Privacy

Controller

The controller under the GDPR and the Norwegian Personal Data Act is Daniel Bärenheuser, Skedsmogata 24C, 0655 Oslo, Norway. You can reach us at hello@cadvan.app. We are not required to appoint a data protection officer; write to us directly.

Mac app without an account

Projects, settings and exports stay on your Mac. The app contains no third-party analytics, advertising or crash-reporting libraries. It makes only two connections, without sending any identifier of yours:

• Update check: the app asks Apple (itunes.apple.com) which version is current in the App Store. Apple sees your IP address.
• What’s new: the app loads the “New in cadvan” list from plan.cadvan.app. Our server logs the request like any other (see Retention).

Crash reports: if you turned on “Share with app developers” in macOS, Apple passes crash reports and usage statistics on to us without personal data. macOS also hands the app technical crash and hang diagnostics; they stay on your Mac. Only if you choose “Help › Report a problem…”, have seen the exact text and click “Send” do they go to our server (see Error reports).

With an account: what we process

• Account: name, email address, language, account identifier and verification status. We store your password only as a hash.
• Security: sessions with IP address, browser and system information and time. If you set up a second factor, an encrypted secret and check values of your recovery codes. Known devices are kept only as a non-reversible check value.
• Projects: content of shared projects, memberships, roles, changes with name and time, and who is in the project right now.
• Invitations: the invited person’s address, the role and who invited them. An invitation is valid for 48 hours.
• Email: verification, invitations, password and security notices. They contain no tracking pixels and no rewritten links.
• Messages to us: sender, content and any attachments you send.
• Server logs: IP address, time, requested address, status and browser information. Passwords, cookies and one-time codes from links are not logged.

The legal bases are the contract for the service (GDPR Art. 6(1)(b)), our legitimate interest in secure operation and in delivering invitations (Art. 6(1)(f)) and legal obligations, for example for access requests (Art. 6(1)(c)). We make no automated decisions and build no profiles.

What others see

Members of a shared project see your name, your role, your changes and whether you are in the project right now. Anyone who exports a project takes the names in it along. We cannot recall such copies later.

Purchases

Apple handles purchases in the app. Apple is the seller and a separate controller (Apple’s privacy policy). We receive neither your name nor payment details from Apple, only the identifier, product, term and status of a purchase. We link these to your account so that the features you bought are unlocked. If we later offer purchases on our website, we will update this notice first.

Error reports

So that we can find and fix bugs quickly, plan.cadvan.app reports program errors to our own server in Helsinki, with no third party and no cookie. A report contains only the error message, the place in cadvan’s program code, the program version, the browser or macOS with its major version, the rough area (such as “project” or “sign-in”) and a random identifier that is valid only for that one page visit. It contains no project content, no names, no email address, no account identifier and no page address; we do not store the IP address for it. Anything that looks like content is removed before storing. We record errors of our server the same way.

The Mac app sends nothing on its own, only when you explicitly click (see above). We delete reports after 30 days. We combine similar reports into one task in our code repository on GitHub; it contains only the technical signature and counts, nothing that can be linked to you. The legal basis is our legitimate interest in a working, secure service (GDPR Art. 6(1)(f)).

Cookies and local storage

The online service sets only the cookies needed to sign in: the session cookie __Secure-mivor.session_token (up to 7 days, renewed while you use it) and short-lived cookies during sign-in with a second factor (10 minutes). Because they are strictly necessary for the service you asked for, Norwegian law (ekomloven § 3-15) requires no consent and no cookie banner.

The browser stores your language and view settings locally; they do not leave your device. The Mac app stores settings locally and your sign-in in the macOS Keychain. The websites cadvan.app and plan.cadvan.app load nothing from third parties; fonts are served from our own server.

Service providers and location

• Hetzner Online GmbH (Germany): servers and backups, data centre in Helsinki, Finland.
• Scaleway SAS (France): sending system email, Paris.
• webhuset (Norway): the hello@cadvan.app mailbox.

They process data only on our behalf (GDPR Art. 28). Everything stays in the EU/EEA; no data is transferred to third countries. Our source code and our bug-fixing tasks are hosted on GitHub; no user data is stored there. Apple is responsible for downloads, updates and purchases in the App Store.

Retention and deletion

We keep account data for as long as your account exists, and project content for as long as the project exists.

• Web server access logs: 14 days.
• Server system logs: one month at most.
• Error reports: 30 days.
• Backups: overwritten after 14 days at most. Until then, deleted data may still be in backups. If we ever restore a backup, we re-apply every deletion made since.
• Invitations, delivery records and support email: as long as needed to handle them.
• Purchase records: as long as Norwegian bookkeeping law requires.

You can delete your account yourself at any time: in the app from the account menu, in the browser under “Account security”. Projects only you own are deleted immediately. Hand over shared projects to another member first. Your contributions to other people’s projects remain; the history then shows “Former member”. Cancel an App Store subscription with Apple.

Your rights

You have the right to access, rectification, erasure, restriction and portability, and you can object to processing based on legitimate interest. Write to hello@cadvan.app; we reply within one month, free of charge. So that nothing goes to the wrong person, we may ask you to write from your account’s address.

You can also complain to the Norwegian Data Protection Authority Datatilsynet or to the authority where you live.

Security

All connections are encrypted. Sign-in attempts are limited, a second factor is available, and you get an email when a new device signs in. Only we have access to the server. Please report vulnerabilities to security@cadvan.app.

Minimum age

You must be at least 16 to create an account.

Changes

If something material changes, such as a new service provider, we update this page and tell account holders in advance by email or in the service.