Halfway House
Privacy Policy
How we collect, use, and protect your personal data.
Last updated: 21 May 2026
1. Who is the data controller?
People of Tech AB, company reg. no. 559539-3892, is the data controller for the processing of your personal data in the Halfway House app.
Supporthello@peopleoftech.com
2. What data do we collect?
We collect the following categories of personal data when you use the app:
| Category | Examples |
|---|---|
| Contact information | Name, email address, phone number |
| Profile content | Profile picture, bio, interests, city |
| User content | Feed posts, chat messages, event registrations, nominations |
| Technical identifiers | User ID, device token for push notifications (FCM token) |
| Usage data | Interaction with the app (for matching, bookings) |
| Diagnostics | Crash and performance data (anonymised) |
We do not collect: your location (GPS), contacts, calendar, health data, financial information, or web browsing history outside the app.
3. Why do we process your data?
| Purpose | Legal basis (GDPR) |
|---|---|
| Provide the app's functionality (sign-in, events, chat, feed) | Contract — to fulfil the member agreement |
| Send push notifications and email about events and member activity | Contract / Legitimate interest |
| Member matching based on interests and activity | Contract — core function of the club |
| Debugging and crash analysis | Legitimate interest — ensure the app's stability |
| Prevent abuse and meet legal obligations | Legal obligation / Legitimate interest |
4. Who do we share your data with?
We use the following service providers who process your data on our behalf ("data processors"):
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Sign-in, database, file storage, server functions | EU (Frankfurt) |
| Firebase Cloud Messaging (Google) | Delivery of push notifications to your device | EU / USA (SCC) |
| Sentry | Error monitoring and crash analysis | EU |
| Resend | Transactional emails (confirmations, password reset) | EU / USA (SCC) |
| Apple / Google | App distribution and, where applicable, in-app purchases | USA (SCC) |
We do not sell your personal data and we do not share it with advertisers or data brokers.
For transfers to countries outside the EU/EEA, the EU Commission's Standard Contractual Clauses (SCC) apply as legal basis.
5. How long do we keep your data?
- Account data and profile: as long as your account is active.
- Chat, feed posts, and event registrations: as long as your account is active or until you delete the content yourself.
- Push tokens: until the device deregisters or the token becomes invalid.
- Diagnostics (Sentry): up to 90 days.
- After account deletion: personal data is deleted within 30 days. Content in shared feeds (e.g. posts, chat with other members) is anonymised but may remain so that other members' conversations stay intelligible.
- Backups: up to 90 days after deletion.
6. Your rights (GDPR)
You have the following rights regarding your personal data:
- Access — obtain a copy of the data we hold about you.
- Rectification — ask us to correct incorrect information.
- Erasure — delete your account from the app (Profile → Settings → Delete my account) or email us at hello@peopleoftech.com.
- Restriction — ask us to pause processing of your data.
- Data portability — receive your data in a machine-readable format.
- Objection — object to processing based on legitimate interest.
- Complaints — you have the right to file a complaint with the Swedish Authority for Privacy Protection (imy.se) if you believe we process your data unlawfully.
Send a request from the email address linked to your account to hello@peopleoftech.com. We will respond within 30 days.
7. Security
We apply technical and organisational measures to protect your data, including:
- Encryption of data in transit (TLS) and at rest.
- Row-level security in the database so that members only access content they are authorised to see.
- Biometric sign-in on devices that support it (Face ID, Touch ID).
- Restricted access to production environments based on least privilege.
8. Cookies and tracking
The app is a native iOS and Android app and does not use traditional web cookies. We do not use third-party tracking, ad networks, or cross-app analytics. In the app's embedded web views (e.g. for external links), the respective website's own cookies may apply — these are governed by that website's privacy policy.
9. Children
The app is intended for people over 18. We do not knowingly collect personal data from children under 13. If we become aware that we have collected such data, we will delete it immediately.
10. Changes to this policy
We may update this policy. For material changes we will notify you via the app or email. The latest version is always available on this page with the date of the latest update at the top.
11. Contact
Data controllerPeople of Tech AB
Email (privacy)hello@peopleoftech.com
Email (support)hello@peopleoftech.com
Phone010-150 09 00