Privacy Policy

This policy explains how Reround Oy (business ID 3616929-7) processes personal data. It covers the Reround website at reround.fi, the Reround app (the inventory application for Android, iOS and the browser), our newsletters, and our customer relationships (together, the "Services"). We comply with applicable data protection law, including the General Data Protection Regulation (EU) 2016/679 ("GDPR").

Reround Oy is the controller of the personal data described in this policy, except for inventory data that a customer organisation records in the Reround app, for which we act as the organisation's processor (see section 4).

Creating an account does not mean you consent to this policy, and we do not rely on consent to provide the Services. We use consent in only one situation: newsletters and similar marketing where the law requires it. Where we rely on consent, you can withdraw it at any time, for example by using the unsubscribe link or contacting info@reround.fi. Withdrawing consent does not affect processing that took place before you withdrew it.

1. What personal data we collect

1.1 Data you provide

• Account information. Your name and contact information. In the app you sign in with a Google or Microsoft account, and we receive your name, email address and profile picture from that provider. The app does not store a password of its own.
• Inventory data. Products, physical units, locations, condition grades, notes and status history that you record for your organisation. This is business data about the organisation's assets, and it is attributed to the member who entered it.
• Photos. Photos you take of inventory items or attach from your photo library. They are stored with the item they belong to. When you add an item, the app also sends its photos to Google's Gemini model to suggest the item's product type and attributes (see section 6). The app keeps only the image itself: photos are re-encoded on your device before upload, which removes the metadata your camera embeds, such as the time and place the photo was taken.
• Camera and photo library access. The app asks for camera permission to scan QR stickers and photograph items, and for photo library access to attach existing photos. The app uses the operating system's photo picker, so it receives only the photos you choose. Both permissions are optional and requested only when you use those features.
• Memberships and invitations. When you accept an invitation to an organisation or property, we record the membership, which controls which inventory you can see and edit. When a member invites someone, that member enters the invitee's email address, and we use it, together with the inviter's name, to send the invitation before the invitee has taken any action.
• Communications. Your name, contact information and the contents of messages you send us.

1.2 Data collected automatically on the website

This section concerns reround.fi only.

• Server log data: IP address, user agent (browser, device type and operating system), the page requested, and the date and time of the request, recorded by our hosting provider when a page is served.
• No cookies, no analytics: the website sets no cookies and uses no analytics or tracking service, so there is no cookie banner.

1.3 Data collected automatically in the Reround app

Crash and error reports. If the app crashes, or an action in it fails (for example a save that the server refuses), the app sends a report to Google's Firebase Crashlytics so that we can find and fix the fault. A report contains:

• what went wrong: the type of error, its technical error code and message, and a stack trace;
• the app version, the device model and operating system version, and the time;
• an identifier of the app installation that Crashlytics generates, which is not tied to your name or email address;
• the internal user ID of your Reround account (never your email address or name), so we can tell whether several reports come from one account;
• the property selected in the app and your role on it, so we can tell a permission problem from a bug;
• for a failed action, the database path of the record it concerned, such as the item or unit being saved. The record's contents, such as photos, notes or descriptions, are not included.

Reports are sent only from released versions of the app, never from the development versions our own developers run. We do not use crash reports for anything other than diagnosing and fixing faults, and they are not combined with any marketing or advertising data.

App integrity (Firebase App Check). To keep our servers available only to genuine copies of the app, each app build proves its integrity to Google using Apple's App Attest or DeviceCheck on iOS and Google Play Integrity on Android. This exchanges a device-generated attestation token with Apple, Google and our servers; it does not identify you personally.

Technical data at our providers. Our infrastructure providers (section 2) process technical data such as IP addresses and device information as part of running their services, for example when the app signs you in or loads your inventory.

1.4 What the Reround app does not collect

The app does not use or request an advertising identifier, does not use any analytics or usage-tracking service, does not request or use your location, does not send push notifications, does not collect anything in the background when it is not open, and does not collect payment card information.

2. Our service providers

• Google (Firebase): Firebase Authentication, Cloud Firestore, Cloud Storage and Cloud Functions host account identities, inventory data and photos. The inventory database, the photo storage and the server-side functions are located in the European Union (Firestore and Cloud Storage in the eur3 EU multi-region, functions in Belgium).
• Google (Firebase Crashlytics): receives the crash and error reports described in section 1.3.
• Google (Firebase App Check), Apple (App Attest / DeviceCheck) and Google Play (Play Integrity): verify that requests come from a genuine build of the app.
• Google (Gemini, via Firebase AI Logic): receives downscaled copies of item photos to suggest product type and attributes.
• Microsoft: provides sign-in to the app if you choose a Microsoft account, and shares your name, email address and profile picture with us.
• Mailjet (Sinch): receives names and email addresses to send invitation and access-removal emails on our behalf.

These providers may use personal data only as necessary to provide services to us or to comply with legal requirements.

