Kollis Logo

Privacy Policy

Last updated: February 3, 2026

1. Introduction

Kollis ("we", "us", "our") is committed to protecting your privacy. This privacy policy describes how we collect, use, store, and protect your personal data when you use our platform and mobile application. By using our services, you agree to the handling of your data as described in this policy.

2. Information We Collect

We collect the following types of information:

Account Information

  • Name and email address
  • Phone number
  • Password (encrypted)
  • Role and unit assignment

Work-Related Data

  • Work schedules and tasks
  • Inventory and stock data
  • Quality logs and temperature controls
  • Checklists and reports
  • Improvement suggestions and deviation reports
  • Budget and financial data

Technical Information

  • IP address and browser type
  • Device type and operating system
  • Usage patterns and app interactions
  • Cookies and similar technologies

3. How We Use Your Information

We use collected information to:

  • Provide, maintain, and improve our services
  • Manage work schedules, tasks, and assignments
  • Communicate with you about work-related matters
  • Send notifications and reminders
  • Generate reports and analytics for your employer
  • Improve user experience and application performance
  • Ensure platform security and prevent misuse

4. Legal Basis for Processing

We process your personal data based on:

  • Contract: Processing required to fulfill our agreement with you or your employer
  • Legitimate interest: Improving our services and security
  • Consent: For cookies, analytics, and marketing where applicable
  • Legal obligation: Compliance with applicable legislation

5. Information Sharing

We never sell your personal data. We may share information with:

  • Your employer: Work-related data such as schedules, reports, and inventory data
  • Service providers: Hosting (Vercel), database (MongoDB Atlas), email services, and analytics tools that process data on our behalf
  • Authorities: When required by law or in legal proceedings

All third-party providers are bound by data processing agreements and handle data in accordance with GDPR.

6. Data Storage and Security

We store your data securely using:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Encrypted passwords with bcrypt hashing
  • Secure cloud servers with restricted access
  • Regular security audits and updates
  • Session management with secure tokens

Data is stored within the EU/EEA. When transferring data outside the EU/EEA, we ensure appropriate safeguards are in place.

7. Cookies and Tracking

We use:

  • Essential cookies: For authentication and session management
  • Analytics cookies: Simple Analytics for anonymous usage statistics (requires consent)
  • Performance cookies: LiveSession to improve user experience (requires consent)

You can manage your cookie preferences via our cookie banner on your first visit and change them at any time.

8. Your Rights (GDPR)

Under GDPR, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Request restriction of processing of your data
  • Data portability: Receive your data in a machine-readable format
  • Objection: Object to processing based on legitimate interest
  • Withdraw consent: Withdraw consent at any time without affecting the lawfulness of prior processing

Contact us at support@kollis.se to exercise your rights. We respond to requests within 30 days.

9. Data Retention

We retain your data for as long as necessary to provide our services and comply with legal obligations. Inactive accounts may be deleted after 2 years. Work-related data may be retained longer if required by your employer or by law.

10. Children's Privacy

Our service is not intended for users under 16 years of age. We do not knowingly collect information from children. If we discover that we have collected data from a person under 16, we will delete it immediately.

11. Changes to This Policy

We may update this privacy policy as needed. Changes will be posted on this page with an updated date. For significant changes, we will notify you via email or within the application.

12. Contact Us

If you have questions about this privacy policy or how we handle your personal data, contact us:

13. Supervisory Authority

If you believe we are handling your personal data incorrectly, you have the right to file a complaint with the Swedish Authority for Privacy Protection (IMY) at www.imy.se.