Saunatic privacy policy
Version 1.0 · 2026-09-23
Saunatic is an app for sauna enthusiasts: a shared catalog of public saunas, a personal session log, and a feed of sauna pictures. This policy explains what we store about you, why, for how long, and what you can do about it. We keep it short and honest; if something is unclear, write to us.
Who is responsible
Lovely Print Sweden AB, organisation number 559246-6147, VAT number SE559246614701, Gullbergsvägen 37 A, 511 58 Kinna, Sweden. Telephone +46 70 549 65 66. Email: privacy@saunatic.app. We are the data controller for everything below. We answer within one month.
What you must give us, and what is up to you
To have an account we need an email address and a password (or a Google sign-in) and a display name. Without them we cannot offer the app. Everything else - health values, pictures, your position, feedback - is optional.
What we store, why, and on what legal basis
"Legitimate interest" means that we have weighed our reason against your privacy (GDPR art. 6.1 f). The reason is named on each row; write to us if you want to read how we weighed it. You can object to these - see "Your right to object".
| Data | Why | Legal basis | Kept until |
|---|---|---|---|
| Account: email address, a password hash (or your Google sign-in identity), display name, the language of your phone (for our emails), when you created the account, when you accepted the terms and the content rules and which versions | To sign you in, to write to you in your language, to show who added what, to know what you agreed to | Contract (art. 6.1 b) | You delete the account |
| Session log: date, time, length, sauna type, temperature, rounds, cooling, place, notes | It is your log; stored on our servers so it follows you between phones. What you write in notes is up to you | Contract | You delete the entry or the account |
| Health values in the log: mood, heart rate, weight | Only if you switch them on; the log works fully without them. They are health data | Your consent (art. 6.1 a), which is also your explicit consent for health data (art. 9.2 a). Withdraw it under Account - that deletes every stored value | Withdrawal or account deletion |
| Public saunas you add: name, position, address, attributes, description, operator and organisation contact details, source | The shared catalog | Contract while you have an account; after that our and the public's legitimate interest in a complete catalog. The entry then carries no link to you | The sauna stays in the catalog after you delete your account, without your name. Ask us if you want a description you wrote removed |
| Private saunas you add (visible only to you) | So you can log sessions there | Contract | You delete the account |
| Pictures you upload, with caption, title and tags | The catalog and the feed | Contract | You delete them or the account; rejected uploads are deleted after 30 days |
| Likes, saves, collections, follows, blocks, hidden pictures, favorites | The social features you use | Contract | You delete them or the account |
| Comments and reviews you write | They are part of what other people read about a sauna | Contract while you have an account; after that our and our users' legitimate interest in keeping what was contributed to a shared catalog. The text is then shown without your name | They stay after you delete the account, without your name - unless you ask for them to go, which you can do when you delete the account in the app, or by email at any time |
| Ownership claims: your role at the operator, organisation number, what you can show, your message, our decision | To verify who runs a sauna. For a sole trader the organisation number is a personal identity number; only our reviewers see it | Contract; our legitimate interest in a trustworthy catalog | The "verified owner" mark while it applies; the claim record for 12 months |
| Reports you file | To act on them - the law requires us to have a way to report illegal content (Digital Services Act art. 16) | Legal obligation (art. 6.1 c) for handling the report; legitimate interest in stopping repeated abuse for keeping it | 24 months; who reported is erased after 12 |
| Moderation decisions about your content or account, including whether the account is suspended and why | To tell you what we did and why, to handle repeated rule-breaking, to defend legal claims | Legitimate interest | 24 months |
| Notifications: who liked, commented on or saved your picture, who followed you | The bell in the feed | Contract; switch each kind off in the settings, then it is never created | Read ones after 90 days, all after a year |
| Ads: your phone's advertising ID, IP address, which ad was shown or tapped, your choice in the consent form | To pay for the app. Google AdMob shows the ads and is responsible for its own use of the data | Your consent - for reading the advertising ID on your phone (Swedish Electronic Communications Act 9 kap. 28 §) and for personalised ads (art. 6.1 a). See "Advertising" | Google decides (see its notice); we store only your choice, on your phone |
| Error reports (automatic): which version of the app, Android or iOS, the type of error (never its message), which part of the app, and code lines from our own code. No account id | Finding faults. They cannot be tied to you | Legitimate interest in an app that works | 30 days |
| Server logs with your IP address and request times | Security and abuse protection | Our and our users' legitimate interest in a service that is not abused | 30 days |
| Feedback you send: your text, its kind, whether we may reply by email, the app version, your phone's system and language | Improving the app; answering you | Legitimate interest in improving the app; your consent for the email reply | Until you delete it in the app, or your account |
| Emails we send you (confirmation, sign-in codes, password reset, a copy of the terms when you accept them) | Account security | Contract | Our email provider keeps sent mails for 45 days |
Your position is never stored by us. It leaves the phone in two cases: when you ask for address suggestions while adding a sauna (the text you type and your rough position go to the address service), and when the app turns a map point into an address (Android's own lookup, run by Google). Pictures have their metadata (camera, GPS, time) removed on our server before anyone sees them.
On your phone the app keeps a copy of your log (so it works offline), your sign-in (in the phone's secure key store), your colour theme and your ad-consent choice. It is excluded from Android's cloud backup and device-to-device transfer.
Other users see your display name and what you post: pictures, comments, reviews, saunas, public collections. Your log, your private saunas and private collections are visible only to you.