3. Why we use personal data

• Customer relationships: finding and communicating with contact persons at customers and prospects; creating demo and customer accounts; onboarding; providing support; invoicing and accounting.
• Providing the Reround app: keeping an organisation's inventory records, storing item photos, controlling who can see and edit which inventory, and sending invitation and access-removal emails.
• Automatic item recognition: when a member adds an item, up to five of its photos are downscaled on the device and sent to Gemini, which suggests a product type and attributes for the member to confirm or correct.
• Keeping the app working and secure: diagnosing crashes and failed actions from the reports described in section 1.3, and verifying that requests come from a genuine build of the app.
• Marketing: offers to existing customers and business contacts, and newsletters to people who signed up. We never transfer your personal data to a third party for marketing, and you can opt out at any time.
• Statistics and development: statistical analysis, product development and improving support.
• Legal obligations, such as accounting.

4. Legal grounds for processing

Our legitimate interests are: running and securing a reliable inventory service for customers and their members; finding and fixing faults in the app; making sure only invited members, using a genuine copy of the app, can see and change an organisation's inventory; improving our products and support; and communicating with business contacts about relevant offers. We have weighed these interests against your rights. We collect only the data described here, we do not use it for advertising profiling, crash reports carry an internal ID rather than your name or email address, and members of a customer organisation would reasonably expect their account details to be processed so the app can work. You can object to processing based on our legitimate interests at any time (section 7).

Inventory data. Inventory data, including item photos, belongs to the customer organisation. For that data we act as the organisation's processor and process it on its instructions under a data processing agreement. Details about a member, such as their name on an entry, are processed for the organisation's own inventory management.

No automated decisions. We do not make decisions about you based solely on automated processing. Item recognition only suggests a product type and attributes, and a member confirms or corrects them.

Providing data. You are not legally required to give us personal data, but we cannot provide an account or the app without the account information described in section 1.1.

5. How long we keep personal data

• Customers: while the customer relationship is active and one year afterwards, unless deletion was requested earlier or the law requires longer retention (for example, accounting records).
• App member accounts: name, email address, profile picture and memberships are deleted immediately when the member deletes their account (section 7). A pending invitation addressed to the member stays with the organisation that sent it, which can revoke it. The member's name remains on the status history of the items and units they recorded, as part of the organisation's inventory record, until the organisation's data is deleted.
• Inventory data and photos: these belong to the customer organisation and are kept while the customer relationship is active and one year afterwards, regardless of which members have left.
• Crash and error reports: 90 days at Firebase Crashlytics, after which Google deletes them automatically.
• Newsletter subscribers: while the subscription is active. After you opt out, we keep a record of the opt-out only to make sure we don't contact you again.
• Website server logs and support messages: server logs 90 days; support messages two years after the case is closed.
• Backups and email logs: deleted data may remain in our providers' backups for up to 30 days. Mailjet keeps the delivery log of an invitation email (recipient address, delivery status) for 30 days.

6. Recipients and transfers of personal data

Who receives your data. We share personal data only with suppliers who process it on our behalf under data processing agreements, listed in section 2. We do not sell personal data.

Where data is processed.

• Inventory database, photos and server functions: European Union.
• Sign-in (Firebase Authentication): a global Google service; account identities may be stored and processed in the United States.
• Crash and error reports (Firebase Crashlytics): United States.
• Item recognition (Gemini, via the Gemini Developer API): a global Google service with no EU-only option; photos may be processed in the United States.
• Invitation emails (Mailjet): European Union.

Transfers outside the EU/EEA. Some suppliers, including Google, may process data in the United States. Google LLC is certified under the EU–US Data Privacy Framework, and our data processing terms with Google also include the European Commission's standard contractual clauses, with supplementary measures where needed. You can request a copy of the safeguards by contacting info@reround.fi.

Item photos and Gemini. Photos are downscaled on your device and only photos of the item being added are sent. Google processes them as our processor. Under the paid Gemini API terms that apply to our Firebase project, Google does not use the photos to train its models. Photos can incidentally show personal data, such as a person or a name plate in the background, so please avoid photographing such details.

Invitations. If you received an invitation and do not want it, contact info@reround.fi and we will delete your email address.

7. Your rights

You have the right to:

• request access to the personal data we hold about you;
• have it corrected or deleted, or its processing restricted;
• receive it in a portable format;
• object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests, including crash and error reporting. We will stop unless we can show compelling legitimate grounds that override your interests, or the processing is needed for legal claims;
• object at any time, without giving a reason, to direct marketing;
• withdraw consent at any time, where processing is based on consent.

To exercise these rights, contact info@reround.fi. We aim to respond within one month.

Deleting your Reround account. You can delete your account yourself at any time in the app: open Settings, choose Delete account and confirm. Your account is deleted immediately. If you cannot use the app, ask us by email. Our account deletion page explains both routes, what is deleted, and what stays with your organisation and why. Deleting your account does not delete crash reports already sent, which carry only an internal ID and expire after 90 days.

Complaints. You have the right to lodge a complaint with a supervisory authority. In Finland this is the Office of the Data Protection Ombudsman (tietosuoja.fi).

8. Changes to this policy

We may update this policy. The date at the top shows the latest version. If we make significant changes, we will notify you, for example by email or a notice in the app.

9. Contact

Reround Oy, business ID 3616929-7, Vanha kelkkamäki 19 A 1, 00570 Helsinki, Finland, info@reround.fi.