Privacy Policy
Last updated: March 2026
Who we are
smyga is operated by Smyga AB, a company registered in Sweden. We are the data controller for personal data processed through this platform. Contact: privacy@smyga.se.
Data we collect
- Account data: name, email address, profile photo (via Google/Microsoft OAuth).
- Profile data: emergency contact, date of birth, phone number — required for adventure registration.
- Usage data: pages visited, adventures registered for, check-in timestamps.
- Location data: home address (optional) used to filter nearby adventures. Not shared with third parties.
- Device data: browser type, IP address, operating system — collected automatically for security and analytics.
How we use your data
- To provide the smyga platform and its features.
- To show you relevant adventures based on your preferences and location.
- To notify you about adventures you are registered for.
- To operate check-in functionality on the day of an adventure.
- To communicate service updates and respond to support requests.
Legal basis (GDPR)
- Contract: account and profile data required to deliver the service you signed up for.
- Legitimate interest: security logs, fraud prevention.
- Consent: optional marketing emails — you can withdraw consent at any time.
Data sharing
We do not sell your personal data. We share data only with:
- Guides and organisations when you register for their adventure (your name and contact details).
- Hosting and infrastructure providers (Heroku, AWS S3) under data processing agreements.
- Authentication providers (Google, Microsoft) for login only.
Your rights
Under GDPR you have the right to access, correct, export or delete your data. You can also object to certain processing. To exercise these rights contact privacy@smyga.se.
Retention
Account data is retained for as long as your account is active. Upon deletion, personal data is removed within 30 days. Anonymised analytics data may be kept indefinitely.
Changes to this policy
We will notify registered users by email of any material changes to this policy before they take effect.