Privacy Policy

1. Who we are

She Won’t Forget is a service operated by Halland Technologies AS, a company registered in Norway (org. nr. NO929468724MVA), based in Agder, Norway.

For privacy-related inquiries, contact us at privacy@shewontforget.com.

2. What data we collect

When you sign up as a member, we collect:

• Phone number (used for identity verification and to contact you about upcoming plans)
• Full name and email address (used for account management and communication)
• Payment information (processed by Stripe; we do not store card numbers)

We also collect limited technical data automatically:

• Analytics data (page views, button clicks, general usage patterns) via Google/Firebase Analytics
• Device and browser information (collected as part of analytics and hosting logs)

3. How we use your data

• To provide the She Won’t Forget service (planning calls, personalized recommendations)
• To process payments and manage your subscription
• To communicate with you about your account and upcoming dates
• To improve our service through aggregated, anonymized analytics

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

4. Legal basis for processing (GDPR)

We process your personal data on the following legal bases:

• Contract performance (Art. 6(1)(b) GDPR): processing necessary to deliver the service you signed up for
• Legitimate interest (Art. 6(1)(f) GDPR): analytics and service improvement
• Consent (Art. 6(1)(a) GDPR): where required, such as for marketing communications

5. Third-party services

We use the following third-party services to operate:

Google / Firebase

We use Firebase Authentication for phone number verification, Cloud Firestore for data storage, and Firebase/Google Analytics for usage analytics. Your data is processed and stored on Google Cloud infrastructure. Google may process data in the US and other countries. For details, see Firebase Privacy and Security and Google Privacy Policy.

Stripe

We use Stripe to process payments. When you enter payment information, it is sent directly to Stripe and is not stored on our servers. Stripe may process data in the US. See Stripe Privacy Policy.

Vercel

Our website is hosted on Vercel. Vercel processes server logs that may include IP addresses and request metadata. See Vercel Privacy Policy.

6. International data transfers

Some of our third-party service providers (Google, Stripe, Vercel) may transfer and process your data outside the EEA, including in the United States. These transfers are protected by appropriate safeguards including Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework where applicable.

7. Data retention

We retain your personal data for as long as your account is active. If you cancel your subscription, we retain your data for up to 12 months to allow for reactivation, after which it is deleted. Payment records may be retained longer as required by applicable accounting and tax laws.

8. Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Erase your data (“right to be forgotten”)
• Restrict processing of your data
• Port your data to another service
• Object to processing based on legitimate interest
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email privacy@shewontforget.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at datatilsynet.no.

9. Cookies and tracking

We use Firebase/Google Analytics which may set cookies or use local storage for analytics purposes. These are used to understand how visitors interact with our website and to improve the service. No advertising cookies are used.

10. Changes to this policy

We may update this privacy policy from time to time. If we make material changes, we will notify you by email or through the service. The “last updated” date at the top reflects the most recent revision.