How we handle your data.

1. Who is responsible

SeeYouSoon is the name of the service: the app at app.seeyousoon.se, the website seeyousoon.se and the panel at admin.seeyousoon.se. The controller, that is, the one who decides why and how your data is processed, is Timmarna Platform, a sole trader with organisation number 970905-3558, Lilla Bommen 1, 411 04 Göteborg.

Questions about your data should be e-mailed to [email protected]. Other questions go to [email protected].

The SeeYouSoon app for phones will be published from the owner's own developer accounts. On Google Play the developer is called «Mognzar», and on the App Store Apple shows the owner's own name as the seller. Behind both is the same person who runs Timmarna Platform, and this policy applies to the app wherever you downloaded it.

Taxi rides that you book are carried out by GÖTA TRANSPORT 24 AB, company reg. no. 559029-6546. The taxi company is independently responsible for what is needed to carry out the ride and for its obligations as a taxi operator, for example the taximeter data and the bookkeeping.

In the same way, each connected business (restaurant, salon, cleaning company and so on) is independently responsible for how it uses the data about your booking to perform the service and for its own bookkeeping. Where we instead process data on a business's behalf, for example about its staff or a business account's employee list, we say so in section 9.

2. Your account and signing in

The account

When you create an account, we store your e-mail address, when you accepted the terms of use and which version you accepted, and whether you ticked «Local perks & updates». You then add your name and mobile number yourself, which are needed when you book. We also store your language, time format, when you last signed in and whether your e-mail and number are confirmed.

Optionally, you can add a profile picture and an animal that accompanies your profile. The profile picture is not shown to other users. We do not collect personal identity numbers on your account profile: a personal identity number is provided only on an individual booking when you request a tax deduction (RUT or ROT). For the 18+ age requirement in «I am open to a life partner» (section 7), your age is confirmed with BankID without the personal identity number being saved on the profile. You can also voluntarily link a «Verified identity» badge to your consumer account with BankID through a separate, non-pre-ticked consent (Article 6.1(a) GDPR and chapter 3, section 10 of the Data Protection Act): we then save only that your identity is confirmed, the timestamp and a key hash (never the personal identity number in cleartext). The badge is valid for 24 months at a time, you can tap «Unlink» in your profile at any time without deleting your account, and the record is cleared upon account deletion.

Signing in

You sign in with a six-digit one-time code that we e-mail to you. The sign-in goes through our own sign-in service. The code is kept only as a checksum and is valid for ten minutes. The app has no sign-in with BankID, SMS, Apple or Google.

Accounts for staff and businesses can have two-step verification, with a code from an app or a code that we e-mail. Every sign-in is stored with the IP address, type of device, browser and approximate town (city and country according to our hosting provider Cloudflare).

The mobile number

To confirm your mobile number, we send a one-time code by SMS through 46elks. This applies only to Swedish mobile numbers. Once the number is confirmed, we send a notification to your e-mail address, and if the same number was confirmed on another account, the confirmation is removed there.

3. Taxi

When you book

For a ride, we store the pick-up, the destination and up to two stops with coordinates, the time, the car class, the fixed price, your choices (for example quiet ride, temperature, help with luggage, child seat, pets and luggage), your message to the driver, your name and your mobile number. We calculate the price on our server and, in doing so, send the ride's coordinates to the routing service OSRM.

You can book for someone else. We then store that person's first name and mobile number. The number is deleted within one minute after the ride, and the first name is kept with the ride. We send nothing to the person you book for, so tell them yourself that you have given us their details.

If you book on a business account, the business's administrator sees the date, the time, your name in short form, the cost centre, the amount and the receipt number, but no addresses. For the business account's employee list, cost centres and monthly reports, we act as processor for the customer company under our data processing agreement (section 9), whereas the customer company, SeeYouSoon and the transport company are each an independent controller for performing the transport itself and for their own bookkeeping. Saved places (home, work and your own places) are kept encrypted until you remove them.

Who sees what

The driver who drives the ride sees the pick-up, the destination, the price, your choices and the name on your account. Depending on how dispatch is set up, other drivers nearby may also see the pick-up, destination, price and your choices before the ride is assigned, but not your name or number. After the ride, the driver sees your first name, the pick-up and the destination in their history.

If you call each other, you do so in the app, so the driver does not get your number and you do not get the driver's. Customer service and the taxi staff see only the last four digits of your number. The full number is shown only when someone on the staff opens it, and this is logged.

The taxi company sees ongoing rides with addresses and price but without your name and number. It also sees complaints and cases about its rides with your first name and what you have written, and ratings of three stars or lower with the comment but without a name.

Position during the ride

The app uses the phone's position only if you have given it permission. While the car is on its way to you, the app sends your position every ten seconds so that the driver can find you. Only the driver carrying out the ride sees it, and it is deleted when the ride starts, ends or is cancelled, at the latest after ten minutes.

During the ride, the car's position comes from the driver's phone. It is shown to you on the map and relayed through a channel at Cloudflare in Western Europe, where it is not saved. If the car stops for a long time or drives the wrong way, the app asks «Are you okay?», and the location is then saved with the ride.

Safety

When a driver has accepted the ride, a four-digit start code is shown to you, which the driver needs in order to start the ride. The code is stored with the ride.

You can share the ride with a follow link. Anyone who has the link sees your first name, the driver's first name, the car's make, model, colour and registration number, the car's position while you are travelling and an area for the destination, but never addresses, numbers, price or code.

Under «Safety» you can save up to five safety contacts (name, relationship and number, kept in encrypted form). Each new contact receives a text message with your first name saying that you have added them. After that, the contacts receive text messages with a follow link only when you have chosen it: when you tap SOS, or when a ride starts in the evening or at any time, as you have chosen.

If you hold down SOS, the phone calls 112, and the alarm goes to the taxi staff and the taxi company's owner with the car's registration number, the beginning of the pick-up address and the time. The app does not send your position with an SOS; we use the car's latest position or the pick-up. If no one on the staff takes the alarm within a few minutes, our person on call receives an SMS without your name and number, and our telephone provider Rinkel may call you back from customer service's number.

If you tap «That is not my car», the app sends the phone's position if it is no more than two minutes old. The report goes to the staff and the taxi company, not to the driver.

If you or the driver blocks the other after a report, or if you choose «Avoid this driver», you will not be matched again. The person who is blocked is not told. The staff review every block.

After the ride

You can give a rating, choose feedback options and write a comment. The rating affects the driver's average rating. You can have the receipt sent to your e-mail address. If you leave something behind, you can report it; the driver is then told what it concerns and the pick-up street, and the two of you can message and call each other in the app for 24 hours.

Music

If you add a Spotify link to your ride, we store the link and fetch the playlist's name and image from Spotify, and the driver sees the name but not the link. The image is loaded from Spotify in your browser. If the driver has a Spotify Jam, you can join it; your phone then opens the link in Spotify, not through us.

Addresses and maps

When you search for an address, our server sends what you type to the address services Nominatim and Photon, and when you tap «My location» it sends your position. They do not receive your name or your IP address. The answers are kept for one day in Cloudflare's cache. The map images come from CARTO, which receives your IP address when the app starts and which area the map is showing.

If you send a parcel with Express parcel, we store the recipient's name and number, the door code and the code shown at hand-over; the number, the door code and the code are kept in encrypted form.

4. Other services in the app

When you book or order from a connected business, we store the booking and send it to the business. The business and its staff see your name, your full mobile number and what is needed for the service. Our staff for the sector see only the last four digits of the number. Addresses, door codes and telephone numbers in the bookings are kept in encrypted form.

When you are logged in and open a new booking or quote form, we fill in reusable details from your most recent booking in the same category (and, if you are booking for a connected business account, the company name, organization number, billing address, and reference) so you don't have to type them again. You can edit them at any time or tap «Clear», and we never autofill personal identity numbers, door codes, card details, or «My needs».

