Privacy policy for skrivDET
Last updated: 1 October 2026
This policy explains how skrivDET processes personal data when you use the iOS or Android app, sign in, work with recordings and documents, use the website, or participate through an organisation.
In brief
- skrivDET does not use advertising SDKs or third-party marketing trackers.
- An account and a registered device are required for secure access.
- Audio and text are processed by the services selected by you or your organisation.
- Enterprise policies may control providers, retention, sharing, and available settings.
- You can delete your account in the app or use the account deletion page.
1. Who is responsible?
skrivDET is owned and provided by Kvasetech AS, organisation number 925 574 546, with its address at Thomassletta 3, 9513 Alta, Norway.
Kvasetech AS is responsible for the skrivDET account, application, website, security, service operation, and direct customer relationship. When an employer or another organisation determines why meeting content is processed, that organisation will normally be the controller for the content and Kvasetech AS will act as a processor according to the enterprise agreement.
2. Information we process
- account data such as name, email address, organisation, role, and authentication method
- registered device information, app version, operating system, and security sessions
- recordings, transcripts, supporting context, privacy findings, generated documents, and templates
- provider, model, duration, processing status, quality diagnostics, and usage metadata
- feedback and support information that you choose to submit
Recording content may contain personal or confidential information. Only record and process content for an approved purpose and follow your organisation’s instructions.
3. Why we use the information
We process data to authenticate users, enforce access and device limits, provide transcription and document generation, apply organisation policy, maintain security, troubleshoot failures, document contracted usage, provide support, and comply with legal obligations. The legal basis depends on the customer relationship and the organisation’s purpose for processing meeting content.
4. Providers and data location
Content is sent only to the speech, privacy, PII, and document providers enabled by the active configuration. These may be on-device services, customer-controlled endpoints, skrivDET-managed infrastructure, or an explicitly selected external provider. An organisation is responsible for approving its provider configuration and agreements. skrivDET does not sell personal data or use advertising identifiers.
5. Retention and security
Session tokens and user-added secrets are stored in the operating system’s secure key store. skrivDET services use encrypted transport, access control, service separation, audit logging, and restricted internal service ports. Recordings and generated content may remain on the device until deleted or until an organisation retention rule applies. Temporary server files are limited to the processing need and active policy.
6. AI-assisted results
Transcription, PII detection, privacy review, and document generation are assistance tools. They can miss information or produce incorrect results. They are not legal decisions and do not guarantee that a document is accurate. A person must review the result before approval, use, or sharing.
7. Your choices and rights
- You can delete local recordings, documents, and other app content.
- You can delete your account under Settings → Account.
- You may request access, correction, deletion, restriction, portability, or object where applicable.
- Enterprise users should also contact their organisation for requests concerning work-related content.
- You may complain to the Norwegian Data Protection Authority.
8. Contact and changes
We may update this policy when the service, providers, or legal requirements change. For privacy questions, contact Kvasetech AS through the contact section at skrivdet.no or by post at Thomassletta 3, 9513 Alta, Norway.