Sharetrice Privacy Policy

This Privacy Policy explains how Sharetrice collects, uses, stores, and shares personal data when you use the Sharetrice mobile app and our website.

1) Who we are (Data Controller)

Controller: ValueIT AS
Organisation number: 821 534 542
Address: Brunskrubbveien 25, 1476 Rasta, Norway
Privacy contact: privacy@sharetrice.com
Person in charge: Ole-Bernhardt Vangen

2) What Sharetrice does

Sharetrice enables sharing of photos and videos between people using albums (collaborative albums).

3) Personal data we collect

A) Account and profile data

• Login details (email login and/or Apple/Google sign-in identifiers)
• Nickname (required)
• First and last name (optional)
• Avatar/profile image (optional)

B) Content and album data

• Photos and videos you upload (videos limited to max 10 seconds)
• Album details (album name, settings, password if used, album admin role, membership/participants)
• Copies of media: If you take a photo/video in the app or select from your phone, Sharetrice creates and stores a copy in Sharetrice so it can be shared inside albums.

C) Metadata (where available)

We may process metadata associated with content, such as:

• Time/date metadata
• Device-related metadata
• GPS/location metadata (when available and kept)

D) Location data (optional and permission-based)

Sharetrice only uses location when you actively allow it through your device/app permissions and when you use features that require location.

Depending on album settings, Sharetrice may process precise location to support the chosen album functionality.

E) Technical, security and diagnostics data

• IP address (typically via server logs)
• Device/app info (model, OS, app version, language)
• Push notification token (when push notifications are enabled)
• Event and security logs necessary to operate, secure, and troubleshoot the service
• Crash reports and diagnostics via Firebase and Linux/server crash reporting

F) Payments

If you purchase Pro features, payment is handled by Apple/Google (in-app purchases). We do not receive your full payment card details.

4) How we use your data (purposes)

We use personal data to:

1. Provide the service (accounts, albums, uploads, sharing).
2. Store and deliver your content to album participants.
3. Enable optional location-based features (only when you choose to use them).
4. Operate, secure, and maintain the service (stability, abuse prevention, troubleshooting).
5. Improve the app using aggregated statistics and technical data (not advertising).
6. Provide customer support through in-app reporting and email.
7. Comply with legal obligations where required.

5) Legal bases (GDPR)

We rely on the following legal bases depending on the situation:

• Contract (GDPR Art. 6(1)(b)): to provide the core app services you request (account access, albums, uploads, sharing).
• Consent (GDPR Art. 6(1)(a)): for optional features such as location access (when you enable it), and for non-essential cookies on our website (where applicable).
• Legitimate interests (GDPR Art. 6(1)(f)): for security, fraud/abuse prevention, service stability, and basic operational logging.
• Legal obligation (GDPR Art. 6(1)(c)): where processing is required by law.

Withdrawing consent: You can withdraw consent at any time (for example, by disabling location permissions). This does not affect processing that occurred before withdrawal.

6) Who can see your content

Sharetrice is designed for sharing within albums:

• Content you upload to an album is visible to participants who have access to that album.
• Album admins can configure albums as public or private, including use of a password if enabled.
• Sharetrice does not provide public web “teaser pages.”

7) Sharing of personal data (processors and recipients)

We do not sell your personal data.

We share data only with vendors needed to run Sharetrice:

• Hosting (EU): Hetzner (EU) – backend hosting
• Media storage/CDN (Europe): Bunny CDN – storing and delivering photos/videos
• Crash reporting / push notifications: Firebase (Google) – crash diagnostics and push messaging
• Apple / Google: sign-in (if used) and in-app purchases

Email: Email may be used as a login option. If we send emails, they are sent from our own server (e.g., login-related emails and service messages).

8) International transfers

Your main storage and hosting are in Europe (Hetzner EU and Bunny in Europe).

However, some providers involved in app functionality (for example Firebase/Google, and Apple/Google sign-in/app store services) may process certain technical data outside the EEA.

Where transfers outside the EEA occur, we rely on appropriate safeguards required by applicable law (such as EU Standard Contractual Clauses (SCCs), where relevant).

9) Data retention

We keep personal data only as long as necessary for the purposes described in this policy.

• Account data is kept while your account is active, so you can access your albums and content.
• Photos/videos are kept until they are deleted by you or by the album admin (or until an album is deleted).
• Technical/security logs and crash diagnostics may be stored for a limited period to maintain security, prevent abuse, and troubleshoot issues.

10) Deletion

You can delete your own content, and album admins can delete albums and their content.

When deletion happens:

• We remove the content from the service, including deleting the file from the CDN/storage that hosts it.
• Some residual copies may temporarily remain due to normal technical processes (for example caching, queued processing, or backups). These are not used for new sharing and are removed as systems update.

(Accidental deletion or album admin decisions are handled in your Terms & Conditions; this Privacy Policy explains how deletion works from a data perspective.)

11) Your rights (GDPR)

If GDPR applies, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Restrict or object to certain processing
• Data portability (where applicable)
• Withdraw consent (where processing is based on consent)
• Lodge a complaint with your supervisory authority (in Norway: Datatilsynet)

12) How to exercise your rights

Contact us via:

• In-app reporting, and/or
• Email: privacy@sharetrice.com

We aim to respond within 30 days.

13) Children

Sharetrice is intended for users 13 years and older. We do not provide special child accounts.

14) Cookies and website banner

Our website uses cookies. Where required, we use a cookie banner to request consent for non-essential cookies. Necessary cookies (for security and basic functionality) may be used without consent where permitted by law.

15) Security

We use encryption in transit (HTTPS/TLS) and apply access controls and monitoring to help protect accounts and content. We also rely on security measures provided by our hosting and storage partners.

16) Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The newest version will be published on our website and/or in the app, and the “Last updated” date will be changed accordingly.