Privacy Policy

1. Information We Collect

When you register for lagtut2, we collect:

  • Personal Information: Name, email address, phone number, location
  • Transaction Data: Expense records, amounts, dates, contexts, and receipts you upload
  • Partner Information: Details about your mellomværende (expense-tracking relationships)
  • Usage Data: How you interact with the application

2. How We Use Your Information

We use your information to:

  • Provide and maintain the expense tracking service
  • Calculate balances between you and your partners
  • Send notifications about unacknowledged transactions and outstanding debts
  • Verify your identity and prevent fraud
  • Improve our services and develop new features

3. Data Sharing and Privacy

Your privacy is important to us:

  • Partner Visibility: Only users you've created a mellomværende with can see shared transaction data
  • Profile Privacy: You control which information is visible to your partners (name, address, phone, email)
  • No Third-Party Sales: We do not sell your personal information to third parties
  • Secure Storage: All data is stored securely on encrypted servers

4. Partner Snapshots

When you create a mellomværende, we save a snapshot of your partner's information (name, address, phone, email) at that moment. This ensures:

  • You have accurate contact information even if your partner changes their profile
  • Historical records remain consistent
  • Optional ID document storage for verification purposes

5. Your Rights

You have the right to:

  • Access: View all your personal data we store
  • Correct: Update your profile information at any time
  • Delete: Request deletion of your account and associated data
  • Export: Request a copy of your transaction data
  • Control: Manage privacy settings and notification preferences

6. Data Retention

We retain your data:

  • Active Mellomværende: As long as the relationship is active
  • Archived Mellomværende: Until you delete them permanently
  • Acknowledged Transactions: Indefinitely for record-keeping
  • Account Deletion: All personal data deleted within 30 days of account closure

7. Cookies and Tracking

We use essential cookies to:

  • Keep you logged in (session management)
  • Remember your preferences
  • Prevent CSRF attacks (security)

We do not use advertising or tracking cookies.

8. Security

We implement security measures including:

  • Password encryption (bcrypt hashing)
  • HTTPS encryption for all communications
  • SQL injection protection
  • CSRF protection
  • Regular security audits

9. Contact Us

For privacy concerns or questions, contact us at:

Email: admin@lagtut.no

10. Changes to This Policy

We may update this privacy policy from time to time. Significant changes will be notified via email or a prominent notice on the website.

Last Updated: November 5, 2025

← Tilbake til Mellomværende