Privacy Policy

2.1Controller

Tryypa AB is the controller for the personal information we process in connection with the Platform, unless otherwise stated.

3.1Account data

We collect and process Member Account data in order to create and maintain your Account and provide you with the Platform Services. The lawful basis for processing your Account data is Article 6(1)(b) of the GDPR (performance of a contract).

3.2Personalisation and improvement

Where we process your data to personalise the Services and improve the Platform based on usage patterns and survey responses, we rely on our legitimate interest under Article 6(1)(f) of the GDPR.

3.3Marketing communications

Where you have opted in to marketing communications, the lawful basis is your consent under Article 6(1)(a) of the GDPR.

4.1Account registration

When you register an Account, we collect:

• First name and last name;
• Email address;
• Login credentials (passwords are stored in encrypted form);
• Identity verification data.

After registration, you may be asked to complete an optional onboarding survey regarding your background and intended use of the Platform. This information is used for product development and profiling (see Profiling below).

4.2Platform usage data

When you use the Platform, we collect information about your activity, including:

• Home Listings and Sitter Profiles you create or view;
• Messages exchanged with other Members via the Platform's messaging feature;
• Reviews and ratings you submit;
• Technical data such as IP address, device information, and session logs.

4.3Public availability of Member Content

Home Listings and Sitter Profiles you create are accessible to other Members and, depending on your privacy settings, may be visible to unregistered visitors. Please be mindful of the information you include in public-facing profiles and listings, and do not include sensitive personal information that you would not wish to be publicly visible.

5.1Retention

We retain your Account data for as long as your Account is active. Upon Account deletion, your personal data is deleted in accordance with our retention schedule, subject to any legal obligations requiring us to retain certain data for longer periods.

7.1Sub-processors

The recipients of your personal data will be our trusted sub-processors — IT service providers, identity verification providers, and communication service providers. The main providers currently processing Members' data in connection with the Platform are described below.

7.2Amazon Web Services (AWS)

We use Amazon Web Services (AWS) to provide hosting infrastructure for the Platform, including storage of user data and transactional data. Data is hosted in AWS regions within the European Economic Area (Frankfurt, Ireland, Stockholm), with the exception of certain image assets which may be hosted outside the EEA.

Where your data is transferred outside the EEA (in particular to the United States, where AWS's parent company is located), such transfers take place on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission or the EU–US Data Privacy Framework.

7.3Hetzner Online GmbH

We use Hetzner as the primary application server layer where user data is initially processed. Hetzner hosts our backend servers, handles application logic, and temporarily processes data before persistence in AWS. Data is processed in Hetzner's data centres located in Germany and Finland, both within the EEA.

Because all Hetzner processing occurs within the EEA, no international data transfer mechanism is required for this processing.

7.4Mailgun Technologies, Inc.

We use Mailgun to send transactional emails to Members, including account creation confirmations, password resets, and service notifications. Mailgun also processes email metadata such as delivery timestamps and, where applicable, open rates.

Your data may be transferred outside the EEA in connection with Mailgun's services. Such transfers take place on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission.

Under data protection law, you have a number of rights in relation to your personal data. The rights available to you depend on our reason for processing your information.

Right of access

You have the right to ask us for copies of your personal information. There are some exemptions, which means you may not always receive all the information we process.

Right to rectification

You have the right to ask us to rectify information you think is inaccurate, and to complete information you think is incomplete.

Right to erasure

You have the right to ask us to erase your personal information in certain circumstances.

Right to restriction of processing

You have the right to ask us to restrict the processing of your information in certain circumstances.

Right to object to processing

You have the right to object to processing where we rely on our legitimate interests as the legal basis.

Right to data portability

Where we process your information based on your consent or for the performance of a contract, and the processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format and to request that it be transmitted to another controller.

8.1Exercising your rights

You are not required to pay any charge for exercising your rights. We aim to respond within one month of receiving your request. Please send your request to info@tryypa.com.