Privacy policy

1. Who is responsible for your data

Qubint AB, reg. no. 559598-8915, is the controller for the processing of your personal data.

Registered office: Södertälje
Email: hej@qubint.co

2. What data we collect

We collect the data you provide in our forms:

• Book 30 minutes: name, email address, company, mobile number (optional) and the time you choose, or the day and morning or afternoon you would like
• Order Qubint Connect: number of cars, company, company registration number, billing email address, the address the devices are sent to, name, email address and mobile number
• Get started with Pro: company, company registration number, roughly how many cars, name, email address, mobile number and a message (optional)
• Download a template: email address and company

If you have an account, the password is stored hashed, never in plain text. You never need to provide sensitive data. If you use Qubint as a driver, section 9 applies instead.

3. Why we process the data, and on what legal basis

We process the data to hold the meeting you booked and follow it up, to get in touch about Pro when you have asked us to, to deliver what you ordered, to send the template and get in touch once about it, and to manage your account.

When you book a meeting or register an interest in Pro, the legal basis is steps taken at your request before a meeting or a contract, and our legitimate interest in following up your enquiry. You can object at any time, and we will then delete your data.

When you download a template, the legal basis is your consent. You can withdraw your consent at any time, and we will then delete your data. Objecting or withdrawing is as simple as contacting us at the address in section 8.

When you order Qubint Connect or have an account, the legal basis is the contract, meaning the terms of service you accept yourself.

4. How long we keep the data

We keep data from bookings, expressions of interest and template downloads for no longer than 12 months after the most recent contact, unless they lead to a contract. After that it is deleted. If you object or withdraw your consent earlier, we delete the data straight away.

We keep account details for as long as the account exists. After that they are deleted in line with the terms of service, except what the Swedish Bookkeeping Act requires us to keep.

5. Who we share the data with

We never sell your data, and we do not share it with anyone for marketing.

To run the website and handle the forms, we use a small number of suppliers who process data on our behalf, known as processors:

• Hetzner Online GmbH (server operations and storage, Finland and Germany)
• Cloudflare, Inc. (network, performance, protection against malicious traffic and visitor statistics, USA)
• Proton AG (email, Switzerland)
• Google LLC (video meetings in Google Meet when you have booked 30 minutes, USA, EU-U.S. Data Privacy Framework)
• Microsoft Clarity (anonymous web analytics and session recording, USA), only if you have consented, see section 7

We have signed a data processing agreement with each of them, which ensures that the data is only processed according to our instructions.

6. If data is transferred outside the EU and EEA

If any of our suppliers processes data outside the EU and EEA, this is done with appropriate safeguards, primarily the European Commission's standard contractual clauses. Get in touch if you want to know more about how a specific transfer is protected.

7. Cookies and analytics

To make the forms on the site work securely, we use a necessary, temporary cookie (protection against forged submissions). It is never used to track you and does not require consent.

What you type in our forms is saved in your browser's storage (localStorage) for 30 days, so that it is still there if you come back. It is not sent to us until you submit the form, and it is cleared when you submit or press Clear the form.

We count visits to the website with Umami, which we run on our own server in the EU. Umami sets no cookies and stores nothing in your browser. We see which pages are visited, where visitors come from, which buttons they press and whether they use a phone or a computer. Your IP address is not stored: a visitor is recognised for one day by a random value that changes. The data is not shared with anyone and is deleted after 25 months. The legal basis is our legitimate interest in understanding how the website is used.

We also count visits with Cloudflare Web Analytics. It sets no cookies and stores nothing in your browser, and Cloudflare does not use your IP address to recognise you. We see how many people visit the pages, where they come from and how quickly the pages load. The legal basis is the same legitimate interest.

To understand how the website is used, we may, if you consent, use Microsoft Clarity, an analytics and session recording tool from Microsoft. Clarity sets cookies and records anonymised interactions such as clicks, scrolling and mouse movements, to show how visitors move around the site. The tool only loads after you press “Accept” in our cookie banner. If you press “Decline”, it does not load at all.

You can change your mind at any time by clearing the site's storage (cookies and localStorage) in your browser, and we will ask again on your next visit. Read more about Clarity at Microsoft.

8. Your rights

Under the General Data Protection Regulation (GDPR), you have the right to:

• know what data we hold about you
• have incorrect data corrected
• have your data deleted
• restrict or object to our processing
• receive your data in a machine-readable format
• withdraw consent you have given

To exercise any of these rights, contact hej@qubint.co. We reply as soon as we can and within one month at the latest.

You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), the supervisory authority in Sweden. More information is available at imy.se.

9. When you use Qubint as a driver

9.1 Who is responsible

Your employer, or the company that gave you access to Qubint, is the controller of the data about you as a driver. Qubint processes it on the employer's behalf, as a processor, under a data processing agreement. Questions about why the data is processed should primarily be put to your employer. You can always contact us as well, and we will help you.

