Fidova
Search

Privacy Policy

Last updated 7 July 2026

This privacy policy describes how Fidova processes your personal data when you use our dog-training platform — when you create an account, book courses or facilities, communicate with trainers, and use our services. We process your data in accordance with the EU General Data Protection Regulation (GDPR). Fidova is in a beta period and the service is being developed continuously. We update this policy when our processing changes.

Data controller

Fidova is the controller responsible for processing your personal data on the platform, which means we decide why and how the data is processed. Our full company name, registration number, and postal address are shown on our contact page at https://fidova.se/en/contact, where you will also find current contact details. If you have questions about our processing, you are welcome to contact us there.

Personal data we process

We process the following categories of personal data: • Account data: name, email address, phone number, password (stored as a secure hash, not in plain text), and language preference. • Profile data: for trainers, also a bio, experience, specialties, and profile image. • Data about your dog: for example name, breed, age, and notes you enter yourself. • Booking and participation data: the courses and facilities you book, attendance, and waitlist position. • Payment status: whether a booking has been marked as paid and confirmed. We do not handle card or bank details (see the payments section of the Terms of Service). • Communications: messages, group chats, reviews, feedback, and anything you send through the contact form. • Training journal: notes and content you save about your training. • Technical information: IP address, device and browser information, logs, and error diagnostics needed for security and operation.

Purposes and legal basis

We process your data for the following purposes and on the following legal bases under the GDPR: • Providing the service — creating and managing your account, bookings, and communication. Legal basis: performance of a contract. • Sending necessary messages and notifications about your bookings and account. Legal basis: performance of a contract and legitimate interest. • Security, preventing misuse and fraud, and troubleshooting. Legal basis: legitimate interest. • Developing and improving the platform. Legal basis: legitimate interest. • Meeting legal obligations, such as accounting requirements where they apply. Legal basis: legal obligation. If we ever process data for purposes that require your consent, we will ask for it separately, and you can withdraw it at any time.

Recipients and processors

We never sell your personal data. We share it only as far as needed to run the service: • Trainers and organizations: when you book a course or facility, the relevant trainer or organization receives the data needed to complete the booking, such as your name and details about your dog. • Processors that handle data on our behalf under data-processing agreements: – Supabase — database, sign-in, and file storage. – Vercel — hosting and delivery of the website. – Resend — sending transactional email, such as confirmations and receipts. – Sentry — error and performance monitoring. Payments are made directly to the trainer, for example via Swish. We are not a party to the payment and do not receive your payment details — we only record whether a booking has been marked as paid. We may also disclose data where we are required to by law.

Transfers outside the EU/EEA

Some of our providers may process data in or from countries outside the EU/EEA. Where that happens, we ensure the transfer is protected by appropriate safeguards under the GDPR, such as the European Commission standard contractual clauses. Contact us if you would like more information about these safeguards.

How long we keep your data

We keep your personal data for as long as you have an active account and for as long as it is needed for the purposes described above. When you close your account, we delete or anonymize your data within a reasonable time, unless we are required to keep certain data longer — for example to meet accounting or other legal requirements. Logs and technical information are normally kept for a shorter period.

Your rights

Under the GDPR you have the right to: • access the data we process about you, • have inaccurate data corrected, • have data erased, • request restriction of processing, • object to processing based on legitimate interest, • receive and move data you have provided (data portability), and • withdraw consent where processing is based on consent. To exercise your rights, contact us via the contact page. We handle your request as soon as we can. During the beta period, some requests are handled manually.

Contact and complaints

If you have questions about this policy or want to exercise your rights, reach us via the contact page at https://fidova.se/en/contact. If you believe we are processing your personal data unlawfully, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), the supervisory authority in Sweden, https://imy.se.