What we keep for each service

Service	What we store	Good to know
Food and groceries	What we keepName, number, e-mail, the order, delivery address and door code, your messages to the kitchen. For table bookings: date, time, number of guests and your requests.	Good to knowOn an active table booking you can tap «Remove allergy note / Stop sharing» at any time to delete your allergy or dietary note without cancelling the table. Notes on food and shop orders are deleted after 30 days unless an ongoing complaint or dispute requires keeping them while the matter is open. Age-restricted goods are handed over only in the shop; you confirm your age and show ID there, and we keep nothing from the ID.
Salons	What we keepThe booking, name, number, your note, your place in the queue and the waiting list.	Good to knowYou receive reminders 24 and 2 hours before.
Car wash	What we keepRegistration number, car, address and door code when the wash takes place at your home.	Good to knowThe washer sees the address and code only when the job requires it.
Cleaning	What we keepAddress, door code and key, number, notes, recurring cleaning and before-and-after photos.	Good to knowIf you want the RUT deduction, you provide your personal identity number. Only the owner of the cleaning company can see the full number while the case is open, and every viewing is logged.
Cleaning, «Begär offert» (request a quote)	What we storeThe home (type, area, rooms, windows, pets), what is to be done, the dates you wish for, your note, the address and up to five photos.	Good to knowThe companies you ask see the postcode and area, not the address, until you book an offer. The photos are deleted 30 days after the request closed, and a request that did not become a booking is deleted after 12 months.
Trades	What we keepYour request, address, number and up to five photos.	Good to knowBefore you accept an offer, the businesses see only the area and the municipality. Do not photograph your address. If you want the ROT deduction, you give your personal identity number and the property designation. Only the company's owner can see them while the case is open, and every view is logged.
Workshop and towing	What we keepCar, registration number, the case, your position when you order a recovery, and the recovery driver's photos.	Good to knowThe recovery driver's position is shown to you while they are on their way.
Moving	What we keepAddresses, door code, date, household goods and volume, number, and personal identity number if you want RUT.	Good to knowBefore an agreement is made, the moving companies see only the area and the municipality. On moving day you see the vehicle's position while it is on its way.
Freight	What we keepAddresses, contact persons, goods, consignment note, signatures with name and place, photos and the vehicle's position.	Good to knowThe recipient receives an e-mail with the driver's first name and the vehicle's registration number, and anyone with a follow link sees the vehicle's position. If you order domestic transport as a sole trader, your organisation number is printed on the invoice only if you tick «Show my organisation number on the invoice»; for cross-border EU transport under the reverse-charge mechanism, your VAT registration number is always printed as required by the VAT Act.
Pets and shops	What we keepThe animal's profile, address and key code for a walk, orders with a collection code.	Good to knowThe dog walker sees the address and code for their own walks.
Events	What we keepThe ticket with the name of the person attending.	Good to knowThe organiser sees the name and the number of tickets, and the staff at the entrance see the ticket when it is scanned.
Flights	What we keepNothing about you.	Good to knowSee «Travel» below.

Scan the room with AI

When you make a moving request, you can photograph up to six rooms. The images are reduced in size on your phone, and our server removes location data and other information from the files. They are then sent, without your name, your address or your number, to an AI model at Cloudflare (Workers AI) that lists the furniture. We store neither the images nor the AI's answer. Only the list that you confirm yourself goes with the request, and the moving companies see that it came from the scan. Avoid including people in the photos.

Travel

When you search for flights, our server sends only airports, cities and dates to Travelpayouts, never your name, your account or your IP address. We do not store the search ourselves. If you tap a result, your browser opens the partner's page (for example Aviasales, which is run by Giant Travel Unicorn Two Limited in Hong Kong) through Travelpayouts' link; they then receive your IP address and whatever they collect themselves. You make the purchase with the airline or travel agency you choose there, and it is they who sell the trip. Clicks on offers from tour operators are counted without our knowing who clicked.

Payment

You pay the business or the taxi company directly. When you tap «Pay with Swish», the app opens Swish with the business's own number, the amount and the booking code. The money never passes through us, and we receive no notification from Swish. We do not accept any card details.

Where you can pay by card, to a company or a fee to us such as Club+, you pay on Stripe's own page. Stripe Payments Europe, Limited (Ireland) receives the amount and the card details and is itself the controller for the payment and the anti-money-laundering checks. If you pay a company, the money goes to the company's own Stripe account. We are told that the payment went through, never the card number.

5. Chat, calls, notifications and customer service

Chat

You and the driver can message each other during the ride and read the chat for 24 hours afterwards. No one on our staff can read the ride chat. In other bookings you can message the business. There, our customer service and the staff for that sector can read the chat, and every reading is logged.

Report and block

You can tap «Report» on the chat about a booking or on a message in it, on a review of a salon or restaurant, and on an ad. We keep who reported, what the report concerns and whose content it is, the reason you chose and what you write (at most 1,000 characters). Customer service sees only your first name and reads the content in its context, and every reading of the chat is logged. A person on our team makes the decision and writes a reason. The decision and the reason are sent to you and to the person whose content it concerns, and we do not tell that person who reported. In the chat about a booking you can also tap «Block»: the other side can then no longer write messages there, and the booking is not affected.

Translation

If you tap «Translate», or turn on automatic translation, the text of the message is sent to an AI model at Cloudflare (Workers AI), which translates it. This also applies when the person you are writing with translates your messages. We do not send your name, your number or your account with the text, but it contains what you have written to each other. The translation is kept by us for no more than 30 days. We also keep the language you read in and whether automatic translation is on.

What businesses write for their page, menus for example, is translated automatically into your language and checked in the background against prohibited goods. The business's text is sent then, and nothing about you. Names, phone numbers, e-mail and addresses are removed from the text before it is sent. More about this, and about who runs the models, is on the AI page.

Calls in the app

When you call the driver or a business in the app, the audio travels encrypted through Cloudflare's relay (Cloudflare Realtime), which sees the phones' IP addresses and the times of the call. Neither of you receives the other's number or IP address. We store that the call rang, was answered and ended, but never the audio, the number or the IP address.

Notifications

What we notify you of is kept as notifications in the app. If you turn on notifications on a device, we keep an address for the device. The notification on the lock screen is short; a chat message shows only the sender's first name, never the text.

Push notifications: your browser's push service, run by Google, Mozilla, Apple or Microsoft depending on the browser, receives the notification encrypted and an address for your device. In the phone app, once it has been published, notifications go through Firebase Cloud Messaging (Google) and, on iPhone, Apple's Apple Push Notification service. They receive the notification's short text, the buttons and an address for the app on your phone.

If you have ticked «Local perks & updates» and switched on notifications, you receive a notification about «Trips of the month» on the 1st and the 15th of each month, for as long as the «Local perks & updates» toggle under «Notifications» is on. If you switch it off, the notifications stop immediately. Every change to the consent is recorded with the time and where it was made, without any other personal data. We do not send newsletters by e-mail or SMS.

E-mail and SMS

E-mail is sent through Cloudflare's e-mail service from our own addresses under seeyousoon.se, with one sender for each kind of e-mail: «SeeYouSoon» (kod@) for one-time codes and the welcome e-mail, «SeeYouSoon Security» (sakerhet@) for notifications of sign-ins and changes to your account, «SeeYouSoon Receipts» (kvitto@) for the receipt for a taxi ride, if you ask for it, and for a withdrawn purchase, and «SeeYouSoon Partners» (partner@) for invitations to businesses and notifications in freight. If you reply to an e-mail, the reply goes to our customer service, [email protected]. We keep no copy of the e-mails. SMS messages are sent through 46elks: the code when you confirm your number, SMS messages to your safety contacts and SMS messages to our person on call in the event of an alarm. We never store the text of an SMS or the number in plain text.

Customer service

Cases you write in the app are kept with your account and what the case concerns, and customer service sees your name and your e-mail. If the case concerns a taxi ride, the taxi company can read and reply, and if it concerns a dispute, the business concerned can read and reply.

If you call customer service or open the chat with us in the app while signed in, the app first shows «Your customer service code»: six digits that are valid for 10 minutes. If you say the code, customer service can see that it is you and open your account and your latest open case. We do not keep the digits, only an encrypted checksum of the code, when it was created and which member of staff used it. The row is deleted after 7 days and when you delete your account. Every attempt to enter a code is logged, without the digits.

If you have switched on «Let Customer service read my needs when I contact them», customer service can read your saved lines in «My needs» in your own open case or in a call where you have given your code (section 13). Otherwise nobody on our staff can read them.

