Privacy policy – MittNetto

This policy is split into two parts: the app and the website. They are completely separate – what you write on the website is never linked to your data in the app.

Who is responsible?

MittNetto is provided by BS Media AB (reg. no. 559176-3353), Kungälv, Sweden, which is the data controller for the processing described here.

The app

This applies when you use the MittNetto app. The app has no ads, does not collect advertising IDs and uses no analytics or tracking tools.

Data in the app

Everything you enter, such as items, values, goals and notes, is stored locally on your phone. We have no server of our own, and the data is never sent to us. Reminders and the app lock are handled entirely on the phone.

Cloud sync and backup

If you sign in with Google and turn on cloud sync, your data is saved in a hidden app folder in your own Google Drive. This covers items, values and improvements, but not goals and settings. The data is encrypted on the phone before it is uploaded. The app only has access to its own app folder, not to your other files in Drive.

The app uses your Google account ID to derive the encryption key, and shows your email address in the app. The data stays on your phone and in your Drive and is not sent to us. So that you can see which devices are syncing, the device name (for example the phone model) and the last sync time are also saved, encrypted, in the same app folder. Google processes the sign-in and storage under Google's privacy policy.

If you export an encrypted backup or a CSV file, you decide where it is saved.

Delete your data

• On the phone: Settings → Delete all data, or uninstall the app.
• In the cloud: Cloud sync → Delete all backups. This removes all backups and the device list from your Drive. You can also open Google Drive, go to Settings → Manage apps, select MittNetto and delete the app's hidden data.
• You remove the app's access to your Drive in your Google Account under Security → Third-party apps and services. Signing out of the app does not delete the cloud copy.

Purchases

Purchases and subscriptions are made in Google Play under Google's terms. We never see your payment details. To check that a purchase is valid we use RevenueCat (RevenueCat, Inc., USA), which processes:
• a random ID created in the app (not your name or email address)
• which purchases have been made and when they are valid
• technical data such as app version, operating system, country and IP address

The legal basis is that we need it to fulfil the purchase. The data is transferred to the USA on the basis of the European Commission's standard contractual clauses.

Exchange rates

To convert assets in other currencies, the app fetches exchange rates from open.er-api.com (ExchangeRate-API), Frankfurter (api.frankfurter.dev) and the European Central Bank. The requests contain currency codes, for example SEK and USD. With Premium these are the currencies of your items, but never amounts or any other data. As with any contact over the internet, the service sees your IP address. The list of available currencies is fetched the same way when you choose a currency.

The website

This applies when you visit the website.

The contact form

When you use the contact form we process your name, email address, topic and message. The purpose is to answer and handle your request. The legal basis is our legitimate interest in being able to reply to questions sent to us.

The message is sent to us by email and is not stored on the website. We keep it for as long as needed to handle the request and delete it no later than 24 months after the last contact. The data is not shared with anyone else and is not used for marketing.

The waitlist

If you join the waitlist we store your email address, which website and language you signed up on, and when you signed up and confirmed. The purpose is to notify you when the app is released. The legal basis is your consent, which you give by confirming via the link we email you.

You can unsubscribe at any time via the link in our emails or by contacting us. The data is kept until you unsubscribe, but no longer than 12 months after the app is released. It is not shared with anyone else.

Protection against abuse

To stop spam we count how many messages are sent from the same IP address. The IP address is not stored in plain text but as an encrypted value, and is deleted automatically within a day.

Technical operation

The website runs on servers in Sweden. Fonts and images are served from our own server, so no information about your visit is sent to other companies when you load a page.

Visitor statistics

If you consent to statistics cookies, we use Google Analytics to see how the website is used, for example which pages are visited. Data may be transferred to the US under the EU–US Data Privacy Framework. You can change your consent at any time.

Cookies

The website uses necessary cookies and, only if you consent, cookies for statistics and marketing.

See all cookies and change your choice. →

Your rights

What you can request

You have the right to know what data we hold about you, to have it corrected or erased, to object to the processing and to request that it be restricted. Since the data in the app only exists with you, in practice this applies to what you have sent via the website and the purchase data held by RevenueCat. You delete data in the app and in your Google Drive yourself, as described under Delete your data.

Complaints

If you are unhappy with how we handle your data, you can lodge a complaint with the data protection supervisory authority in your country.

Last updated October 2026.