Skip to content

Privacy Policy

Last updated: 2026-10-22

Kattkompis is a free neighbourhood app where cat owners help each other. This policy describes what data we collect, why, who can see it and what you can do about it.

1. Data controller

Kattkompis AB, company registration number 559594-1799, Folkparksvägen 132, 126 77 Hägersten, Sweden, is responsible for processing your personal data. You can reach us at the email address at the bottom of this policy.

2. What data we collect

  • Account: email address, name and password, stored encrypted.
  • Profile and cats: profile photo, description, photos of your cats, breed, age and personality tags.
  • Location: an approximate area for your profile, and the location you give when you create a lost-cat alert or a help request.
  • Content: posts, comments, reactions, reviews, vouches and messages you write.
  • Help and bookings: requests, offers, dates and the status of help sessions.
  • Chip readers: the area and contact method you give if you register as having a chip reader.
  • Payments: amount, time and Stripe references when you buy an ad or become a supporter, and for a renewing membership also its status and next renewal. We never see the card number.
  • Technical data: push device tokens, language, rough device information, IP address and error messages when something crashes.

3. Why we process the data, and the legal basis

  • To deliver what you asked for: account, lost-cat alerts, messages, a purchased ad and supporter membership. Legal basis: contract.
  • To send notifications and email about what happens in the app. Legal basis: contract, and consent for push on your device.
  • To keep the app safe, find bugs and understand how it is used. Legal basis: legitimate interest.
  • To keep accounting records for payments. Legal basis: legal obligation.

4. What others can see

  • Your profile, your cats and your posts are visible to other logged-in users. Your exact address is never shown, only an approximate area.
  • A lost-cat alert is public. The page can be opened without an account and shared onward. If you choose to pay for an ad, the alert is also published on our Facebook page.
  • If you register as a chip reader, your area and chosen contact method are visible to other users.
  • Reviews and vouches you receive are shown on your profile.
  • Messages are visible only to you and the recipient. They are protected in transit and at rest, but not end-to-end encrypted, which means they can technically be read in the database.

5. Lost-cat alerts, Facebook and ads

A lost-cat alert only helps if it spreads. If you choose to pay for an ad, we publish the alert on the Kattkompis Facebook page and show it as an ad to neighbours in the area. Without that purchase we do not post your alert on Facebook. Meta then processes the data in the post and the ad under their own terms. We also compare alerts against public posts about found cats to look for matches.

6. Payments

Payments for ads and supporter membership are handled by Stripe. You give your card details directly to them, they never pass through our systems. Stripe processes your name, email, country, payment details and purchase history to take the payment, renew a membership and prevent fraud. We store the amount, time, reference and membership status so we can deliver what you bought, answer questions and keep our accounts. Legal basis: contract, and legal obligation for the bookkeeping. Accounting records are kept for as long as Swedish accounting law requires, currently seven years, even if you delete your account.

7. Notifications and email

Push notifications require your permission on the device, and you can switch them off again in the app settings or on your phone. Email about things like help requests and lost-cat alerts can be controlled per category under settings, and every message has an unsubscribe link.

8. Analytics and debugging

We use PostHog (EU) to see how the app is used, for example which screens are visited. When something goes wrong a technical error report is sent to us, which may include your user id and where in the app the error happened. The iOS app uses Meta's SDK to measure how many people install the app after seeing one of our ads. It does not use your device's advertising identifier (IDFA), since the app never asks to track you. Instead it sends app events such as the install and each app open, with an anonymous id the SDK creates on your device and technical details such as device model, operating system and IP address. This is not linked to your account, and the app does not ask to track you across other apps. The purpose is to see which ads work. Legal basis: legitimate interest. Meta may transfer the data to the US, which happens under the EU-US Data Privacy Framework. There are no tracking pixels or ad scripts on the website, and we never sell your data. The partner cards in the feed are ordinary links. If you tap one, the shop learns that you came from Kattkompis and where in the feed the card sat, but we pass on nothing about you.

9. Who we share data with

We never sell your personal data. We use these providers in order to run the service:

  • Supabase: database, authentication and file storage, within the EU.
  • Cloudflare: hosting, image delivery and video.
  • Stripe: payments for ads and supporter membership.
  • Postmark: transactional email, US-based, transfers covered by standard contractual clauses.
  • Meta: publishing and advertising paid lost-cat alerts on our Facebook page, and measuring app installs from our ads through Meta's SDK in the iOS app. Transfers to the US happen under the EU-US Data Privacy Framework.
  • Google Maps Platform: address suggestions when you enter a location.
  • Apple and Google: delivering push notifications to your device.
  • PostHog: analytics on how the app is used, EU-based.
  • Addrevenue: handles the links in the partner cards. If you tap a card they learn the click came from Kattkompis.
  • Amazon Associates: the same for the Amazon card.
  • Anthropic (Claude API): translates the text of feed posts into other languages, and compares the text and photos of lost-cat alerts with found cats to find matches. Also used as a development tool, where data may be briefly visible during debugging. Data is not used for model training. Transfers to the US happen under the EU-US Data Privacy Framework.
  • Telegram: error reports, which may include your user id, are sent through Telegram to the founder and no one else.

10. Storage, security and retention

Data is stored with Supabase using Row Level Security, which means the database itself decides who may read what. All traffic goes over HTTPS. We keep your data for as long as your account exists. If you delete your account, your profile, cats and content are removed, while messages may remain with the person you wrote to and payment records are kept under accounting law.

11. Your rights

Under GDPR you have the right to:

  • Find out what data we hold about you.
  • Correct data that is wrong.
  • Delete your account and the data belonging to it.
  • Get your data in a machine-readable format.
  • Object to or restrict certain processing, and withdraw a consent.

Email us and we will help you.

You can also complain to the Swedish Authority for Privacy Protection (imy.se) if you think we handle your data incorrectly. If you live in another EU or EEA country, you can also complain to the data protection authority in your own country. The Swedish authority remains the lead supervisory authority for Kattkompis.

12. Children

Kattkompis is not aimed at people under 18, and we do not knowingly collect data about children.

13. Changes to this policy

We may update this policy. We will tell you in the app about significant changes.

14. Contact

Email: oscar@kattkompis.se

Kattkompis AB, reg. no. 559594-1799, Folkparksvägen 132, 126 77 Hägersten, Sweden.