Privacy policy

The short version

• Your photos stay on your iPhone. Lagom analyses them with Apple's on-device models. Nothing is uploaded to us.
• No account, no ads, no analytics, no tracking. The app makes no network requests to us.
• Purchases are handled by Apple. Apple tells our server when a purchase, renewal or refund happens, without your name, email or Apple Account.
• The website sets no cookies and runs no analytics. See cookies.
• You have rights under the GDPR and California law. See your GDPR rights and the California privacy notice.

Who we are

Lagom for iPhone (the "app") and this website are provided by Sansa Group AB, a company registered in Sweden. When Lagom for Mac is released, this policy will cover it too, and it follows the same principles. Sansa Group AB is the controller of the personal data described here ("we", "us").

We have not appointed a data protection officer. Send any privacy question or request to support@sansavision.com.

What stays on your iPhone

To sort and clean your library, the app keeps the following on your device only:

• an index of your photos and videos (dates, sizes, dimensions and type, read from Apple's Photos framework);
• the results of on-device analysis, such as which photos look alike, how sharp they are and whether they are screenshots;
• your keep, delete and unsure choices, finished months, deletion receipts and your streak;
• your settings.

We never receive this information and cannot see it. Deleting the app removes it. Your iPhone backup (for example iCloud Backup, if you use it) may include it under Apple's terms.

Purchases

Apple processes all payments as an independent controller under its own privacy policy. We never see your payment details, name, email address or Apple Account.

The app checks your purchases on the device. Separately, Apple sends our server App Store Server Notifications when a purchase, renewal, refund or revocation happens. Each one contains a transaction ID, the product, dates, price, currency and storefront country. We use these to keep accounts and handle refunds.

• Legal basis: our legitimate interest in running and accounting for the business (GDPR Art. 6(1)(f)), and our legal obligation to keep accounting records (Art. 6(1)(c)).
• Retention: seven years, as the Swedish Bookkeeping Act (bokföringslagen) requires for accounting records.

Crash reports

The app contains no crash-reporting or analytics software. If you choose to share analytics with app developers in your iPhone settings, Apple may give us aggregated crash and performance reports that do not identify you.

This website

The website is hosted on Cloudflare. To deliver pages securely, Cloudflare processes your IP address and basic request details (such as browser type and the page requested) for a short time. Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f)).

The website sets no cookies, loads no third-party fonts or scripts, and runs no analytics. If you close the cookie notice, your browser stores one local-storage item so the notice stays closed; it never reaches us. See cookies.

When you email us

If you write to us, we use your email address and message to answer you (legitimate interest, Art. 6(1)(f)). We keep support conversations for up to two years after the last message, then delete them.

Service providers and transfers

We use Cloudflare, Inc. to host the website and the server that receives Apple's notifications. Notification records are stored in the EU. Cloudflare may process request data globally; transfers outside the EU/EEA rely on the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses.

We do not sell personal data and do not share it for advertising.

Your rights

You can ask for access to, correction of or deletion of your personal data, restrict or object to its use, and receive it in a portable format. See your GDPR rights for how. Because we hold no account and no contact details from the app, we usually hold nothing that identifies you. If you send us a transaction ID from your Apple receipt, we can find and delete the matching records where the law allows.

You can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) at imy.se, or to the authority where you live.

Children

The app collects no personal data from anyone, including children. It is not designed for children under 13.

Changes to this policy

If we change how we handle data, for example when the optional encrypted cloud archive arrives, we will update this policy before the change and say so in the app's release notes.