Basis: legitimate interest. Images are deleted 90 days after the case is closed, and messages 12 months after the latest one.

Crash reports

If the app crashes, a technical report goes to Sentry (stored within the EU): the error, where in the app it happened, phone model and system version. Never your name, email address or places.

Why: to find and fix bugs. Basis: legitimate interest.

Translation

When you translate a description, it happens on your phone with Apple's or Google's built-in translation. We receive nothing.

Technical logs

Our servers log requests with IP address for operation and security. Coordinates, messages and ids are hidden in the logs. The logs have a fixed size and are overwritten.

What we don't do

• We show no ads in the app.
• We don't track you across apps or websites and don't use your phone's advertising id.
• We don't follow your location in the background.
• We never sell data about you.

Who processes data for us

• Hetzner: our servers, within the EU.
• Cloudflare: network, and storage of images sent to Contact us.
• Google: sign-in, maps, notifications and place search.
• Apple: sign-in, notifications and purchases.
• Brevo: email with sign-in codes (within the EU).
• RevenueCat: Plus purchases (USA).
• Sentry: crash reports (within the EU).
• Mistral: the morning summary text (within the EU).
• Anthropic: reads photos of parking signs (USA).
• OSRM: route calculation.
• New Relic: server performance.

When data goes to the USA, this happens under the EU–US Data Privacy Framework or the EU's standard contractual clauses.

Your rights

You have the right to know what data we hold about you, to correct it, to have it deleted, to restrict or object to its processing, and to get it out to take elsewhere. Write to us and we will help you. If you think we are doing something wrong, you can complain to the Swedish Authority for Privacy Protection (IMY).

Delete your account

Under Account › Delete account you delete your account at once. This deletes your password and email codes, your watches, notifications, phone registrations, Plus periods, purchase events, statistics tied to the account, your parking-sign scans and your messages to us, and ends the sign-in with Apple. An active subscription is cancelled in the App Store or Google Play.

No longer have the app? Write to [email protected] from the email address you sign in with, and we delete the account and everything tied to it within 30 days and confirm when it is done.

Children

The app is not aimed at children.

Changes

If we change anything important, we tell you in the app. The date of the latest change is at the top.