← Back to Runda
Runda

Privacy Policy

How Runda processes and protects personal data.

Effective date: 12 July 2026 · Last updated: 1 August 2026

Privacy Policy for Runda

This Privacy Policy explains how the Runda mobile application (“Runda”, “the app”, “we” or “us”) processes personal data. The data controller is Olof Rymark. You can contact us at olof@rymark.com.

1. Data we process

Depending on how you use Runda, we process:

Runda does not request location permission or collect GPS location. A service provider may infer coarse location from network information such as an IP address.

Runda does not include advertising SDKs, use Firebase Analytics or other product-behaviour analytics, or perform cross-app tracking. The limited SDK/service analytics described above is not used for advertising or tracking.

2. Receipt scanning and camera data

Camera access is optional and is requested only when you choose to scan a receipt. The receipt photo and text recognition are processed locally on your device to suggest an expense title, amount and date. The receipt image is kept only temporarily in memory, is not saved by Runda and is not uploaded to Firebase or another service. Only the expense details you review and save are transmitted.

3. Swish

If you choose to open Swish, Runda creates a Swish web link containing the recipient’s Swish number, amount, currency and payment message. This information is then handled by Swish according to Swish’s own terms and privacy information. Returning to Runda does not prove that a payment was completed; a payment is registered in Runda only after you confirm it.

4. Why we process data

We process data to provide Runda’s functionality: authenticate users, create and join Rundas, synchronize data between members and devices, calculate shared expenses, show payment history, merge Guest data into an existing account, provide support, protect the service and comply with legal obligations.

Limited SDK/service analytics is used only to operate authentication and data services, maintain security and reliability, and diagnose technical failures—not to build advertising profiles or measure behaviour across apps.

Where applicable under data-protection law, processing is based on performing the service you request, our legitimate interests in operating and securing Runda, compliance with legal obligations, or your consent—for example, the device permission you choose to grant for camera access.

5. Sharing and service providers

Data in a Runda is visible to the other members of that Runda. Do not add another person’s information unless you are entitled to share it with the group.

We use service providers to operate the app:

We select providers that commit to protecting personal data through applicable legal and contractual safeguards consistent with this policy. They also publish their own privacy information. We do not sell personal data.

6. International transfers

Some service providers may process data outside Sweden or the European Economic Area. Where required, such processing is protected by an adequacy decision, standard contractual clauses or another lawful transfer mechanism.

7. Retention and deletion

Account, profile, Runda, expense and payment-history data is retained while needed to provide the service and preserve the shared accounting history. Support messages and reply addresses are retained in the receiving email account while needed to handle the request. To limit abuse, we retain only a salted hash derived from the network address and attempt timestamps in Firestore for up to 24 hours; the raw network address and support message are not stored in this rate-limit record. Logging, security, merge and idempotency records may be retained for a limited period needed for reliability, fraud prevention, dispute handling and legal compliance. Provider backups may remain for a limited period before being overwritten.

Logging out does not delete your account or Rundas. You can permanently delete a Guest account or permanent account in Runda under Settings → Data and privacy → Delete account and data. Before deletion, the app shows what will happen to every shared Runda and requires you to appoint a new owner where necessary. Rundas with no other account member are deleted in full.

Because Runda data is shared, expense and payment records needed by remaining members are retained without your account connection. Your membership is removed; your display name and Swish number are erased; and your stable participant identity is shown as “Previous participant” so amounts, allocations, balances, payments and corrections remain understandable. An unsettled balance is retained as historical and is never automatically marked as paid. The Firebase authentication identity is deleted only after these changes have completed. You can email olof@rymark.com for other privacy requests or if you cannot access the in-app deletion function.

8. Your rights

Depending on applicable law, you may have the right to request access, correction, deletion, restriction or portability of your personal data, and to object to certain processing or withdraw consent. You can change your display name and Swish number in the app. Contact olof@rymark.com to exercise other rights. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or your local supervisory authority.

9. Security

We use authentication, access controls, encrypted network connections and backend validation intended to protect Runda data. No online service can guarantee absolute security. Keep invitation links and account credentials secure and contact us if you suspect unauthorised access.

10. Children

Runda is not directed specifically at children. If you believe a child has provided personal data without the permission required by applicable law, contact us so that we can investigate and take appropriate action.

11. Changes to this policy

We may update this policy when Runda or legal requirements change. The current version and update date will remain available at this URL. Material changes will be communicated in an appropriate way.

12. Contact

Data controller: Olof Rymark
Email: olof@rymark.com