SOUVENEER Back to home

Souveneer · enlotec GmbH

Privacy policy

How the Souveneer app and website handle personal data.

1. Who is responsible?

This policy covers the Souveneer traveler app and souveneer.me. The controller and publisher is:

enlotec GmbH
Nassacherstrasse 8
8307 Effretikon
Switzerland
UID: CHE-345.114.989

For privacy questions and requests concerning your data: privacy@souveneer.me.

2. Your account

We use Firebase Authentication for email/password registration and Google or Apple sign-in. Depending on your chosen method, authentication providers process your email address, account identifier, sign-in credentials or tokens, and profile information such as a display name or profile image. Our backend associates your Firebase user ID and email with your account. Authentication and security services also process technical data such as IP address, device/browser information and integrity attestations. Password authentication is handled by Firebase; our application backend does not need your plaintext password.

3. Location, visits and notifications

With your permission, the app uses approximate or precise location to show nearby places, check whether you are in a collection area and record coordinates for a Coordinate Coin. With background location permission and location tracking enabled, location features can also operate while the app is not on screen. Location checks are sent to our backend to validate proximity and prevent misuse. Visit and purchase records can reveal places and times associated with your account; coordinate coins store the coordinates used at purchase. This is not a public live-location feed.

You can change location and notification permissions in device settings and location-tracking and notification preferences in the app. Disabling them limits the corresponding features. Push delivery uses Firebase Cloud Messaging, which processes installation/device tokens and notification-related data. Notification preferences, dismissals and mute choices may be stored with your account.

4. Memories, photos and sharing

Your collection, purchase history, Fridge layout, notes and relevant settings can be stored on our backend and synchronized across devices. Photo-library access is used to find photos from a visit date. Photos you add to the local gallery are kept on your device; this gallery feature does not upload the photo files to our backend.

Hiding photos can synchronize exclusion identifiers and matching information, including account-scoped image/file hashes, capture time, dimensions and a hashed filename. These records help recognize hidden photos across devices; they are not the photo files and are not treated as anonymous data. If you use an image-upload feature or have previously uploaded a custom overview image, that image and its associated metadata are stored on our backend until removed or otherwise deleted under this policy.

When you choose Share, the exported card and text may include the place, visit date and location/coordinate information. You choose the recipient app. Its operator processes the content under its own privacy terms. Review the card before sharing. Session diagnostics may separately capture visible app content as described below.

5. Purchases

We process order identifiers, selected products, prices, currency, tax information, purchase time, payment status and payment references to deliver purchased digital souveneers, prevent fraud and meet accounting duties. Stripe processes payments where that checkout is offered; Apple or Google may process purchases and store activity under their own terms where applicable. Payment details entered in a payment provider’s interface are handled by that provider. We do not need your full card number in our application database.

Where billing checkout is available, we collect the invoice recipient’s name, email address, postal address and billing country, plus an optional company and telephone number. Billing addresses added in checkout or Profile are saved with your account for reuse. You can add multiple addresses, choose a default, and edit or remove them in Profile. We separately retain a snapshot for each purchase and calculate taxes and issue invoices within Souveneer; changing or removing a saved address does not change existing order or invoice records. Stripe receives the amount, currency and order/account references needed to process and verify the payment; information entered in its payment interface is processed by Stripe. We may record the payment method’s issuing country as evidence for the applicable tax location. Invoice and receipt PDFs, refund credit notes and delivery-status records are stored for accounting and customer service. PDFs are available through authenticated downloads and are emailed using Mailgun’s EU API; billing emails do not use open or click tracking. Mailgun is an email provider separate from our Swiss hosting provider. Billing screens are masked from Clarity recording. Required accounting records are generally retained for ten years even after an account-deletion request.

6. App diagnostics and Microsoft Clarity

The app integrates Microsoft Clarity for usage analysis and session recording when a Clarity project is configured. Microsoft can receive interaction events, session/device information, technical diagnostics and recorded screen content according to the SDK and masking settings. We also send technical authentication-error events and deployment/platform tags to investigate failures. Masking and error-message scrubbing reduce exposure but must not be understood as a guarantee that all personal content is excluded.

