Hyttepermen is an iOS app for shared cabin management. This policy explains how personal data is processed when you use the app.

· We run no servers of our own. All data is stored locally on your device and synced via your own iCloud account.

· We have no access to cabin, stay, checklist, chat or photo data.

· We use no tracking, no ads and no analytics.

· You can delete all your data at any time from the app (the Shed → Settings → Delete all my data).

Last updated · 11 June 2026.

The data controller for personal information is:

Jonas Haug

Konvallveien 20

3047 Drammen, Norway

Email: jonas@haugogdatter.no

You choose what to enter into the app:

· Your name

· Cabin information (name, address, photos)

· Checklists and shopping lists

· Cabin log entries (including photos and drawings)

· Maintenance records and meter readings

· Chat messages

· Practical info (Binder cards, including any voice notes and PDF attachments you add)

· Device and OS version is used locally for compatibility checks only, and is automatically attached to the email if you send feedback.

· Your iCloud account ID is used as the identifier for syncing. It is handled by Apple, we never see it.

We do not collect location data, contacts, calendar contents or any data beyond what you explicitly enter into the app.

We use no analytics tools, no tracking SDKs and no ads.

· All cabin, stay, checklist, chat, photo and card data is stored locally on your device and in your private iCloud account (Apple's servers).

· Invite codes for shared cabins live in the CloudKit Public Database (Apple's servers). The record contains the code, the cabin's name, address and area, the inviter's name, the chosen role, and the cabin's wifi name and wifi password, so new members get the practical info as soon as they join. The record can only be looked up with the code itself, expires automatically, and is deleted when the code is deactivated or you delete your data.

· Settings and preferences are stored locally on the device (UserDefaults).

· Weather data is fetched from met.no (the Norwegian Meteorological Institute) when needed. The request contains only the geographic area of your cabin, no user information.

· Calendar export (optional): If you choose to add a trip to your calendar, the event is created in your iOS calendar. The app only modifies events it created itself, and never reads or stores any other calendar events.

Apple Inc. is the data processor for the iCloud services. Apple's privacy policy applies to this processing: apple.com/legal/privacy.

When you create a shared cabin and invite family members, the cabin data syncs to their iCloud accounts via Apple's CloudKit Sharing. You decide who is invited and which role they get.

We share no personal data with third parties. We have no agreements with ad networks, analytics providers or data brokers.

Any in-app purchases are handled by Apple via the App Store. Apple processes the payment information. We only receive confirmation that the purchase was completed, never any payment details.

Processing takes place on the following grounds:

· Necessary to deliver the service you requested (GDPR art. 6(1)(b)): for the app to work, we must store the data you enter.

· Legitimate interest (GDPR art. 6(1)(f)): for feedback via email.

Data is stored for as long as you use the app. When you delete a cabin or an entry, it is removed immediately from your device and iCloud. When you delete all data (the Shed → Settings → Delete all my data), all local data, all data in your private iCloud and all active invite codes in the CloudKit Public Database are removed. Deletion cannot be undone.

Under the GDPR you have the right to access, rectification, erasure, data portability, restriction and objection. You can exercise most of these rights directly in the app:

· Access and portability: the Shed → Settings → Export cabin data (creates a JSON file with all your data)

· Erasure: the Shed → Settings → Delete all my data

· Rectification: edit directly in the app

For other requests, contact jonas@haugogdatter.no. You also have the right to lodge a complaint with the Norwegian Data Protection Authority, Datatilsynet, if you believe the processing violates data protection law.

· Data is transferred via Apple's encrypted CloudKit service (TLS/HTTPS).

· iCloud data is protected by your Apple ID and your device passcode/Face ID.

· Sensitive fields (wifi passwords, codes, alarm codes) are hidden by default in the app and require a tap to reveal.

Hyttepermen is not directed at children under 13. If you as a parent or guardian become aware that a child under 13 has entered personal data without consent, you can contact us to have the data deleted.

We may update this privacy policy when needed. Material changes are announced in the app or via App Store updates. The current version is always available in the app and on this page.

Privacy questions: jonas@haugogdatter.no. See also the terms of use.