Privacy Policy

Who is responsible

Hamsson Commerce (company registration no. 020408-4172), which operates Snabbo, is the controller for the processing described here. Questions and requests: hej@snabbo.se.

What we store and why

• Email address: the account, confirmation and reset codes, and selected notifications. Legal basis: contract.
• Password (if you choose email sign-in): stored only as a cryptographic hash (scrypt), never in plain text. Legal basis: contract.
• Apple or Google sign-in (when available): we receive a verified account identifier and email address, which may be a hidden Apple address. We do not request access to contacts, calendar, or documents. Apple data needed to revoke the connection is stored encrypted on the server. Legal basis: contract.
• Mobile number (optional, when the SMS feature is available): SMS alerts. Legal basis: contract.
• Search alert criteria: area, rent, size and more; this is the service itself. Legal basis: contract.
• Notification history: which notifications were sent, when, and how they were delivered. Used for delivery receipts, troubleshooting, and to never send duplicates. Legal basis: contract and legitimate interest.
• Push subscriptions: the device token for Apple Push Notification service on your iPhone if you enable push. Legal basis: consent (you can turn it off at any time).
• Your activity under You (optional, off by default): which days you used the app and how many homes you opened per day, as a count without home ID. Used to show you your streak and overview, and shown only to you. If you turn it off under You, anything saved is deleted. Legal basis: consent.
• In-app feedback (optional): rating, message, app version, where in the app you wrote, and whether we may contact you. The data is linked to your account, and we contact you only if you have agreed to it. Legal basis: legitimate interest in improving the service.
• Support cases in the app (when you contact support): subject, message, app version, and the account email address, which we use to reply to you. The case is also emailed to our support inbox. Legal basis: contract and legitimate interest in answering your question.
• Payment details: handled by our payment provider; Snabbo never sees your card number. Legal basis: contract and accounting law.

We do not show ads, and we never sell or share your data for marketing. Your search and your explicit choices are used to personalize recommendations, as described below.

Personal suggestions and optional learning

Your search preferences and explicit choices such as More like this and Not for me are used to give you the suggestions you ask for. The legal basis for this is contract. Under You → Personal suggestions, you separately choose whether Snabbo may learn from saved homes and homes you view and measure whether the recommendations help you. Both options are off by default and are based on your consent. Search, saved homes, search alerts, and explicit choices work without these consents.

When learning or measurement is on, we record which home suggestions are actually shown, homes you open and return to, saves and removals, explicit more/fewer choices, search changes, opportunities you try, and opens of landlord links. An opened link does not mean you searched for the home. The data is linked to your account and contains home ID, time, view, and suggestion batch. Search activity includes selected regions, rent, and number of rooms. We do not record GPS location or activity in other apps for this. The activity overview under You is separate and stores only counts per day, according to the list above.

The learning prioritizes your explicit wishes and choices over single clicks. Older activity counts less. Your rent and selected areas do not change automatically. The suggestions do not decide your eligibility or who gets a home. Measurement is used only if you separately chose to help us evaluate how useful the suggestions are.

Snabbo ranks the suggestions with its own code. Your preferences and your activity are not sent to an AI provider for personal ranking. AI is used separately to structure data from housing ads.

Activity is used for 30 days, explicit choices for 90 days, suggestion batches for one day, and consent receipts for one year. Expired data is deleted at the next hourly cleanup. Current consent settings remain on the account. You can change consent, delete learned activity, and export suggestion data directly in the app. A consent change deletes previously collected activity. Explicit choices, saved homes, and search alerts remain. You can delete learned activity and opt-outs separately. Account deletion also deletes suggestion data.

Processors

The data passes through the providers that run the service, and only them:

• Railway: operations and database.
• Resend: sending email.
• 46elks (Sweden): sending SMS.
• OpenAI: structuring data from housing listings. Not used for personal ranking of your suggestions.

Where a provider processes data outside the EU/EEA, it does so under the European Commission's Standard Contractual Clauses.

Apple handles App Store purchases and iOS notifications. We receive verified purchase identifiers, a random account-linked purchase ID, and subscription status to grant access. Apple handles payment details under its own terms and privacy policy. Snabbo does not receive your card number.

If you choose Apple or Google to sign in, that provider processes your sign-in under its own privacy policy. Snabbo never receives the provider's password.

How long

• Account details, search alerts, feedback, and support cases from the app: until you delete the account. The email copy of a support case in our support inbox is not deleted automatically with the account, but you can ask us to delete it.
• Your activity under You: until you turn it off or delete the account.
• Alert history: up to 24 months, then it is deleted or anonymized.
• One-time codes have a short validity period and are stored as cryptographic verification values. Session details are used until they expire or are revoked.
• Started onboarding choices are saved locally in the app so you can continue later. They are cleared when you exit the flow or switch accounts, or when the app is opened after more than seven days.
• When disconnected or when the account is deleted, encrypted revocation data for Apple may remain for new attempts if Apple does not respond. The data expires after seven days and is cleared by maintenance.
• When the account is deleted, purchase data is unlinked from the account. Limited purchase identifiers and verification data are retained for refunds, troubleshooting, and to ensure the same purchase cannot be linked to another account. Data that must be retained by law is kept for as long as the law requires.

Your rights

You can request an extract, correction, deletion, restriction, and data portability, and you can object to processing based on legitimate interest. Email hej@snabbo.se and we will handle it without undue delay. You can also complain to the Swedish Authority for Privacy Protection (IMY).

Cookies

The marketing website has no customer login. The admin side has a separate session cookie; the iOS app stores its login credential in the keychain. Details are on the cookies page.