Privacy Policy
Last updated: 1 May 2026
fljót is a private companion app for a small group of families sharing a summer house in Iceland. Accounts are created by an administrator; there is no public sign-up. This document describes what data the app stores about you and how it is used.
The app is operated by DGS Software as the data controller. Questions and requests can be sent to dgs.software.is@gmail.com.
What we store
- Account — your username, email address, and a bcrypt hash of your password (we never store the password itself).
- Content you create — wall posts, chat messages, guides, bookings, supplies, and finance entries you log inside the app, including any images you attach.
- Push tokens — if you enable notifications, your device's push token (Apple APNs via Firebase Cloud Messaging) so the server can deliver notifications.
- Sign-in metadata — short-lived session and refresh tokens used to keep you signed in.
- Server logs — request logs are kept on our server for up to 30 days for debugging and abuse prevention, then rotated.
We do not collect advertising identifiers, analytics about how you use the app, your location (beyond the cabin's pre-configured location used for weather), or your contacts.
How we use it
- To let you sign in and identify you to other members.
- To run the features of the app (showing your bookings to other households, broadcasting chat, etc.).
- To send push notifications when something relevant happens (a new message, a booking conflict).
- To send transactional emails such as password-reset and sign-in-link emails.
- To diagnose bugs and prevent abuse.
We do not sell or share your data with advertisers or third parties for marketing.
Where it is stored
All app data is stored on servers located in the European Union. Push notifications are delivered via Apple Push Notification service and Firebase Cloud Messaging; the only data shared with those services is your device push token and the short notification text. Transactional email (sign-in links, password resets) is sent via Resend.
How long we keep it
We keep your account and the content you create for as long as your account is active. If your account is deactivated, content you authored remains visible to the other members of your household by default (the cabin's history is shared). On deletion, your user record and personal identifiers are removed; uploaded files are deleted from disk; content authored by your account is shown as authored by an unknown user.
Your rights
Under Icelandic and EU law (GDPR) you have the right to ask for a copy of your data, correction of incorrect data, deletion of your account, and a portable export. To exercise any of these rights email dgs.software.is@gmail.com from the address associated with your account. We respond within 30 days.
Children
fljót is not intended for children under 13 and we do not knowingly collect data from children. Accounts are created by a household administrator who is responsible for the household's membership.
Changes
If we update this policy we will change the "Last updated" date at the top of the page. Material changes will also be announced inside the app the next time you sign in.