Legal
Privacy policy
Last updated · Terms of use
In short:
- We use your data to make the app work – not for advertising. We never sell personal data.
- What you share about the children is visible to the parent you've connected with, and to no one else.
- Our servers and database are in Stockholm. A few suppliers (for example for text messages and push notifications) process data on our behalf.
- You can see, correct and delete your data. You delete your whole account directly in the app.
1. Data controller
[Företagsnamn AB], [org.nr 000000-0000], [Postadress, postnummer ort], is the controller for the processing described here. Send questions about personal data to info@varnara.se.
This policy covers the Varnara app for iOS and Android and the website varnara.se. It complements our terms of use. The Swedish version (Integritetspolicy) takes precedence if the two versions differ.
2. What data we process
About you
- Account: mobile number, first and last name, language and time zone, and the settings you choose (such as notifications and theme).
- If you add them yourself: profile photo, email address, postal address and Swish number (the last is shown to the other parent so you can pay each other).
- Consents: that and when you accepted the terms and read this policy.
About the children
- Name, date of birth, gender and profile photo, plus anything you write under Important to know.
- Custody schedule, handovers, activities (with a location if you add one), holiday planning, school and preschool contacts, expenses and receipts, documents, agreements, journal entries, memories and photos.
Only add what's needed. Only write sensitive information, such as a child's health or allergies, if you want the other parent to have it in the app.
About the other parent
When you invite the other parent, we process the mobile number you enter to send the invitation by text message. Once they've joined, this policy applies to them too.
What you write to each other
Messages, comments, proposals and swaps between you as parents.
Technical information
- A token for sending push notifications to your device.
- Crash reports from the app: device model, operating system, app version and a random installation ID. They don't contain what you've written in the app.
- Server logs including IP address and time, for security and troubleshooting.
The app contains no advertising and no third-party tracking or analytics tools.
Through the website
The contact form collects your name, email address and message. The website uses no cookies for tracking or statistics.
3. Why we process the data and on what basis
| Purpose | Legal basis |
|---|---|
| Creating and running your account, signing you in with a text-message code, and providing the app's features to you and the parent you share with | Contract (Article 6(1)(b) GDPR) |
| Processing information about the children and about the parent you invite, so that you can plan the children's everyday life together | Legitimate interest (Article 6(1)(f)) – yours and the other parent's interest in coordinating the children's everyday life |
| Storing sensitive information that you choose to add, such as a child's health | Your explicit consent (Article 9(2)(a)), given by adding the information and withdrawn by removing it |
| Sending reminders and notifications | Contract (Article 6(1)(b)); you choose which notifications you get |
| Security, preventing abuse, troubleshooting and improving the app | Legitimate interest (Article 6(1)(f)) |
| Replying to messages sent through the contact form or by email | Legitimate interest (Article 6(1)(f)) |
We make no decisions about you based solely on automated processing. Tone Guard checks text against word lists within our own service and only gives suggestions; the text is not sent to any AI service or other supplier.
4. Who can see the data
The other parent: what's shared about your children is visible to both of you. Your mobile number, your settings and anything else that only concerns your account are not.
Our suppliers process data on our behalf and may only use it to provide their services to us:
| Supplier | What they do | Location |
|---|---|---|
| Akamai Technologies (Linode) | Servers and database | Stockholm, Sweden |
| Google (Google Cloud and Firebase) | Storage of photos and documents, internal messaging, sign-in (Firebase only receives a random user ID, not your mobile number), push notifications and crash reports | EU/EEA and USA |
| Apple | Delivering push notifications to iPhones | USA |
| 46elks AB | Text messages with sign-in codes, invitations and reminders | Sweden |
| Postmark (ActiveCampaign) | Email, such as verification codes | USA |
For weather forecasts on activities, we send the activity's (rounded) coordinates and time to the Norwegian Meteorological Institute – nothing about who you are.
We may also disclose data where the law requires it, for example at the request of the police or a court. We never sell personal data.
5. Transfers outside the EU/EEA
Some suppliers are US companies or use sub-processors outside the EU/EEA. We only use suppliers that are certified under the EU-U.S. Data Privacy Framework or have signed the European Commission's standard contractual clauses, so your data is protected to the same standard as within the EU.
6. How long we keep data
- While you have an account, we keep your data and content. Whatever you delete in the app is deleted.
- When you delete your account, your account details, profile photo and other files you've uploaded, settings, device tokens and invitations are deleted immediately. If you're the only parent of the family in Varnara, the children's data and all content are deleted too. If a co-parent still uses the service, the shared content about the children stays available to them, but your name and account details are removed.
- Backups are overwritten continuously; deleted data disappears from them as the backups are replaced.
- Messages sent through the contact form are kept as long as we need them to handle the matter and deleted no later than 12 months after it's closed.
7. Your rights
You have the right to:
- know what data we hold about you and get a copy of it;
- have incorrect data corrected – you can change most of it yourself in the app;
- have your data deleted – you delete your whole account in the app under Profile → Delete account;
- ask us to restrict processing, and object to processing based on legitimate interest;
- receive data you've provided in a machine-readable format (data portability);
- withdraw consent at any time, without affecting processing before that.
Email info@varnara.se and we'll reply within one month. We may need to confirm your identity first.
If you think we're handling your data incorrectly, you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.
8. Children
Varnara is for adults. Children can't create accounts, and the information about children is added and managed by their parents. Children's rights under the GDPR are normally exercised by their legal guardians.
9. Security
All traffic between the app and our servers is encrypted. Sign-in uses one-time codes, so there are no passwords that can leak. Access to our systems is limited to people who need it, and we review security continuously.
10. Changes
We update this policy when the service or the law changes. The date at the top shows when it last changed. We'll announce significant changes in the app before they take effect.