The chat icon on the map opens the customer-service AI chat, operated by CX Genie on chat.seeyousoon.se. The chat opens only after your explicit consent in the chat window (Article 6.1(a) and Article 49.1(a) GDPR): consent is requested once per device, saved on the device in support_chat_consent_v1 and can be withdrawn at any time in the app. It runs as a guest: our server sends no account data to it, and our databases keep no copy of the conversation. What you write, images that you send and your IP address are processed on CX Genie's servers in Singapore, and the answers are generated by AI models from providers in the USA. These countries have no EU adequacy decision. Do not write any sensitive data in the chat, such as your personal identity number (personnummer) or health information. The answers come from an AI assistant, and questions about money and complaints go to customer support. You can always withdraw your consent in the app, call us or open a support ticket in the app instead.

Customer service's telephone line (010-555 88 85) is operated by Rinkel. If you call us, Rinkel receives your number and the times of the call, as with any telephone operator. Customer service can see whether the number belongs to an account and, if so, your name and your open cases; the details of the call are kept for 30 days, without your number. If you ask us to call you back («Call me back»), your number is sent to Rinkel, which connects the call. We do not use recording or transcription.

6. SeeYouSoon Club, reviews and advertisements

SeeYouSoon Club

Everyone who has an account is a member of the club. When a booking, ride or order is completed it earns points, and we then keep the sector, the business (for taxi, the driver), the amount and the time. We also keep your level, your stamps with businesses, your vouchers and the offers you have unlocked with points. The businesses see only numbers, never who has a code.

We automatically look for patterns that suggest cheating or self-dealing, for example many purchases from the same business or many points on a new account, on the basis of legitimate interest (Article 6.1(f) GDPR, with the right to object under Article 21 GDPR). A person on the team assesses every such case before points are withdrawn. We never use your club data for targeted advertising or personalised prices. With a higher tier, your cases with customer service may come first, according to the club terms. You can leave the club; you then earn no new points.

Reviews

Reviews of salons and restaurants are shown to everyone with your first name, the rating, the text and the business's reply. Staff can hide a review, and you then receive a message stating the reason. If you delete your account, the text is removed; the rating remains in the business's average, without your name.

Ads

Advertisements in the app are uniformly labelled «Ad» (stating the paying business and why the ad is shown) and are chosen based on where you are in the app and which city you have chosen, never based on who you are. Paid placements (marked «Ad») are shown first on the map. We count views and clicks per advertisement without keeping who saw or clicked.

7. Care

Care is found under My account in the app. Everything in Care is optional, and each part has its own consent.

The card «Care, Marital Status & Life Wishes»

Here you can store your marital status and whether you want to celebrate your birthday, after you have ticked that you consent. How you are feeling is health data and is stored only if you also tick the separate consent for it. The answers are kept in encrypted form on your account, not on your phone.

Only you yourself see these answers, in the app and in your data export: technical and organisational safeguards ensure that none of our staff reads the daily well-being field, and we never use the answers for anything else. The numbers for 1177 Vårdguiden, Mind Självmordslinjen (90101) and 112 are always visibly shown in the Omtanke view, regardless of what you answer, and we pass nothing on.

«Delete my data» or unticking the consent deletes everything immediately. If you untick the consent for how you are feeling, only that piece of information is deleted.

«I am open to a life partner»

Only someone who is at least 18 years old and has confirmed their age with BankID in the app (without your personal identity number being stored on the account profile) can turn this on. When you tap the switch, the app first shows the full consent text, and nothing is saved until you tap «I consent». We keep the time and version of the consent, and if the text changes we ask you again. You are then shown on the care team's list with your first name and age.

You can answer questions about what you are looking for, age range, preferred distance (we never read your position), language, county, interests, children, smoking, whether you could move, and a free text of at most 300 characters. The answers may reveal something about your sex life or sexual orientation, and we therefore treat them as sensitive data. The questions about faith («How important is faith to you?» and «My faith») are shown only after a separate consent: «I consent separately to saving my faith (sensitive data).» All answers are kept in encrypted form.

The answers are seen only by the care team: the members of our staff who have been given the «Care» role. Other users, drivers, businesses and other staff never see them, nor do our super administrators. Every time someone views the list, this is logged for each person on it. The team does not see your number, your e-mail, your rides or your orders.

The team can suggest an introduction between two people who have both turned on the switch. You then see only each other's first name, age and county and the team's note. Only when you have both accepted is the other person's full name, phone number and e-mail shown, and every viewing is logged. You can withdraw your acceptance at any time, but we cannot take back what the other person has already seen. You can also block the person or choose «Report or block», which becomes a case with customer service.

A new suggestion appears as a notification in the app and, if you have notifications switched on, as a neutral push on the lock screen («You have a new message in SeeYouSoon») that never reveals that the notification concerns Omtanke or whom it concerns. It is not sent while you have an ongoing taxi ride that you booked yourself, are driving a taxi or are online as a freight driver. You can switch off «Notify me about new suggestions».

If you switch off the toggle, you disappear from the list and open suggestions are withdrawn. If you leave the toggle switched off for 12 months, your answers and data in Omtanke are deleted automatically after a reminder 30 days in advance. «Delete my answers» remains available even when the toggle is off and removes everything immediately: the answers, the suggestions, the blocks in both directions, the notifications about suggestions and the log lines of who has read your answers or seen a contact. All that remains is a code with no name or id for each pair that must not be suggested again. If you untick the consent for faith, the answers about faith are deleted.

8. Drivers and taxi companies

Application and papers

When you apply as a driver in the app, we keep the application and the documents you upload: driving licence (front and back), taxi driver ID (taxiförarlegitimation), YKB and ADR if you have them, which licence categories you hold and when the documents expire. The files are kept as you send them, without our removing any information from them, in our dedicated private file storage at Cloudflare under EU jurisdiction (seeyousoon-kyc-eu). A driving licence shows your photo and your personal identity number.

The documents are reviewed by SeeYouSoon's taxi staff. Taxi operations staff can also open them, and every time someone on the staff opens a file, this is logged. The taxi company sees which documents you have and when they expire, but not the files. We never request an extract from the criminal records register (belastningsregistret).

Driver photo

Your photo is reduced in size and our server removes location data and other information from the file. The team reviews it, and the customer then sees it during an ongoing ride. The taxi company only sees whether you have an approved photo. A rejected or replaced photo is deleted immediately, and you can remove your photo yourself.

Position

When you are online, the app sends your position roughly every 15 seconds, and more often during a ride. We store only the latest position. It is deleted when you go offline or choose «GPS off», except while you have an ongoing ride, and when the account is deleted.

When you identify yourself with BankID, in the application and when you go online, we store when it happened, why, the name BankID gave (encrypted) and a keyed hash of the personal identity number, never the number itself. The hash lets us see that it is the same person next time, and the team compares the name with the driving licence. BankID receives your IP address when the identification starts. The two latest identifications are kept as long as the account exists; older ones are deleted after 90 days. If the app stops you, or the team sees a discrepancy, a person in the team reviews the matter; write to customer service in the app.

Your position is seen by the customer during the ride, by anyone who has a follow link to the ride, by the taxi staff and by the taxi company's owner while you are online. On the map of available cars and on the public driver map, only a square of about one kilometre is shown, with the company's name, city, car class, rating and number of rides. If you switch on «Show registration number & driver profile on live map», everyone, including people who are not signed in, sees your exact position and direction, your first name and initial, the car's make, model, year and registration number and what you have written in your profile. The public driver profile shows your position only while you are online and do not have an ongoing ride, never when you are offline.

With «Only rides towards home», your home address is stored only on your phone. Our server receives a square of about one kilometre, and only while the mode is on.

Working time and rest

We keep when you go online and offline, your breaks, and work you add yourself with a note. The rest-time assistant calculates from this. It does not replace your logbook. Blocks and refused trips are logged with time and reason (for example «Insufficient rest») for 12 months, and the taxi company and our staff can export the log with your name, also as a file for the supervisory authority.

What the taxi company sees

The taxi company you drive for sees your name, your e-mail, the last four digits of your number (the full number if someone at the company opens it, which is logged), driving licence number, the status of the review and the reviewer's note, rating, number of rides, city, when you were last online, the status of your documents, car and equipment, and your ongoing rides. The owner also sees your exact position when you are online and your shifts over the last seven days with notes, and receives a notification when a document is about to expire.

