Privacy policy

1. Controller and contact

Felix Frost (Estifire), Östra varmvattnet 293, 922 67 Tavelsjö, Sweden, is the controller for data processed through estifire.com. Privacy and data-rights requests can be sent to fillefrost@hotmail.com or made by phone at 070-444 38 60.

2. Data we process

• Account data: Firebase account identifier, sign-in provider, name, email, email-verification status, avatar, plan, and saved preferences. Password credentials are handled by Firebase Authentication and are not available to Estifire.
• Session data: team name, tasks, descriptions, estimation points, participant name/avatar/role, decisions, rationales, and exported history.
• Authentication and security data: anonymous or signed-in Firebase user ID, authentication state, App Check signals, and encrypted passkey bundle. Estifire never receives your biometric data.
• AI input: the task, aggregate estimate context, local prompts, and the question you choose to send to Ask Esti.
• Payment data is handled by Stripe. Estifire receives customer, subscription, plan, seat quantity, and transaction status, but not full card details.
• Withdrawal requests: name, email, optional order reference and message, request timestamp, and processing status.

3. Why and legal basis

Data is used to deliver requested sessions and accounts, synchronize participants, prevent abuse, provide support, save paid-account history, and administer subscriptions. The principal bases are performance of the service agreement and legitimate interests in security and product operation. Optional AI processing happens only when a user actively asks Esti a question.

4. Providers and transfers

Estifire uses Google Firebase for hosting, authentication, database, App Check, and optional Firebase AI Logic. Google sign-in is provided by Google. Stripe processes payments and provides the customer billing portal. These providers process data under their own terms and data-processing safeguards; processing may occur outside Sweden or the EEA with applicable transfer safeguards.

5. Retention and visibility

Live session data remains available to authenticated session participants through the session code. Account history is retained while the account is active or until deletion is requested. Security and transaction records may be retained longer when legally required. Avoid entering secrets, health data, or other sensitive personal data in tasks or AI questions.

6. Your rights

Depending on applicable law, you can request access, correction, deletion, restriction, portability, or object to processing. You may also complain to the Swedish Authority for Privacy Protection (IMY). Contact us from the email linked to your account so the request can be verified.

Kort svensk sammanfattning

Estifire behandlar konto-, sessions-, estimerings- och säkerhetsuppgifter för att leverera tjänsten. Uppgifter till Ask Esti skickas bara när du själv ställer en fråga. Google Firebase används för drift och autentisering. Du kan begära registerutdrag, rättelse eller radering via fillefrost@hotmail.com. Ange inte känsliga personuppgifter i uppgifter eller AI-frågor.