Companies that work for us (processors)
We run our own servers in Sweden. These companies process data on our behalf, under a written agreement (art. 28):
| Company | What | Where |
|---|---|---|
| Sightengine (Kozelo SAS, France) | Every uploaded picture is checked automatically for nudity before it is shown. Sightengine receives the picture, nothing else, and does not use it to train its models | EU (France, Ireland, Germany, Finland), Canada or USA - Sightengine sends each check to whichever of its data centres is available |
| Postmark (AC PM, LLC, part of ActiveCampaign, LLC, USA) | Sends our account emails. It receives your email address and the content of the mail, and keeps sent mails for 45 days | USA |
| Esri (Environmental Systems Research Institute, Inc., USA) | Map images. Esri sees which map areas your phone requests, and your IP address | USA |
| Zoho (Zoho Corporation B.V., Netherlands) | Our mailboxes: what you write to privacy@, support@, report@ or safety@saunatic.app | EU |
| Cloudflare (Cloudflare, Inc., USA) | Serves the website saunatic.app, and sees visitors' IP addresses there | EU and USA |
Companies that receive data under their own responsibility
| Company | What | Its own notice |
|---|---|---|
| Google (Google Ireland Ltd / Google LLC) - sign-in | Only if you choose "Continue with Google": Google confirms who you are and gives us your email address and name. We tell Google nothing about your use of the app | policies.google.com/privacy |
| Google - AdMob | Shows the ads; see "Advertising" | policies.google.com/technologies/ads |
| Google - Android's address lookup | Turns a map point into an address when you add a sauna | policies.google.com/privacy |
| komoot GmbH (Germany) - the Photon address service | Address suggestions while you type: the request goes through our server, so komoot sees the text and a rough position (rounded to about 11 km) but not your phone or IP address | komoot.com/privacy |
We never sell data. We hand data to authorities only when the law obliges us to.
Transfers outside the EU
Esri, ActiveCampaign (for Postmark) and Google LLC are certified under the EU-US Data Privacy Framework, which the European Commission has decided gives adequate protection (decision (EU) 2023/1795). Should a certification lapse, the EU standard contractual clauses in our agreements with them apply instead. Sightengine is a French company; when it checks a picture in one of its data centres in Canada or the USA, the EU standard contractual clauses in its data processing agreement with us apply (for Canada the Commission has also decided that the protection is adequate, decision 2002/2/EC). Write to us for a copy of the clauses.
Advertising
The sauna list and the inspiration feed contain a few clearly labelled ads, delivered by Google AdMob. Before the first ad you see a consent form with three choices: Consent - Google may read your phone's advertising ID and use your activity in apps to personalise ads; Do not consent - you see only "limited ads", which use no identifier from your phone and are chosen from general context such as the app and your approximate region; Manage options - choose per purpose. With your consent Google builds an advertising profile; we do not see it, and we do not profile you ourselves. You can change your choice at any time under Account → Ad choices. Ads never appear in your session log, in your saved collections, in forms or on the map, and nothing from your log - never your health values - is used for advertising. We run no analytics of our own; what AdMob reports to us is aggregate (views, clicks, revenue per placement).
The automatic picture check
Every uploaded picture is checked by an automated model (Sightengine) for nudity before it is shown. The model looks only at the picture. A picture it is unsure about waits until a person has looked at it. A picture it rejects is not published; you see that in the app, and you can ask us to have a person look at it again - write to support@saunatic.app or use Account → Feedback. Nothing else happens to your account because of a rejected picture. Decisions about accounts are always made by a person.
If you run a sauna, or your photo is shown
Much of the catalog comes from public sources: OpenStreetMap, Wikidata, the public websites of municipalities and of the places themselves, and gym chains' club pages. From them we store the place's name, address and position, its website and public contact details, and what the source says about opening hours and prices. Pictures from Wikimedia Commons are shown with the photographer's name and licence, as the licence requires.
Most of this is about businesses and places. When the business is one person - a sole trader, for instance - it is personal data. We process it because we, and people looking for a sauna, have a legitimate interest in a complete and correct catalog (art. 6.1 f). We keep it until the place closes, the source removes it, or you ask us to remove it. We have not written to each place, because that would be a disproportionate effort for public business information (art. 14.5 b); this notice is published instead.
You have the rights listed below, including the right to object. Write to privacy@saunatic.app and we correct or remove the entry, normally within a few days. You can also claim the place in the app and edit it yourself. If you can be recognised in a picture and have not agreed to it, tell us where it is and we take it down.
Your rights
You can, at any time and free of charge:
- See what we hold about you and get a copy (art. 15).
- Correct it (art. 16) - most of it in the app.
- Delete single things in the app, or the whole account (Account → Delete account, or saunatic.app/delete-account), or ask us by email (art. 17).
- Restrict our use of your data while a question about it is being sorted out (art. 18).
- Take your data with you in a machine-readable format (art. 20).
- Withdraw a consent - health values (Account), ad choices (Account → Ad choices), email replies to feedback. Withdrawing does not make what happened before unlawful.
Your right to object. Where we rely on our legitimate interest (named in the table), you can object at any time for reasons that have to do with your situation. We then stop, unless we can show compelling reasons that outweigh yours or need the data for legal claims (art. 21).
We answer within one month. If you are not satisfied you can complain to Integritetsskyddsmyndigheten (IMY), Box 8114, 104 20 Stockholm, imy@imy.se, imy.se - or to the authority in the EU country where you live or work.
Age
Saunatic is for adults. You confirm that you are 18 or older when you create an account. We do not knowingly store data about anyone younger; if we learn of it we close the account and delete what it holds.
Security
Connections are encrypted (TLS). Every table on our servers is protected so that you can only reach your own data and what is public; the app itself holds no secrets. Passwords are stored as salted hashes, and known leaked passwords are refused. If a breach puts you at risk we tell you and IMY without delay.
Changes
We change this policy when the app changes. The date at the top moves, earlier versions stay available at saunatic.app/privacy, and for changes that matter we tell you in the app and by email before they apply. If we ever want to use your data for a new purpose, we tell you first.