Alarms and other matters

If you tap SOS, the phone calls 112 and the alarm goes, with your position, to the taxi staff and the taxi company's owner. With a silent alarm, nobody calls you back. With an ordinary alarm that nobody has taken, Rinkel may call you back from customer service's number. If you have a Spotify Jam, the link is kept only during the shift, and we keep a record that you have confirmed that you have Spotify Premium. As a driver you can choose to open navigation in Google Maps, Waze or Apple Maps, which then receives the destination.

The taxi company's own account

For a taxi company, we store the company's name, organisation number, address, town, telephone number and permit, and the documents required: identification for the applicant, certificate of registration, F-tax certificate (F-skattsedel), permit and insurance. The cars' documents are uploaded by the company, and every viewing of them is logged. Owners and managers need two-step verification. Telephone orders that the company enters itself are stored with the passenger's name and number, and the number is kept in encrypted form.

9. Connected businesses and their staff

When a business applies

We keep the business's name, company registration number, address, town and phone number. For a sole trader, the company registration number consists of the personal identity number: therefore the registration number and address are hidden on open public pages before sign-in and are instead shown to signed-in customers at checkout, on the order confirmation and on the receipt under the Distance Contracts Act. A sole trader working from home may register a PO box address or c/o address as the business address. The applicant uploads a copy of their ID and the documents the sector requires (kept in seeyousoon-kyc-eu under EU jurisdiction), for example a certificate of registration, a food business registration or insurance. The staff for the sector review them, and every time someone opens a file it is logged.

When authorized staff at a salon, car wash, auto repair shop, or taxi company enter a walk-in booking or phone order, they can search their own company's previous customers by name or phone number (at least three characters, up to ten results) to fill in contact, vehicle, or service details. No other company's customers are shown, no encrypted home addresses, door codes, personal identity numbers, or «My needs» are disclosed during the search, and every lookup is recorded in our access log.

The business's staff in the app and the panel

The owner invites staff by e-mail or mobile number to an existing account. We keep the person's name and role as the owner enters them. The staff see customers' data for the bookings they are to carry out.

When we are a processor

For some data, the business is the controller, and we process that data only on the business's behalf, in accordance with the business's instructions and our data processing agreement. If you have questions about that data, contact the business first. This applies to:

• Kassa & personal: for employees we store role, employee number, schedule, clocking in and out, breaks, corrections with reasons, pay model, tips and the payroll basis, which the owner can download to their payroll system. If the company has switched on «Stämpla in nära arbetsplatsen» (clock in near the workplace), the app asks for the phone's position when you clock in, and we store only the distance to the workplace rounded to tens of metres, never the coordinates. Otherwise the app does not ask for the position. If the company requires it, you can only clock in near the workplace. The owner and managers see times, corrections and, in the change log, amounts for pay and tips. Colleagues see who is clocked in right now.
• Tyre hotel: for anyone who stores wheels with a car wash or workshop, we keep the registration number, tyres, rims, storage location, a report with tread depth and damage, photos and the storage agreement. If you are not a user of the app, we keep your first name.
• Business accounts (rides and freight): when a corporate customer signs up for a business account (having first accepted our data processing agreement), we process its employee list, permissions, cost centres and monthly reports as a processor on behalf of the corporate customer. For the performance of the transport itself and traffic or bookkeeping requirements, the corporate customer, SeeYouSoon and the performing transport operator are each independent controllers.
• If you are an employee and delete your own account: the link to your account and your contact details are removed, but the employer keeps its data on time and pay (name, employee number and hours), which the law requires the employer to keep (Article 17(3)(b) GDPR, arbetstidslagen (the Working Hours Act) and bokföringslagen (the Accounting Act)).
• Customers the business enters itself: a salon or workshop can book a customer who has no account. We keep the first name, a note and the number, and the number is deleted 30 days after the visit. Workshops can also keep records of cars.

Tyre suppliers that sell to workshops receive the workshop's details and, for a customer's car, only the registration number.

When the business accepts the terms

When a business accepts the partner terms and the data processing agreement, in the application or later in the app or the panel, we record which account and which role it concerned, which documents and which version, the time, where it was done and a keyed hash of the network address (never the IP address itself). This is the proof of the agreement (Article 6(1)(b) and (f)). The row is kept as proof of the agreement even if the account is deleted; the keyed hash is then removed.

10. The website, the panel and when you e-mail us

The website

The website seeyousoon.se loads nothing from other companies: the fonts are hosted by us, and our server fetches the weather without your data. Cloudflare runs the website and sees your IP address when you visit it. Necessary storage and your choice about cookies are described in section 20.

The contact form stores your name, your e-mail, your number if you give it, the subject and the message. Name, e-mail, number and message are kept in encrypted form. Customer service reads it and sees the last four digits of the number. The forms «Become a driver» and «Become a partner» store name, e-mail, number and, for businesses, the company name, organisation number and city, and what you write about car and times. We use them only to contact you about your expression of interest. In the forms, we use your IP address only as a checksum to stop abuse, and we do not store it.

The panel

The panel at admin.seeyousoon.se is used by our staff and by the businesses. It loads fonts from Google Fonts, so Google sees your IP address, and maps from CARTO. If you sign in with a password, the browser remembers your e-mail address for next time.

When you e-mail us

We have no job application feature. If you e-mail us, for example an unsolicited application to [email protected], we use what you send to reply and to handle the matter. The e-mails are received in our e-mail, and we delete them no later than 6 months after the matter is closed (our own default). If you want us to delete your e-mail sooner, let us know.

11. Why and on what legal basis

We may process personal data only when the law gives us the right to do so. The table shows what we rely on for each purpose.

Purposes and legal basis

Purpose	Legal basis
Account, signing in, bookings, prices, passing bookings on to taxi companies, drivers and businesses, receipts, customer service for your booking, confirmation of your number	Legal basisContract (Article 6(1)(b) GDPR): it is needed to provide the service you have asked for.
SeeYouSoon Club	Legal basisContract (Article 6.1(b) GDPR) for membership, points and rewards under the club terms; legitimate interests (Article 6.1(f) GDPR, with the right to object under Article 21) for checks against abuse and self-dealing.
Optional «Verified identity» badge with BankID	Legal basisConsent in an unticked box (Article 6.1(a) GDPR and Chapter 3, Section 10 of the Swedish Data Protection Act). Can be unlinked at any time in your profile.
Scan the room with AI	Legal basisContract (Article 6(1)(b)): to prepare your moving request when you yourself choose to take photos.
Safety: start code, ride checks, SOS, reports, blocks, the alarm chain, text messages to safety contacts	Legal basisLegitimate interest (Article 6(1)(f)): that rides are safe for customers and drivers. Where someone's life or health is in danger, also Article 6(1)(d).
Review of drivers and businesses	Legal basisContract (Article 6(1)(b)) and legal obligation (Article 6(1)(c), taxitrafiklagen (the Taxi Traffic Act)).
Rest-time blocks and the log of declined rides	Legal basisLegitimate interest (Article 6(1)(f)): that drivers rest as the rules require and that this can be shown to the supervisory authority.
Driver photo, the driver's position and the public driver map in the form of a square	Legal basisLegitimate interest (Article 6(1)(f)): that the customer recognises the right car and driver and sees available cars.
Exact position and registration number on the public map, portraits in the tradespeople's directory	Legal basisConsent (Article 6(1)(a)): only when you turn it on yourself, and you can turn it off whenever you like.
Translation of the chat	Legal basisLegitimate interest (Article 6(1)(f)): that you understand each other.
Customer-service AI chat (CX Genie)	Legal basisConsent (Article 6(1)(a)) and explicit consent to the transfer to Singapore and the USA when you approve the chat in the chat window (Article 49(1)(a)). Consent is requested once per device (support_chat_consent_v1) and can be withdrawn at any time in the app.
The «Trips of the month» notification	Legal basisConsent (Article 6(1)(a)): only if you ticked «Local perks & updates».
Accessibility needs	Legal basisExplicit consent (Article 9(2)(a)).
My needs: saving the lines, sharing them with a booking, the on-call team reading the emergency card and customer service reading them in your case or call	Legal basisExplicit consent (Articles 9(2)(a) and 6(1)(a)), one for each purpose (section 13).
«I'm not feeling well» during a taxi ride	Legal basisContract (Article 6(1)(b)): that the driver does what you ask during the ride. We keep only what you asked for, no words about health.
The list of who has read your lines in My needs	Legal basisLegal obligation and legitimate interest (Article 6(1)(c) and (f)): being able to show you who has seen your lines. The list never contains the lines.
Care: well-being, life partner and faith	Legal basisConsent (Article 6(1)(a)) and explicit consent (Article 9(2)(a)), one for each part.
Bookkeeping	Legal basisLegal obligation (Article 6(1)(c), bokföringslagen (the Accounting Act)).
Withdrawn purchases: receiving the withdrawal and sending a receipt	Legal basisLegal obligation (Article 6(1)(c), distansavtalslagen (the Distance Contracts Act), Chapter 2, Sections 10 a–10 b).
Reports of content and decisions on them	Legal basisLegal obligation (Article 6(1)(c), DSA Articles 16–17) and legitimate interest (Article 6(1)(f)): to receive reports, assess them and give reasons for the decisions. A block in a chat: contract (Article 6(1)(b)).
The code for customer service	Legal basisLegitimate interest (Article 6(1)(f)): to know who we are talking to before we read anything about you.
Security, logs, protection against fraud and abuse, troubleshooting and statistics without names	Legal basisLegitimate interest (Article 6(1)(f)): to keep the service secure and working.
Contact form, expressions of interest and e-mails to us	Legal basisLegitimate interest (Article 6(1)(f)): to reply to you. For applications, also steps prior to entering into a contract (Article 6(1)(b)).
Kassa & personal, tyre hotel and business accounts	Legal basisThe business decides the basis as controller; we are a processor under our data processing agreement.
Data provided to authorities	Legal basisLegal obligation (Article 6(1)(c)), when the law requires it.

