What we store
| Why | How long | |
|---|---|---|
| Your name | The others in your groups see it. | Until you delete your account. |
| Your phone number | You get back into your account, and you get the invites sent to the number. | Until you delete your account, or someone confirms the number on another account. |
| The email address from Vipps, Apple or Google | We store it, but send no email. | Until you delete your account. |
| The ID from Vipps, Apple or Google | We use it to find your account when you sign in. | Until you delete your account. |
| Groups, members and who is owner | It decides who sees what. | Until you leave, or the group is deleted. |
| Photos, videos and the text on them | The family sees them. | You choose 2 days, 5 days or forever. |
| Likes and comments | They show under the photo. | Until the photo is deleted. |
| Which photos you have seen | We count new photos for you. | Until the photo is deleted. |
| The notification code of the phone | We send notifications to the right phone. | Until you sign out, or the code stops working. |
| Sign-ins | The app keeps you signed in. | We delete them every hour once they have expired or stopped. |
| Which group you pay for | The group is unlocked. | Until you delete your account. |
| Invites and the number of the invited person | The invite reaches the right person. | We delete them 30 days after they expired. We delete an invite to a contact 30 days after it was used or declined. |
| Notifications we sent | We see whether Apple or Google accepted the notification. | We delete them after 7 days. |
| Uploads: file name and size | We limit how much you can upload. | The link to you goes away when you delete your account. |
| Codes you got by text message | We check the code you enter. We do not store the code itself, only a fingerprint of it. | We delete them after 1 day. |
| Text messages we sent | We limit how many text messages go out. We store the IP address and a fingerprint of the number, not the number itself. | We delete them after 7 days. |
The server also writes logs at Google Cloud with the ID of the account for each request, so we can find errors.
Where the data is
- Everything is at Google Cloud in Finland, inside the EU and EEA: the server, the database in Cloud SQL with PostgreSQL, and the files in Cloud Storage.
- The files are never public. The app gets them through links that stop working after 1 hour. The links in notifications and widgets stop working after 15 minutes.
What we do not do
- We show no ads and sell no data.
- skokk has no public profiles and no feed of strangers.
- You cannot search for people or groups.
- We do not read your contact list. If you choose a contact, the app sends only that one number to us.
- We do not store where you are, and we send no email.
We remove details about the location and the phone
Before a photo leaves the phone, the app saves it again as a JPEG without EXIF, XMP, IPTC and comments. That removes details about where and when you took the photo, and which phone you used. A HEIC photo becomes a JPEG. A video is saved again without such details, but the picture and the sound stay as they were.
The services we use
| What it does for skokk | |
|---|---|
| Vipps | Sign-in. Vipps gives us the phone number, the name and the email address. |
| Apple | Sign-in, payment in the App Store and notifications to iPhone and iPad. |
| Sign-in, payment in Google Play and notifications to Android through Firebase Cloud Messaging. | |
| Google Cloud | The server, the database and the photo storage, in Finland. |
| Twilio | Sends the text message with the code that confirms your phone number, and the text message that says how to sign in when the number belongs to another account. Twilio gets the number and the text of the message. |
| RevenueCat | Keeps track of the subscriptions from the App Store and Google Play, and tells the server when someone pays for a group. RevenueCat gets the ID of your skokk account, not your name. |
| Sentry | Receives error reports from the app and measurements of how fast it is. The app does not send your name or email address. |
| Vercel | Runs skokk.no and passes the requests from the app on to the server at Google Cloud. |
| Cloudflare | Answers DNS lookups for skokk.no. |
The website skokk.no
- skokk.no uses only 1 cookie. It remembers the language you chose, for 1 year.
- Vercel Speed Insights measures how fast the pages load. We do not send what comes after ? in the address, or invite codes.
- Invite pages are not cached, and search engines do not show them.
Questions about privacy
Does skokk sell data about me?
No, we sell no data and show no ads. We earn money when groups are unlocked.
Are the photos stored in Norway?
No, they are at Google Cloud in Finland, inside the EU and EEA.
Do the others in the group see my phone number?
No, they only see your name.
