GDPR

Your rights under the General Data Protection Regulation, and how to exercise them.

Last updated: 1 November 2026 · Effective: 1 November 2026

One-line summary. If you live in the EU, EEA, or UK, the GDPR gives you specific rights over the personal data we hold about you and your family. This page explains those rights in plain language and shows you exactly how to use each one. If you'd rather just talk to a person, email privacy@organicely.se.

About this page

Organicely is operated by Unbreached AB (org.nr 559411-9624), a Swedish limited company. We are the data controller for personal data we process about your household. The legal framework that governs how we handle that data is the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the Swedish Data Protection Act (Dataskyddslagen, 2018:218). For full details on what data we collect and why, see our Privacy Policy.

Your rights at a glance

1. Right of access (Article 15)

You can ask us for a copy of the personal data we hold about you and your household, plus information about how and why we process it.

How: open the app and go to Settings → Data & privacy → Export data. You can also email privacy@organicely.se. We respond within 30 days.

2. Right to rectification (Article 16)

You can correct or complete any personal data that is inaccurate or incomplete.

How: edit it directly in the app (your profile, child profiles, household name, family role). For anything you can't reach in the UI, email privacy@organicely.se.

3. Right to erasure / "right to be forgotten" (Article 17)

You can ask us to delete your personal data when it's no longer necessary for the purposes we collected it for, when you withdraw consent, or when you have a justified objection.

How: delete your account in the app (Settings → Data & privacy), which erases it straight away, or email privacy@organicely.se from your registered address and we erase your data within 30 days. Child profiles and adults you remove from your family inside the app are kept hidden for 90 days so a mistake can be undone, then erased automatically. Backups are deleted after 30 days. We retain accounting records as required by Swedish law (Bokföringslagen, 7 years).

4. Right to restriction of processing (Article 18)

You can ask us to pause processing your data in specific circumstances, for example, while a rectification request is being assessed.

How: email privacy@organicely.se describing what you want restricted and why.

5. Right to data portability (Article 20)

You can receive the personal data you have provided to us in a structured, machine-readable format, and have it transmitted to another controller where technically feasible.

How: Settings → Data & privacy → Export data delivers a JSON archive containing your household, child profiles, routines, completions, points history, and mood entries.

6. Right to object (Article 21)

You can object to processing based on our legitimate interests. We will stop unless we can show compelling legitimate grounds that override your rights, or unless processing is necessary for legal claims.

How: email privacy@organicely.se explaining what you object to. Note that we don't use your data for marketing or profiling, so this right rarely applies in practice.

7. Rights related to automated decision-making (Article 22)

You have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects on you.

How: not applicable, Organicely does not make automated decisions of this kind. Children's points, streaks, and rewards are calculated mechanically but never produce legal effects, and a parent always has manual override.

8. Right to withdraw consent (Article 7)

Where processing is based on your consent, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

How: turn off the relevant feature in the app, or email privacy@organicely.se.

9. Right to lodge a complaint (Article 77)

If you believe we have not handled your data correctly, you can complain to a supervisory authority. For Sweden, that's the Swedish Authority for Privacy Protection.

How: imy.se (Integritetsskyddsmyndigheten, IMY). You can also complain to the supervisory authority in your EU country of residence.

Children's data, extra care

Organicely is built for families and processes data about children. We apply additional safeguards beyond what GDPR strictly requires:

How long do we have to respond?

Within 30 days of receiving your request, in line with GDPR Article 12. If your request is particularly complex, we may extend this by up to two further months and tell you why.

We will not charge for handling reasonable requests. If a request is manifestly unfounded or excessive (for example, repetitive), we may charge a reasonable fee or refuse to act on it; we will explain our reasoning if so.

Identification

Before we act on a request, we may need to verify your identity to make sure the data goes to the right person. Usually this means responding from the email address registered to the Organicely account, or signing into the app and submitting the request from there.

Data we don't have

We can only act on data we hold. A few things to be aware of:

Our sub-processors and their roles are listed in the Data Processing Policy.

Contact

Unbreached AB
GDPR / privacy contact: privacy@organicely.se
General support: support@organicely.se
Sweden · org.nr 559411-9624

Supervisory authority (Sweden): Integritetsskyddsmyndigheten, imy.se

← Back to organicely.se