When we rely on legitimate interest, we have weighed our interest against yours, and you can object (section 19). When we rely on consent, you can withdraw it at any time; this does not affect what we did before.

12. Sensitive data

Data about health, religion and sex life are specially protected (Article 9 GDPR). We process them only as follows:

Accessibility needs

For a taxi ride, you can tick foldable wheelchair, rollator, «Guide or assistance dog (free of charge)», extra time, contact via chat only or help to the door. Next to the options, the app shows exactly who is allowed to see them and how long they are kept, and by ticking them you give your explicit consent (Article 9.2(a) GDPR). You can leave them unticked, and the ride is booked anyway. The needs are seen only by drivers who are offered the ride before it is assigned, the assigned driver while the ride is ongoing, the taxi company's dispatch solely during manual or assisted assignment, and authorised customer-service or taxi staff within 24 hours if there is an open case about the ride. They are never shown on the follow link or the receipt. The wheelchair can also be selected among the luggage and is treated in the same way. The needs are kept for no more than 24 hours after the ride is completed or cancelled and are then deleted automatically. If you want them removed earlier, write to us.

My needs

The lines and the emergency card in «My needs» may be health data. How we process them is set out in section 13.

Care

How you are feeling is health data. The answers in «I am open to a life partner» may reveal something about your sex life or sexual orientation, and the answers about faith are data about religion. Each part has its own explicit consent, and who sees what, how you withdraw consent and how you delete are set out in section 7.

What you write yourself

The app asks about allergies or requests when you order food or book a table. On an active table booking you can tap «Remove allergy note / Stop sharing» at any time to delete the note immediately without cancelling the table. If you write something about your health in an order, a chat, a case or a free-text field, it is kept with the order or message and shown to the recipient; notes on food and shop orders are deleted after 30 days unless an open complaint or dispute is ongoing. Write only what is needed. Images in «Scan the room with AI» may happen to show things that reveal something about you; they are never kept.

Child seats are chosen by type, and we never ask for a child's age or weight.

13. My needs

«My needs» is in My account in the app and is open to everyone. Everything in it is optional. There you can write what the person helping you should do, for example «Ask before you open the window» or that the food must not contain nuts, so that whoever helps you knows what you want. It is not healthcare and does not replace advice from healthcare professionals. If life is in danger: call 112. Medical advice: 1177.

What we keep

• Your lines for each service and a short note in your own words (up to 140 characters), if you choose «Save my needs in my account». The lines say what should be done, not why. What you pick about your health in the guide, for example asthma, stays on your phone and is never sent to us.
• A copy on a booking when you share the lines with that booking. You can also share for a single booking without saving anything in your account.
• Your emergency card, if you write one: your own text and one contact you choose from your trusted contacts.
• Your consents, with their time and version.
• Who has read them: when a driver or a business opens your lines, when customer service reads them in your case or in a call where you have given your code and when the on-call team reads your emergency card, we keep who, when and for which booking, case or alarm, or that it was a call, never the lines themselves. You see the list under «Who has seen my needs».
• If something happens during a taxi ride: if you tap «I'm not feeling well» and ask the driver to stop or close the windows, we keep only what you asked for, with no words about health. If you choose «Call 112» there, your phone calls 112, and we keep an alarm (SOS) that concerns your health, with no note.

Why, and on what legal basis

The lines and the emergency card may be health data. We process them only with your explicit consent (Article 9(2)(a) GDPR), a separate one for each purpose. Nothing is ticked from the start, and you withdraw a consent as easily as you gave it:

• Save my needs in my account: the lines, the notes and the emergency card are kept until you remove them.
• Share with a booking: each time you switch sharing on for a booking. If you choose «Suggest sharing» for a service, you consent once for that service, with a text of its own. Sharing is then already on when you book, and you can switch it off on every booking.
• Let the on-call team read my Emergency card if I raise an alarm: only during your own alarm.
• Let Customer service read my needs when I contact them: off from the start, and only in your own support case while it is open or in a call where you have given your code (see below). The box is there once you have saved your needs in your account.

You book at the same price and with the same priority without sharing anything, and customer service helps you just as much without your yes. We never use your needs for prices, ordering, advertising, recommendations or statistics.

Who sees what, and when

Nobody sees anything before they have accepted your booking, not even that you have wishes. After that they see only the lines for their own service, for that booking and while it is under way, and they can answer, for example, «I have read this». The lines are shown in their app language with the Swedish original underneath. Your own words are shown exactly as you wrote them and are never translated. We never ask for your diagnosis, but if you write something about your health in your own words, whoever has accepted the booking sees it. My needs is for the account holder: a ride you book for someone else does not take your lines. Nobody may turn you away because of your needs.

Who sees your lines

Service	Who sees them and when
Taxi	Who sees them and whenThe driver doing the ride, from when they have accepted until the ride has ended. Never drivers who are only offered the ride, not the taxi company and not SeeYouSoon's staff.
Food	Who sees them and whenThe restaurant's own people for your order (owners, managers and staff), from when the restaurant has accepted it until it has been collected or delivered.
Groceries and late-night shops	Who sees them and whenThe shop's own people for your order, in the same way as for food.
Courier (home delivery)	Who sees them and whenOnly the lines you share with the courier («Share with the courier», for example that you need time to open the door) are visible to the courier who has accepted the delivery, until the goods have been handed over. The courier never sees the kitchen's lines, and the kitchen never sees the courier's.
Beauty	Who sees them and whenThe salon's owner and the stylist who has your appointment, from the booking (it is confirmed immediately, sometimes several days before, for example for an allergy test) until the visit is finished.
Cleaning	Who sees them and whenOnly the named cleaner for the visit, from when they have been given the visit until it is completed (no later than 12 hours after the end time). Never the list of unassigned jobs and never the business's lists. A subscription shares the lines with every visit until the subscription or your consent ends, and you confirm them once a year.
Trades	Who sees them and whenThe business whose quote you approve (owners, managers and the team member who gets the job), from the approval until the job is approved, cancelled or missed. Never the request or the quotes.
Workshop	Who sees them and whenThe workshop's owner, managers and mechanics, from the booking until the car has been collected. Never the recovery driver.
Car wash	Who sees them and whenThe car wash's owner and the washer who has your wash, while the wash is booked or under way.
Moving	Who sees them and whenThe removal firm's owner and the supervisor of the move, from when you have approved the firm's quote until the move is finished. Never the request or other firms.
Events	Who sees them and whenThe organiser never sees who, only how many bookings share each line, counted two days before the event and only if at least five guests have booked.
Dog walk	Who sees them and whenOnly the dog walker who has the walk, while it is booked or under way. The dog's own notes are not affected.

