Privacy Policy

Last updated: 2026-03-04

1. Introduction

This privacy policy describes how Råggywood AB ("we", "us", "our"), registration number 556972-3884, processes your personal data when you use the app Topicos ("App", "Service").

We value your privacy and process your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Swedish legislation.

Contact information:
Email: support@topicos.app
Company: Råggywood AB
Country: Sweden

2. Data controller

Råggywood AB is the data controller for the processing of your personal data according to this policy.

3. What personal data we collect

Data you provide to us

• Account information – We collect phone number, name, profile picture, email address (optional) and biographical text to create and manage your account.
• Communication – We collect messages (text, images, video, audio, files), reactions and mentions to provide the chat function.
• Location data – We collect geographic location only when you choose to share it, to enable location sharing in chats.
• Organization data – We collect company/team names, group names and roles to manage workspaces and teams.
• Calendar data – We collect event titles, descriptions, dates, times and participant information when you create or participate in calendar events.

Data collected automatically

• Technical data – We collect device type, operating system and app version to ensure compatibility and troubleshooting.
• Usage data – We collect read receipts, delivery status and timestamps to display message status.
• Push token – We collect Expo Push Token for your device to send notifications.
• Language setting – We collect the selected language in the app to display content in the correct language.

Data we do NOT collect

• We do not continuously track your GPS location.
• We do not use analytics or tracking tools from third parties.
• We never sell your data to third parties.

4. How we use your data

We process your personal data for the following purposes:

• Provide and maintain the Service – Legal basis: Performance of contract (Art. 6.1.b)
• Send push notifications about messages – Legal basis: Performance of contract (Art. 6.1.b)
• Manage your account and authentication – Legal basis: Performance of contract (Art. 6.1.b)
• Store and display your messages and media – Legal basis: Performance of contract (Art. 6.1.b)
• Improve and develop the Service – Legal basis: Legitimate interest (Art. 6.1.f)
• Prevent abuse and ensure security – Legal basis: Legitimate interest (Art. 6.1.f)
• Fulfill legal obligations – Legal basis: Legal obligation (Art. 6.1.c)

5. How we share your data

Within the Service

• Your name and profile picture are displayed to other members in your teams and groups.
• Messages you send are displayed to recipients.
• Read receipts show when you have read messages (if the feature is enabled).

Third-party providers

We use the following subcontractors to provide the Service:

• Google Firebase – Provides authentication, database and cloud functions. Location: EU/USA. Data processed: account information, messages and metadata.
• Cloudflare R2 – Provides media storage (images, video). Location: EU. Data processed: uploaded media.
• Expo (Meta) – Provides push notifications. Location: USA. Data processed: push token and notification content.

These providers process data according to our instructions and are bound by data processing agreements.

Transfer outside EU/EEA

Some of our subcontractors (Google, Expo) may process data in the USA. These transfers are protected by EU Standard Contractual Clauses (SCCs) as well as the providers' certifications and security measures.

6. How long we store your data

• Account information is stored as long as you have an active account.
• Messages are stored as long as they are not deleted by you or team admin.
• Media files are stored as long as the associated message exists.
• Deleted messages are permanently deleted within 30 days.
• Inactive accounts may be deleted after 24 months of inactivity with prior notice.

When you delete your account, we remove your personal data within 30 days, with the exception of data we are required to retain by law.

Delete account

You can delete your account at any time in the Topicos app.

How to do it:
Open the app → Settings → Delete account

What is deleted:

• Your profile (name, phone number, profile picture)
• Your messages and files
• Your group memberships and teams

What may be retained:

• Payment history and invoice documentation held by Stripe may be retained for up to 7 years in accordance with Swedish bookkeeping law (bokföringslagen).

7. Your rights

Under GDPR, you have the following rights:

• Access – You have the right to know what data we have about you.
• Rectification – You have the right to correct inaccurate data.
• Erasure – You have the right to request that we delete your data.
• Restriction – You have the right to restrict how we process your data.
• Data portability – You have the right to receive your data in a machine-readable format.
• Objection – You have the right to object to processing based on legitimate interest.
• Withdraw consent – You have the right to withdraw consent you have previously given.

How to exercise your rights: Contact us at support@topicos.app. We will respond within 30 days.

Complaints: You have the right to file a complaint with the Swedish Authority for Privacy Protection (IMY) at www.imy.se or imy@imy.se.

8. Security

We protect your data through:

• Encrypted data transfer (HTTPS/TLS)
• Secure authentication via SMS verification
• Access control and permission management
• Regular security updates
• Data storage with certified cloud providers

9. Children

Topicos is not for children under 13 years of age. We do not knowingly collect personal data from children under 13 years of age. If you are a parent and discover that your child has created an account, contact us and we will delete the data.

10. Cookies and local storage

The app uses local storage (AsyncStorage) on your device to save login status, store message drafts, and save your settings. This is necessary for the Service to function and does not require separate consent.

11. Changes to this policy

We may update this privacy policy. In case of significant changes, we will notify you via notification in the app or email (if we have your email address). Continued use of the Service after changes means you accept the updated policy.

12. Contact us

Do you have questions about this privacy policy or how we process your personal data?

Råggywood AB
Email: kontakt@topicos.app

This privacy policy is effective from 2026-01-13.