Privacy policy

1. Who is responsible

Lomma AS (org. no. [org.nr.]), [adresse], is the controller for the personal data in Lomma. Questions about privacy: personvern@lomma.app.

2. What we collect

Your account: name, email address, password (stored only as a hash) and preferred language.

The household's budget: items, amounts and their history, categories, savings goals, events and the members' names and roles.

Documents you send in: receipts, invoices and emails, and what is read from them, such as shop, date, amounts and lines.

Payment: Stripe handles card details; we store only the customer and subscription ids, the plan and its status.

Technical data: sign-in sessions, and in the household's activity log a shortened IP address and the browser.

3. Why, and on what legal basis

To provide Lomma to you: the budget, the Inbox, reminders and kids mode (the contract with you, GDPR article 6(1)(b)).

To take payment and keep accounts (the contract, and our legal duty to keep accounting records, article 6(1)(c)).

To keep Lomma secure: the activity log, sign-in protection and virus scanning of files (our legitimate interest in a secure service, article 6(1)(f)).

Reminders by push or email are optional and can be turned off under Notifications.

4. Reading receipts with AI

When you send a receipt or invoice to the Inbox, the file is checked for viruses and then sent to our AI provider (Anthropic) to read the shop, date, amounts and lines. The provider processes it on our behalf under a data processing agreement and does not use it to train its models. Nothing is applied to the budget without your confirmation unless you turn on automatic applying.

5. Children

Only parents create children's profiles. We store a display name, birth year, an avatar and a PIN (as a hash) — no email address or other contact details. Children sign in on a device their parents have enabled, see only the parts of the budget their parents share, and cannot see documents or the Inbox.

6. Who processes data for us

Hosting, database and file storage in the EU/EEA. Stripe for payments. Anthropic for reading documents. Our email provider for receiving and sending email. Each processes data only on our instructions, under a data processing agreement. Statistics Norway and Eurostat provide price indices; they receive no data about you.

7. Transfers outside the EEA

Some providers may process data outside the EEA, for example in the USA. We then rely on the EU–US Data Privacy Framework or the EU's standard contractual clauses, with extra safeguards where needed.

8. How long we keep data

As long as the household exists. When the owner deletes the household, everything is erased after a 14-day grace period: the budget, documents, files and children's profiles. Backups are overwritten within their cycle.

The activity log is kept for up to 5 years for security, but values and IP addresses in it are erased when the household is deleted. Accounting records for payments are kept as the law requires (five years in Norway). Data exports are deleted after 7 days.

9. Your rights

You can see, correct and delete your data, get a copy of it (under Settings → Privacy and data), restrict or object to processing, and withdraw consent. Write to personvern@lomma.app for anything the app does not do for you; we answer within a month.

You can complain to the data protection authority, in Norway Datatilsynet (datatilsynet.no).

10. Security

Data is encrypted in transit and at rest. Each household is kept apart in the database by row-level security, private items are visible only to their owner, files are virus-scanned, and every change is written to a tamper-evident activity log.

11. Cookies and storage on your device

Lomma uses one cookie to keep you signed in, and stores your latest data on the device so the app works offline; it is removed when you sign out. There are no ads, no tracking and no third-party analytics.

12. Changes

If we change this policy in a way that matters to you, we tell you in the app or by email before it takes effect.