In all services, the copy of your lines is deleted 24 hours after the job is finished. Tyre hotels, freight and shopping do not receive your lines.

The restaurant and the shop answer «Understood – we can arrange it» or «Can't guarantee it», and after «Can't guarantee it» you can cancel at no cost as long as the order has not left the restaurant or the shop. If the driver or the business cancels shortly after seeing your lines, a person at SeeYouSoon reviews it.

The taxi's accessibility needs, what you tick under «Accessibility» when you book a ride, are not part of My needs. The drivers offered the ride already see them, because they decide which car can take you, and they are described in section 12.

Customer service and the on-call team

Our staff never read the copies on your bookings. Customer service may read your saved lines and your own words only if you have switched on «Let Customer service read my needs when I contact them», only in your own support case and only while it is open, or in a call where you have given your code (then only the person who took the code, and for at most 30 minutes), and only after the person helping you has written down why. The emergency card is never included. Every reading is logged, and you see it under «Who has seen my needs» as a reading by SeeYouSoon's customer service in a support case or by phone. If you switch the box off, customer service can no longer read them, not even in a case that is already open.

The on-call team reads only your emergency card, only when you yourself raise an alarm in the app (SOS), only while the alarm is open and only if you have switched on «Let the on-call team read my Emergency card if I raise an alarm». Every reading is logged and shown to you. The on-call team does not replace 112.

Where your needs never go

In notifications, text messages, e-mail, receipts, printouts, the follow link, the chat, advertising and statistics. They are not kept on your phone either: the app holds them only while you use it and forgets them when you sign out. When the driver gets a line about fog from SMHI, our server asks about the nearest town, so SMHI never gets your position.

How long

• In your account: the lines, the notes and the emergency card until you remove them, switch off «Save my needs in my account» or delete your account. Once a year we ask whether they are still right. If you do not answer within 30 days, the suggestions to share are paused, but nothing is deleted without asking you.
• The copy on a booking: 24 hours after the booking is completed, or at once when you tap «Stop showing».
• What you write in an order from a restaurant or shop, for example the message to the kitchen and the instructions at the door: 30 days after the order is completed (kept longer only while an open dispute is ongoing), even when you have not shared anything. On an active table booking, the «Remove allergy note / Stop sharing» button deletes your note immediately without cancelling the table.
• «I'm not feeling well»: 24 hours after the ride. An alarm is kept like other incident reports (section 17).
• The list of who has read them: 12 months (our own default), also when you delete your account. It never contains the lines. The same applies to our staff's reasons for a reading and to a review of a cancellation.
• Backups: as in section 17. The lines are encrypted there too.

Your choices

You change your lines whenever you like, also for a single booking. With «Pause sharing», sharing is never switched on by itself when you book. «Delete everything» deletes everything at once, with one tap and a confirmation, including the copies on bookings under way and your yes to customer service and to the on-call team. «Download all my data» (section 19) gives you your lines, your emergency card, your shares and the list of who has read them. You can always complain to the Swedish Authority for Privacy Protection (IMY).

Sources

The line about fog on the driver's screen: SMHI open data, under the licence Creative Commons Attribution 4.0 SE. Allergens in food: the restaurant's own information, which the app shows with «according to the restaurant».

14. Automated decisions

Some decisions are made by our server without a human being involved at the time. You can always ask for a person on the team to go through a decision, explain it and change it if it is wrong. If the decision is based on incorrect information, for example an incorrect working time, the person corrects the information. No one can make an exception to a rule that follows from law, such as the rest-time rules. Write to customer service in the app (as a driver: «Request a review») or to [email protected].

• Who drives the ride: the server assigns each ride to a driver without asking the driver first. It chooses among drivers who are approved, online, have a recent position and valid papers, have a car in the right class, are close enough, and have not blocked you or been blocked by you. The order is based on rides already promised, the «mot hemmet» (towards home) mode, the earliest possible pick-up and the least driving without a passenger. The panel can also be set so that the driver's rating affects the order.
• Rest and driving time: if a driver has not rested enough or has driven for too long, they cannot go online, receive or take rides, and the server takes them offline when the driving time is up. No one on our staff can make an exception to the block, because it follows the rules on rest time. If a working time in the app is wrong, the driver can request a review, and a person on the team corrects the information. The driver receives a notice with the reason.
• Expired papers: a driver cannot go online or take rides while a required paper has expired.
• The price: the server calculates the fixed price from the route and the fare. You see it before you book.
• The club: points, level and when points expire are calculated automatically. Signs of cheating are flagged automatically, but a person decides whether anything is to be changed.

Advertisements and offers are not chosen based on who you are.

15. Who receives the data

We never sell your data. The following may receive it, each only what is stated. Our hosting and technology suppliers are generally processors: they process the data on our behalf and may not use it for their own purposes. Those that use suppliers of their own, sub-processors, we name where we know it.

Recipients of personal data

Recipient	What they receive	Why	Country
The taxi company that carries out the ride	What they receiveOngoing rides with addresses and price, cases and complaints with your first name, low ratings without names, alarms and reports. For drivers: see section 8.	WhyCarrying out the ride and its obligations as a taxi company	CountrySweden
The driver	What they receiveYour name, the ride's addresses, your choices, the chat and your position while the car is on its way; afterwards your first name and the addresses in the history	WhyCarrying out the ride	CountrySweden
Connected businesses and their staff	What they receiveYour name, your full number and what the booking requires (see section 4)	WhyCarrying out the service	CountrySweden
The driver or the business that has accepted your booking, when you share «My needs»	What they receiveThe lines for their service and your own words, for that booking and while it is under way	WhyYour explicit consent (section 13)	CountrySweden
The business account's administrator	What they receiveYour rides on the account, without addresses	WhyThe business's expenses	CountrySweden
The other person in an introduction in Care	What they receiveFirst name, age and county; once you have both said yes, full name, number and e-mail	WhyYour consent	Country—
Your safety contacts and anyone who has a follow link	What they receiveYour first name, the driver, the car and the car's position during the ride	WhySafety, at your choice	Country—
Everyone who uses the app or the website	What they receiveReviews with first names, the driver card, craftspeople's profiles and questions	WhySee sections 6 and 8	Country—
Cloudflare, Inc.	What they receiveEverything that is stored: hosting, the database, files, e-mail, operational logs and the channels for position and chat during the ride	WhyHosting provider (processor)	CountryUSA; the database in Western Europe
Cloudflare Workers AI	What they receiveThe text of a message that is translated, and the images in «Scan the room with AI»	WhyTranslation and furniture list (processor)	CountryCloudflare's global network
MiniMax	What they receiveTexts businesses have written for their page, with names, phone numbers, e-mail and addresses removed. Nothing about customers	WhyTranslation into the customer's language and flagging of suspected prohibited goods	CountryChina
Google (Gemini)	What they receiveThe same kind of texts, when they are translated into Kurdish	WhyTranslation into the customer's language	CountryUSA
Cloudflare Realtime	What they receiveThe phone's IP address and the times of the call, never the audio	WhyCalls in the app (processor)	CountryCloudflare's global network
CX Genie (cxgenie.ai)	What they receiveWhat you write, images you send in the customer-service AI chat and your IP address, only after your explicit consent in the chat window (once per device in support_chat_consent_v1, withdrawable in the app). You chat as a guest; our server sends no account data and our databases keep nothing of the conversation	WhyCustomer-service AI chat	CountrySingapore; AI providers in the USA
Stripe Payments Europe, Limited	What they receiveThe amount and the card details you type on Stripe's page; for companies, name and e-mail	WhyCard payment and subscriptions. An independent controller for the payment and the anti-money-laundering checks, our processor for invoices and subscriptions	CountryIreland
BankID (Finansiell ID-Teknik BID AB)	What they receiveYour IP address when you start an identification. BankID sends back your name and personal identity number; we never keep the personal identity number in plain text	WhyIdentification of drivers, 18+ age confirmation in Care, optional «Verified identity» badge (with consent) and, when switched on, confirmation at the next booking. An independent controller for the e-identification	CountrySweden
Invoiless	What they receiveA connected company's name, organisation number, address, invoice e-mail and amounts; never a customer's data	WhyInvoices to connected businesses (processor). The service is switched off today and will not be enabled until the server country is confirmed and a written data processing agreement (Article 28 GDPR together with safeguards for any third-country transfer) is in place	CountryStated before the service may be switched on
fiskaly (SIGN SE)	What they receiveThe company's name, organisation number and address and the receipts' lines and amounts; never the buyer	WhyControl unit for the cash register in «Kassa & personal». Not used today	CountryStated before the cash register is put into use
46elks AB	What they receiveThe recipient's number and the text of the text message	WhyCodes, text messages to safety contacts and to the person on call	CountrySweden
Rinkel	What they receiveYour number and the times of the call when you call us or we call you back	WhyCustomer service's phone line and call-back in the event of an alarm (processor)	CountryThe Netherlands
Your browser's push service	What they receiveThe notification encrypted and an address for your device	WhyNotifications, if you turn them on	CountryGoogle, Mozilla, Apple or Microsoft
Firebase Cloud Messaging (Google) and Apple Push Notification service	What they receiveThe notification's short text and an address for the app; only in the phone app once it has been published	WhyNotifications in the phone app	CountryUSA
CARTO (CartoDB Inc., United States)	What they receiveYour IP address and which area the map shows	WhyMap images	CountryUSA
Nominatim (OpenStreetMap Foundation)	What they receiveWhat you search for, addresses in bookings and your position when you use «My location», via our server	WhyAddress search	CountryUnited Kingdom
Photon (komoot GmbH)	What they receiveWhat you search for and your position when you use «My location», via our server	WhyAddress search	CountryGermany
OSRM (FOSSGIS e.V., Germany)	What they receiveCoordinates of the pick-up, stops and destination, via our server	WhyRoute calculation and price	CountryGermany
Travelpayouts (Go Travel Un Limited), Aviasales (Giant Travel Unicorn Two Limited) and the airline or travel agency you choose	What they receiveFrom our server only the search; if you tap a result, your IP address and whatever they collect themselves	WhyFlight search and the link to the partner, which is shown as an advertisement. The purchase is made with the airline or the travel agency	CountryHong Kong; the partner's country
Spotify	What they receiveThe link you added, and your IP address when the image loads	WhyMusic during the ride	CountrySweden
Google Maps, Waze or Apple Maps	What they receiveThe destination, when the driver opens the navigation themselves	WhyNavigation	CountryThe respective service
Google Fonts (Google)	What they receiveThe IP address of whoever opens the panel	WhyFonts in the panel	CountryUSA
Authorities	What they receiveWhat the law requires, for example the log of refused driving to the supervisory authority	WhyLegal obligation	CountrySweden

