The Gåvia app

The data controller is whoever issues the gift cards in the location you choose in the app, for example the local business association or the municipality. LGV Hallnor AB operates the app on its behalf as data processor:

LGV Hallnor AB
Company registration number: 559525-3880
Registered office: Arvidsjaur, Sweden
Email: support@gavia.nu

The Gåvia app is a platform for digital gift cards that supports local businesses in Swedish municipalities. If you have questions about how your data is handled, contact us by email.

The app does not require registration or login. We do not collect personal data such as name, email address or personal identity number.

Stored locally on your device:

• Gift card codes you add
• Gift card balance and expiry date
• Selected location
• Language (Swedish/English)
• Settings (vibration, Christmas mode)
• Push notification token (if you allow notifications)

Sent when communicating with our server:

• Gift card code (to get the balance)
• Selected location (to show the right stores)
• Device type (app) and platform (iOS/Android)
• Push notification token (to be able to send messages)

The information is used only to:

• Show your gift cards and current balance
• Show participating stores in your selected location
• Send relevant push notifications (if you have allowed it)
• Check for app updates

Legal basis (GDPR Art. 6)

• Providing the gift card service (balance, stores): legitimate interest (Art. 6(1)(f))
• Push notifications: consent (Art. 6(1)(a)) – you actively allow them in your device settings
• Checking for app updates: legitimate interest (Art. 6(1)(f)) – ensuring a working app

The app may ask for the following permissions:

Camera. Used only to scan QR codes on gift cards. No image is saved or sent.

Notifications. Used to send messages about, for example, new features or reminders. Entirely optional.

If you allow push notifications, your device's push token is registered with our server. This makes it possible to send messages to your device. You can turn off notifications at any time in your device settings.

The app uses no analytics tools, tracking libraries or ad networks. To deliver the service, we use the following sub-processors, which process limited technical data:

• Amazon Web Services (AWS). Operation of our servers. Region eu-north-1 (Stockholm) – all data stays within the EU/EEA.
• Apple Push Notification service (APNs). Delivers push notifications to iOS devices. Only active if you allow notifications.
• Google Firebase Cloud Messaging (FCM). Delivers push notifications to Android devices. Only active if you allow notifications.
• Expo. Relays push notifications and delivers over-the-air app updates. Push token, if you allow notifications, and minimal technical metadata (app version, platform) when checking for updates.
• CARTO and OpenStreetMap Foundation. The map on store pages: map images are fetched from CARTO and the store's address is looked up with OpenStreetMap, which then receives your IP address.

We never sell or share your information with third parties for marketing purposes.

All gift card data is stored locally on your device. No gift card data is stored on our servers beyond what already exists in the gift card system.

Gift card codes are masked in all logs to protect your information. All communication with our servers uses an encrypted HTTPS connection.

Since the app does not collect personal data and all data is stored locally on your device, you have full control over your information. At any time, you can:

• Remove individual gift cards from the app
• Uninstall the app to delete all locally stored data
• Turn off push notifications in your device settings
• Deny camera permission

If you have questions about your rights under the GDPR, contact us at support@gavia.nu.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) if you believe that we process your personal data in breach of applicable data protection law. Contact: imy@imy.se or imy.se.

The app is not directed at children under 13 and we do not knowingly collect data about children under 13. If you are a parent or guardian and discover that a child has used the app, you can contact us and we will help remove any locally stored data.

We may update this privacy policy. In the event of significant changes, we will inform you through the app. The latest version is always available on this page.

Do you have questions about this privacy policy or how the app handles your information? Email support@gavia.nu. We normally reply within 2 hours.