Privacy Policy

1. Who we are

Flaplist is developed and operated by Redefine v/Morten Bang Justesen, CVR 30270444, Denmark. We are subject to the General Data Protection Regulation (GDPR) and act as the data controller for the personal data we process about our users.

If you have questions about this policy or your personal data, contact us at: privacy@flaplist.com

2. What data we collect

When you create an account, we receive basic profile information from your chosen identity provider (such as Google or GitHub) — typically your name, email address, and profile picture. We use this to identify your account and send service-related messages when needed.

Content you create — lists, items, checklist runs, and activity history — is stored and associated with your account. Flaplist is not intended for the storage of sensitive data or specially confidential personal data, and customers must not use the platform to store national identification numbers, health data, criminal offence data, payment card data, or similar information.

We use Swetrix for analytics. Swetrix does not use cookies and does not track you across sites. It processes anonymised page views and error events only. No identifying information about you is passed to Swetrix.

We do not use cookies. Your authentication session is stored in your browser's local storage, which is technically necessary for the app to work. This data stays on your device.

The service is intended for users aged 15 and above. We do not knowingly collect personal data from children under 15.

3. Why we collect it

We process your data for the following purposes and on the following legal bases:

• To provide and maintain the service — performance of a contract.
• To send important account and service notifications — legitimate interest.
• To understand usage and improve the service — legitimate interest. We rely on anonymised analytics that cannot identify you.
• To prevent fraud and ensure security — legitimate interest.

We do not process your data for advertising, profiling, or sale to third parties.

4. How long we keep your data

We keep your account and content data for as long as your account is active. When you delete your account, your personal data is scheduled for permanent deletion within 30 days.

List content may be held briefly after deletion to allow for accidental recovery. It is fully and permanently deleted within 30 days of account deletion.

5. Who we share it with

We do not sell or rent your personal data. We use a small number of third-party services to operate Flaplist:

• Logto — our authentication provider, which handles sign-in with Google, GitHub, and other methods.
• Swetrix — our analytics provider. Only anonymous, aggregated data is processed.
• Our hosting provider — your data is stored on servers located within the European Union.

These providers are required to handle your data in accordance with GDPR.

6. Your rights

Under GDPR, you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate information.
• Erasure — request that we delete your data.
• Portability — receive your data in a portable format. You can export your data directly from the platform.
• Restriction — ask us to temporarily limit the processing of your data.
• Objection — object to certain types of processing.

To exercise any of these rights, contact us at privacy@flaplist.com. We will respond within 30 days.

You also have the right to file a complaint with the Danish Data Protection Agency (Datatilsynet) at www.datatilsynet.dk.

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you (GDPR Article 22).

7. Changes to this policy

We may update this policy from time to time. When we do, we update the date at the top of this page. If we make significant changes, we will notify you via the app or by email.

Your continued use of Flaplist after changes are published constitutes acceptance of the updated policy.

8. Contact

For questions about your data or this policy, reach us at: privacy@flaplist.com