9.2 What data is processed

• Account: name, email address, phone number, role and which company you belong to. Passwords are stored hashed, never in plain text.
• Home address, if you provide it yourself. It is used to recognise trips to and from home.
• Car and mileage log: which car you drive, odometer readings and the trips you mark as business or private, with their purpose.
• Positions and trips from the car's unit, if the car has Qubint Connect. The unit in the car sends position, speed, ignition and odometer reading while the car is in use. The positions come from the car, not from your phone.
• The map for your employer: if the company has Qubint Connect or Pro, the fleet manager can see on a map where the car is during a business trip and where it is parked after one. During and after a private trip no location is shown, only that the car is being driven or that the trip was private. If you change a trip to private, the location disappears. The map shows no history.
• Your phone's location, only if you tap Use my location, in a damage report or when you book a service. The location fills in where the damage occurred or where the workshop should be nearby, and is saved with the report or the booking. The app does not otherwise track your phone, except when you record a trip yourself.
• Record trip: if the car has no Qubint Connect, you can record a trip with your phone's location. Recording starts when you tap Start trip and stops when you tap End, after 15 minutes without moving, or after 12 hours at the latest. Meanwhile the phone sends its position, time, accuracy and speed roughly every ten metres, also when the app is in the background, and the phone shows that the location is in use. The track is used to work out the distance and the addresses of the trip. If you save the trip, the track is kept with it in the mileage log. If you choose Not a business trip, the track is deleted at once.
• Show the car: if you tap the map of where the car is parked and choose a map app, the car's position and its registration number are sent to the map app you chose (Apple Maps, Google Maps or Waze). Nothing is sent until you tap, and only to the app you choose. Which map app you chose is saved only on your phone.
• Photos, videos and files that you take or choose yourself: receipts, invoices, odometer readings, damage and videos for a service booking, which may include sound. Location data in the image is removed from receipts and odometer photos.
• Costs: amount, VAT, date and supplier from receipts and fuel cards.
• Damage report: what you fill in about the incident, the other party and any witnesses.
• Chat with Qubint's support and your replies in cases.
• Notifications: an address for your phone, a so-called push token, so that we can send notifications, for example when a booking is confirmed.
• Sign-in and security: which devices you are signed in on, a key for Face ID or fingerprint that stays on the phone, and a log of sign-ins and changes. If you sign in with Apple or Google we receive your name, your email address and an id for your account with them, nothing else.

Data about your health or other sensitive data is not processed. Do not write anything like that in the chat or in free-text fields.

9.3 Why the data is processed

So that your employer can keep a mileage log in line with the Swedish Tax Agency's requirements, handle costs and expenses, book servicing and handle damage, and so that we can give you support. The data is not used for marketing and is never sold.

9.4 Receipts can be read automatically

When you add a receipt it can be read automatically, so you don't have to type in the amount yourself. The app asks first, and only if you approve is the image sent to Anthropic, which reads it on our behalf and does not use it for anything else, including training its models. You can change your choice under Settings in the app or My account on the web. You always see what was read and can change it before you submit.

9.5 Your car policy can be read automatically

The customer's administrator or fleet manager can upload the company's car policy so that Qubint suggests the settings. The document is then sent to Anthropic, which reads it on our behalf and does not use it for anything else, including training its models. We do not keep the document, only the suggestions and short quotes from it. Please remove names and phone numbers before uploading. None of the suggestions apply until you have chosen them yourselves and published the car policy.

9.6 What is stored on the phone

So that the app works without a network connection, the most recent pages and anything you sent while offline are stored on the phone, encrypted with a key that only exists on the phone. It is deleted when you sign out. Face ID and fingerprint are handled by the phone, and we never see your face or fingerprint.

9.7 How long the data is kept

• Positions from the car's unit: at most 24 months. After that they are deleted.
• The track of a trip you recorded with your phone: as long as the trip is in the mileage log. A track that does not become a trip is deleted at once.
• Mileage log, receipts and costs: as long as the Swedish Bookkeeping Act requires your employer to keep them, usually seven years.
• If you delete your account yourself, the data about you is removed immediately, see 9.8. If your employer closes the account, the data about you is anonymised after 90 days. Anything that must be kept by law is kept without your name.
• Old sign-ins, with IP address and browser: 90 days.
• Backups: at most 90 days. Anything that has been deleted remains in them until then and is only used if the service has to be restored.

9.8 How to delete your account

In the app under Mer (More), Inställningar (Settings), Radera konto (Delete account). You confirm with Face ID, fingerprint or a code sent to your email. You can also request deletion at qubint.co/delete-account or by emailing hej@qubint.co. As your employer is responsible for the data, we may need to check with them first.

9.9 Subcontractors for the driver app

Postcodes and addresses in the app, such as the start and end of trips and the addresses you choose in the list, are taken from Lantmäteriet's address register and processed by us. Source: Belägenhetsadress Direkt, © Lantmäteriet, CC BY 4.0. Lantmäteriet is a Swedish government agency, not one of our subcontractors. We only send it a position or an address, never your name.

9.10 Your rights

The same as in section 8. As your employer is responsible for the data, we forward a request to them if it concerns their data, and help to fulfil it.

10. Changes to this policy

We may update this policy, for example when the service is expanded. The latest version is always here, with the date at the top.

11. Contact

Questions about how we process your data? Contact hej@qubint.co.