Privacy Policy

Last updated: August 30, 2026

The Swedish version is the legally binding one. This English text is a courtesy translation provided for convenience. If the two versions differ, the Swedish version prevails.

1. Data controller

Tayori HB, company reg. no. 969708-0167, Gjutformsgatan 1, 216 48 Limhamn, Sweden, is the controller for the processing of your personal data. Contact: [email protected]

2. Data we process and legal basis (Art. 6 and Art. 9 GDPR)

  • Account data and content: Name, professional role, posts and chats (performance of a contract, Art. 6(1)(b)). Note: BetweenShift does not read the content of your direct messages.
  • Wellbeing check-in (sensitive data): Your chosen mood and free text are processed solely on the basis of your explicit consent (Art. 9(2)(a)). You can withdraw this at any time.
  • Wellbeing history: Calculation of trends over time takes place under a separate, explicit consent (Art. 9(2)(a)).
  • Payment data: We store no card details. Subscriptions are handled by Apple/Google (independent controllers). Mentor payments are handled by Stripe, whereby the booked mentor receives payment data (not card numbers) as an independent controller.
  • Statutory obligations: Accounting data and transaction records (including DAC7 reporting for mentors) are retained in order to meet legal obligations (Art. 6(1)(c)).

3. Sharing of data and transfers to third countries

We engage the following processors and recipients: Supabase (database and storage), Sentry (error reporting), Expo (push notifications), Brevo (email) and RevenueCat (subscription management). Mentor payments are handled by Stripe. Transfers outside the EU/EEA take place only on the basis of the European Commission’s standard contractual clauses.

4. Retention periods and your rights

Your data is retained for as long as you have an account. If you delete your account, your data is deleted immediately with the exception of backups (maximum 30 days) and statutory data (for example accounting records, 7 years). You have the right of access, rectification, erasure, data portability and to object to processing. You can export your data directly in the app. Complaints can be directed to the Swedish Authority for Privacy Protection (IMY).