This app processing is separate from the public landing page, which does not load Clarity. The current app does not provide an in-app Clarity opt-out switch. Contact privacy@souveneer.me about analytics-related rights or objections. Where consent is legally required, it must be obtained before the relevant processing; this policy does not itself provide consent.

Microsoft’s published Clarity retention periods include 30 days for ordinary playback and up to nine months for labeled/favorited sessions and certain interaction/heatmap data. See Clarity retention and Microsoft’s privacy statement.

7. Website, maps and external services

The public website uses browser local storage to remember a language choice. You can remove it by clearing this site’s browser data. The marketing homepage requests Google Fonts, so Google receives technical connection data such as your IP address when those fonts load. These legal and support pages use system fonts and do not load external fonts, analytics or a consent-management script.

Hosting and email systems process technical connection data and messages you send us. Website/backend hosting is planned with Infomaniak in Switzerland. App maps use OpenStreetMap tiles; requests can reveal your IP address and the viewed map area to the tile provider. Opening external maps, stores, sign-in or other links involves the respective provider. Search-engine exclusion directives on these pages are not access controls: anyone with the URL can read them.

8. Providers and international processing

Swiss hosting does not mean that all app data stays in Switzerland. Providers may process data in the United States, the EEA and other countries stated in their provider information. Where applicable, transfers require recognized adequacy decisions, applicable Data Privacy Framework certification, standard contractual clauses adapted for Swiss law, or another lawful safeguard or exception. You can contact us for information about the safeguards relevant to your data.

9. Purposes and legal bases

We process data to provide requested accounts, collections, location features and purchases; operate, secure and improve the service; answer requests; and comply with legal duties. Swiss data protection law applies. Where GDPR applies, the relevant bases are contract/pre-contractual steps (Article 6(1)(b)), legal obligations (c), legitimate interests in security, reliability and handling enquiries (f), or consent where required (a). You can withdraw consent for future processing without affecting earlier lawful processing.

10. Retention and security

Account and collection data are kept to provide your account and collection until you request deletion or they are no longer needed. Notes, settings, notification preferences and photo-exclusion records follow the associated account or product relationship. Transaction and accounting records that must be kept under Swiss law are generally retained for ten years; we limit their use to legal, accounting and dispute purposes. Support correspondence and security logs are kept for as long as needed to handle the request, investigate abuse or meet legal obligations. Backup and service-provider copies may remain until their applicable retention cycle expires; retained copies must not be used to reactivate a deleted account. We explain any applicable retention exception and its duration when handling your request.

We use access restrictions and security measures appropriate to the services. Our public service endpoints are configured for HTTPS. This is not a claim of end-to-end encryption, independent security certification or absolute security. Provider-specific retention also applies; see the linked provider policies.

11. Your rights and deletion

Subject to applicable law, you may request access, correction, erasure, restriction, a portable copy of eligible data, object to relevant processing and withdraw consent. Use privacy@souveneer.me or the account deletion and data requests page. Requests are handled after proportionate identity verification; do not send passwords, payment-card details or identity documents unless specifically needed and requested through a suitable channel.

We respond without undue delay and normally within one month of receiving your request. Where applicable law allows an extension because of the complexity or number of requests, we may take up to two additional months. We will tell you within the first month why an extension is necessary. This is not a general three-month waiting period.

You may complain to a competent supervisory authority, including the Swiss Federal Data Protection and Information Commissioner. Uninstalling the app does not delete your server account. Local files, original library photos, third-party shares and device/cloud backups require separate action.

12. Children and changes

Observe the app-store age rating. Children and young people should involve a parent or guardian before creating accounts, making purchases or sending personal information where required by applicable law. If you believe a child’s data has been provided unlawfully, contact us. We update this policy when our practices change and provide any additional notice or consent request required by law.