Our own staff see only what their area requires. Full phone numbers, documents, personal identity numbers for RUT, chats in bookings and the list in Care are shown only after the viewing has been logged. Customer service reads your lines in «My needs» only with your yes, and the on-call team your emergency card only during your alarm; every reading is logged first (section 13).

16. Transfers outside the EU/EEA

Some recipients are located outside the EU/EEA or may process data there. This is how the data is protected:

• Cloudflare is a company in the USA. The database is kept in Western Europe (including the United Kingdom under the European Commission's adequacy decision) and is protected by the EU–US DPF and standard contractual clauses. Identity documents and permits for drivers and connected businesses are kept in dedicated file storage at Cloudflare locked to EU jurisdiction (seeyousoon-kyc-eu), while other files are kept in Cloudflare's file storage protected by the EU–US Data Privacy Framework and standard contractual clauses. Translation, the furniture list and the call relay run on Cloudflare's global network and may therefore be processed outside the EU/EEA.
• MiniMax is in China, which has no EU adequacy decision. That is why MiniMax only receives the businesses' own texts without personal data, and never anything about customers. Google receives the same kind of texts and nothing more.
• The United Kingdom (Nominatim) has an EU adequacy decision.

• CX Genie (the customer-service AI chat) processes what you write, images you send and your IP address on its servers in Singapore, and the answers are generated by AI models from providers in the USA. These countries have no EU adequacy decision. The chat opens only after your explicit consent in the chat window (Article 6.1(a) and Article 49.1(a) GDPR), which is requested once per device in support_chat_consent_v1 and can be withdrawn at any time in the app; it runs as a guest, our server sends no account data to it and our databases keep no copy of the conversation. Do not write sensitive data in the chat. You can always call us or open a support ticket in the app instead.
• Google, Apple and Microsoft (push notifications, Firebase and Google Fonts) are certified under the EU–US Data Privacy Framework.
• Travelpayouts and Aviasales are in Hong Kong, which has no adequacy decision. Our server sends only the search, no personal data. It is you who opens the link to the partner, and each result says it is an advertisement.
• CARTO (the map images) is in the USA. We send nothing there ourselves: your browser fetches the images. The transfer is protected by the EU's standard contractual clauses and the EU–US Data Privacy Framework.
• Mozilla's push service, if you use Firefox, is reached by your browser itself. We have not yet established which safeguard applies there.
• Stripe: the contracting party Stripe Payments Europe, Limited is in Ireland, within the EU. Stripe's own transfers to the USA rest on their agreements with standard contractual clauses and the Data Privacy Framework.

17. How long we keep the data

We keep data for as long as it is needed for the purpose. Where the code does not yet delete something automatically, we say so. Where it says «our default», we have set the period ourselves, because no law specifies it.

