Back to home

Privacy Policy

Last updated: November 2026

1. Data Controller

Plaggi is run by Kim Andre Kristensen in Lørenskog, Norway, who is the data controller for personal data in the service. The service follows Norwegian privacy law and the EU General Data Protection Regulation (GDPR).

Contact: hei@plaggi.app

2. What data do we collect?

We store the following data:

  • Name and email address, and a profile picture if you add one. If you sign in with Google, we get your name and email address from Google
  • Your children's names and birth dates
  • The garments you add: category, size, season, brand, note and photos
  • Town or area, if you give it for the marketplace
  • Kindergarten code, if you create or use a link to your kindergarten
  • Listings you post and messages you send in the app
  • Wishes you post under “Wanted” in the marketplace: category, size, the text and town or area. Anyone can see a wish, with your first name and the initial of your last name, until you take it down or it ends after 30 days
  • Who you share the wardrobe with, for example a partner or a grandparent
  • Feedback you send us: the text, your email address, the page you were on, your browser and any screenshot
  • Language and notification settings, and a key for push notifications if you turn them on
  • Technical data such as IP address and browser (via Vercel)
  • A log of errors and a few steps in how the app is used (see section 9)

3. Purpose of processing

We use the data to:

  • Deliver the service: the wardrobe, sizes, the marketplace and messages
  • Send notifications about sizes and growth
  • Find and fix errors, and improve the app
  • Respond to inquiries
  • Fulfil our legal obligations

4. Legal basis

  • Our agreement with you (GDPR Art. 6(1)(b)): your account, your children's names and birth dates, garments and photos, the marketplace, messages, sharing and notifications. These are needed to deliver the service. Sizes and growth alerts are worked out from the child's age.
  • Legitimate interest (Art. 6(1)(f)): the log of errors and steps in the app, so we can find errors and see where things get stuck. You can object to it, see section 8.
  • Consent (Art. 6(1)(a)): optional cookies. You can withdraw consent at any time.
  • Legal obligation (Art. 6(1)(c)): what the law requires us to keep.

5. Children's privacy and photos

The service is for parents and guardians. We use your children's names and birth dates only for the wardrobe. In the app, only you and the people you share it with see the wardrobe.

Photograph the garment, not your child. Before a photo is stored, we remove location data and other metadata from the file. Photos are stored in Vercel Blob. If you list a garment in the marketplace, other users see the listing with its photos, size and town or area. Photos are deleted when you delete the garment or your account. Photos in a listing you take down are kept until you delete your account.

6. Third-party sharing

These providers process data on our behalf, under a data processing agreement:

  • Vercel (USA): runs the app on servers in Frankfurt, stores photos in Vercel Blob and counts visits (section 9). Transfers under the EU-US Data Privacy Framework.
  • Neon (USA): the database, located in Frankfurt. Transfers under their data processing agreement (EU-US Data Privacy Framework and EU Standard Contractual Clauses).
  • Resend (USA): email delivery. Transfers under the EU-US Data Privacy Framework.
  • Google (USA): sign-in with Google, and push notifications in the mobile app through Firebase. Transfers under the EU-US Data Privacy Framework.
  • Notifications in the browser go through your browser's push service (for example Apple, Google, Mozilla or Microsoft). The notification is encrypted, so they cannot read its content.
  • Sentry GmbH (Germany): error tracking and performance monitoring. Data stored in the EU. Email, names and messages are removed before anything is sent (in beforeSend).

We never sell personal data.

7. Retention and deletion

Data is kept while your account exists. If you delete your account, personal data and photos are removed within 30 days. Feedback is kept without the email address and screenshot. The log of errors and steps in the app (section 9) is deleted after 12 months. Other usage statistics, for example when a child was added or a listing published, are kept while your account exists. Some data may have to be kept longer where the law requires it.

8. Your rights

You have the right to:

  • Access the data we hold about you
  • Correct inaccurate data
  • Request erasure of your data
  • Object to processing
  • Data portability: receive your data in machine-readable format
  • Lodge a complaint with Datatilsynet, the Norwegian Data Protection Authority (datatilsynet.no)

Under Profile and Settings in the app you can download your data and delete your account yourself. Send other requests to hei@plaggi.app. We respond within 30 days.

9. Cookies

We use necessary cookies for login, language and your cookie choice. We only use statistics and marketing cookies if you say yes, and today we use none. You can change your choice at any time under “Cookies” at the bottom of the page or in settings. Your choice is remembered for 12 months.

We count visits to the website with Vercel Web Analytics. It uses no cookies and stores nothing in your browser, so it does not ask first. We see which pages are visited, which page the visit came from, and country, browser and type of device. We do not see who you are, and your IP address is not stored. The app from the App Store and Google Play does not count visits.

To find and fix errors, we log on our own servers when the app responds with an error, along with a few steps in how the app is used, for example when a form is opened and closed without being saved. The log does not keep your name, email or any text you type. If you are logged in, the event is linked to your account, so we can see where things get stuck. None of this is stored in your browser. The log is deleted after 12 months.

10. Changes to this policy

We may update this policy. We will tell you about material changes by email before they apply. If a change needs your consent, we will ask first.