How long the data is kept

Data	How long
The account	How longUntil you delete it.
Sign-ins (IP address, device, browser, town)	How long30 days.
One-time codes	How longOne day after the code has been used or has expired.
The ride chat	How long30 days from when each message was written, except for a ride with an incident.
Chat and calls in other bookings	How long30 days from when the message was written or the call was made.
Translations	How longNo more than 30 days.
Calls in the app during a ride	How long30 days, except for a ride with an incident. A notification of a missed call: 30 days.
Accessibility needs	How longAt most 24 hours after the ride has ended or been cancelled; after that they are deleted automatically.
My needs in your account (the lines, the notes and the emergency card)	How longUntil you remove them, switch off «Save my needs in my account» or delete your account.
The copy of your lines on a booking	How long24 hours after the booking is completed, or at once when you tap «Stop showing».
The list of who has read your lines	How long12 months (our own default), also when the account is deleted. It never contains the lines.
«I'm not feeling well» during a taxi ride	How long24 hours after the ride, unless otherwise set.
What you write in an order from a restaurant or shop	How long30 days after the order is completed (kept longer only while an open dispute is ongoing). On an active table booking, the «Remove allergy note / Stop sharing» button deletes the note immediately.
The message to the driver, child seat, pets and luggage	How long30 days after the ride.
The number of the person you book for	How longDeleted within one minute after the ride.
Your position while the car is on its way	How longDeleted when the ride starts, ends or is cancelled, at the latest after ten minutes.
Follow links	How longOne day after the link stopped being valid.
Rides (addresses, coordinates, choices, start code, rating)	How long7 years after the end of the calendar year in which the ride was booked; after that, the nightly job removes names, numbers, addresses, coordinates, notes and codes from the ride, and the amount, date and booking code remain. When you delete your account, your name, your number, the addresses and the code are removed immediately.
Bookings and receipts	How long7 years after the end of the calendar year in which the booking was made (the Swedish Bookkeeping Act, chapter 7, section 2). After that, the nightly job removes names, phone numbers, addresses, coordinates, notes and codes from the booking; the amount, date and booking code remain. A personal identity number for the RUT or ROT deduction and freight orders are not covered by that job.
Notifications in the app	How long90 days.
Cases with customer service	How long24 months after the case was closed (our own default), or earlier if you delete your account. An open case is kept for as long as it is open.
The code for customer service	How long7 days, and deleted when you delete your account. The log of the attempts is kept like the other security logs.
Reports («Report») and blocks	How longA report: 12 months after the decision, and an open report until it has been decided. A block: 12 months (our own default). When you delete your account, your reports and blocks are removed; a report about you remains for the decision, without your id.
Calls to customer service's number	How long30 days.
The contact form	How long12 months.
Expressions of interest	How longIf you do not apply: no more than 90 days. If you apply in the app: the data is removed 30 days after the application.
Saved places, safety contacts, music and favourites	How longUntil you remove them.
Optional «Verified identity» badge with BankID	How long24 months per confirmation, or immediately when you tap «Unlink» in your profile or delete your account.
Care	How longUntil you delete the answers or your account, or automatically 12 months after you switch off «I am open to a life partner» (with a reminder 30 days beforehand). «Delete my answers» also removes the suggestions, the blocks and the log lines; all that remains is a code with no name for a pair that must not be suggested again.
SeeYouSoon Club	How longMembership for as long as the account exists or until you leave the club. Points expire under the club terms; activity rows are pruned after 12 months, whereas accounting records for redeemed perks are kept for 7 years under the Bookkeeping Act.
The driver's documents	How longFor as long as you are a driver. When the account is deleted, the documents and their files are removed, together with the data we have noted from them.
The driver's working hours and own notes	How long24 months after the shift (our own default). When the account is deleted, the shifts are removed if you drove on your own; if you drove for a taxi company, the shifts remain without your note, as the company's record of working time.
The log of declined rides	How long12 months, even if the account is deleted.
The driver's latest position	How longOverwritten by the next position and deleted when you go offline or choose «GPS off», except while you have an ongoing ride, and when you delete your account.
Driver photo	How longUntil you change or remove it, and no longer than 3 months after you stop being a driver; immediately when the account is deleted. A rejected or replaced photo is deleted immediately.
Businesses' applications and documents	How longUntil the account is deleted. A freight company's papers are kept even then.
Photos from cleaning and craft jobs	How long30 days after the job, unless otherwise set. An open request keeps its photos.
Towing	How longCoordinates 7 days, photos 90 days and events 180 days after the job, unless otherwise set. The addresses: until the account is deleted.
Freight	How longFreight is not yet open to real hauliers. When it opens: photos 365 days, the vehicle's positions at each step and the driver's activities 60 days after delivery, and orders, documents and signatures 7 years after the end of the calendar year, for the accounting (our own default).
Door codes (car wash, moving, dog walks and cleaning)	How longRemoved when the visit is finished or cancelled; for cleaning, when the period for a re-clean has passed. Always when you delete your account.
Cleaning quote requests («Begär offert»)	How long12 months after the request closed or expired without becoming a booking; the photos already after 30 days. A request that became a booking is kept as the booking.
Personal identity number for RUT	How longRemoved if the booking is cancelled or when you delete your account, except while the RUT case is open.
Customer entered by a salon or workshop	How longThe number 30 days after the visit. The name and the note as for the booking: 7 years after the end of the year of the booking, after which they are removed.
Kassa & personal, tyre hotel and business accounts	How longThe business is the controller and decides how long; we are its processor. When an account is deleted, the link to the account and the contact details are removed, but the employer's data on time and pay remains, and a tyre hotel keeps the registration number and labelling for wheels it is still storing.
Security logs (which member of staff saw what, changes, sign-ins to the panel)	How longThe IP address and browser are removed after 12 months, and the rows after 24 months (our own default). A row that shows a consent is kept for as long as the account exists, as proof of the consent.
Event log for taxi without names	How long730 days (our own default), unless a different period has been set in the panel.
Cloudflare's operational logs	How longNo more than 7 days, for as long as Cloudflare's log service for our server keeps them.
Backups	How longBackups in private storage at Cloudflare within the EU, encrypted at rest by Cloudflare but not with our own key, are kept for 30 days for daily backups and for 12 months for monthly and tagged backups. Backups on our own server: the last 30 nights; backups taken before major changes are deleted after 90 days once their off-server copy exists. If a restore from a backup ever needs to be performed, a separate deletion log without personal data is replayed immediately before traffic is reopened, so that accounts deleted in the meantime remain deleted.
Withdrawn purchases	How longThe name, e-mail, booking and time are kept as proof that the withdrawal was received and when. When you delete your account, the name and e-mail are removed.

Incident reports: a report of an incident during a ride (SOS, a report, or a ride check that became an alarm), and that ride's chat and calls, are kept as evidence in case the event needs to be investigated or someone claims compensation. The report, the chat and the calls are deleted 2 years after the case has been closed; an open case is kept without a time limit.

When you delete your account, we remove your name, contact details, addresses, photos and what you have written, except incident reports and the chat of a ride with an incident. Amount, date and booking code are kept for bookkeeping, without your name. The following also remains:

• the ratings in your reviews, without name and text, in the businesses' average ratings;
• your posts with questions to tradespeople and requests for quotes from workshops;
• for drivers who drove for a taxi company: the shifts, without your note, as the company's record of working time; and the log of declined rides, for its 12 months;
• the employer's data on time and pay in Kassa & personal (Till & staff), and, for wheels that a tyre hotel is still storing, the car's registration number and labelling, without a link to the account;
• a withdrawn purchase without name and e-mail, and a business's acceptance of the terms without the keyed hash;
• the freight job's events, photos and documents, with your name masked;
• the list of who has read your lines in «My needs», without the lines;
• the security logs and the backups until they are purged.

You cannot delete your account while a taxi ride or a freight job is in progress.

18. Security

All traffic to the app, the website, the panel and our server is encrypted (TLS). We also encrypt certain data in the database with a key that only our server has: phone numbers (some older numbers are not yet encrypted), saved places, safety contacts, personal identity numbers, the answers in Care, the lines and the emergency card in «My needs», contact forms and expressions of interest, phone numbers, addresses and door codes in most bookings with businesses, and addresses and contact details in freight. One-time codes and follow links are kept only as checksums.

Not everything is encrypted. Among other things, e-mail address, name, the ride's addresses and the start code, chats, customer service cases and notifications are kept unencrypted in the database, which only our server and authorised staff can access.

Our staff are given access only to their own area, and certain viewings are logged (see section 15). The panel can require two-step verification. We limit how many attempts can be made to sign in and to submit forms. The app keeps some data on your phone, for example your number and recently used addresses; they are removed when you sign out or delete your account. Personal identity numbers, door codes, your answers in Care and what you have in «My needs» are not kept on the phone. A taxi company's shared phone should therefore always be signed out after the shift.

19. Your rights

You have the right to:

• find out what we hold about you and receive a copy. In the app: Profile → Privacy & data → Download all my data. You receive a file immediately. It contains most things, but bookings for car washes, crafts, workshops, roadside recovery, moving, dog walks, shops and events, among others, are not yet included in the file; e-mail us and we will send them to you;
• have errors corrected. You can change most things yourself in your profile;
• have data erased. In the app: Profil → Integritet & data → Radera konto & personuppgifter (Profile → Privacy & data → Delete account & personal data). The erasure happens immediately and cannot be undone. What is kept anyway is set out in section 17. What the app has stored about you on your phone is removed at the same time;
• withdraw a consent. You withdraw Accessibility, My needs, Care and the customer-service AI chat (support_chat_consent_v1) in the app. You switch the consent «Local perks & updates» off, and on again, with the toggle under «Notifications», and «Privacy & data» shows whether it is on. You can also e-mail us;
• object to processing based on legitimate interest;
• ask for restriction of the processing, for example while we investigate an error;
• receive your data in a machine-readable format (data portability), such as the file above;
• have an automated decision reviewed by a human (section 14).

E-mail [email protected] for all of this. We reply within one month and may need to ask you to confirm that it is you. If it concerns Kassa & personal (Till & staff) or the tyre hotel, contact the business first; we help it to respond.

You can complain to the Swedish Authority for Privacy Protection (IMY), imy.se, if you think we are processing your data incorrectly.

20. Cookies and storage

The website asks for your choice with a box: necessary storage is always on, while statistics and marketing are off until you choose. Today nothing is used for statistics or marketing. Your choice is saved in your browser with the date, and you change it with «Cookie settings» at the bottom of the page. We count how many accept and reject per day, without keeping who, or any IP address.

The app and the panel keep what they need in order to work in the browser's storage, for example your sign-in, your settings and your once-per-device consent to the customer-service AI chat (support_chat_consent_v1). Once the chat has been opened, it keeps its own guest sign-in on chat.seeyousoon.se. Everything is listed by name in Cookies and storage.

21. Changes

Each version of the policy is dated and published here and on the Terms and policies page. When we publish a new version, the app shows a calm message about it once. If the terms of use change, the app asks you to accept the new version the next time you sign in or book.