Privacy Policy for IN-Itapp

IN-it is operated by: In-Itapp, Lodjurstråket 1, 417 51 Gothenburg, Sweden. Email: info@in-itapp.com.

For purposes of applicable data protection laws, including the General Data Protection Regulation ("GDPR"), In-Itapp is the data controller where applicable.

IN-it is built around live and temporary experiences.

• Data minimization
• Privacy by design
• No sale of personal information
• No targeted advertising based on personal information
• No unnecessary retention of user information
• No sharing of personal information with third parties for their own advertising or marketing purposes

Our goal is to process only the minimum information technically necessary to provide the Service.

IN-it does not seek to build permanent profiles of its users or collect personal information for advertising purposes. However, certain information may need to be processed temporarily in order for the Service to function.

Live Audio and Video — When you participate in an IN-it live experience, your device may transmit live video and/or audio to other authorized participants. Unless a specific feature clearly tells you otherwise and you choose to use that feature, IN-it does not intentionally retain live audio or video after the live experience has ended.

Camera and Microphone — IN-it may request access to your device's camera and microphone when required for live experiences. These permissions are used only to provide the functionality you choose to use. You can manage these permissions through your device settings.

Location — If IN-it offers location-based functionality, access to your location will only occur with the appropriate device permission. Location information will only be used to provide the functionality requested by you and will not be sold or used for targeted advertising.

Technical Information — Certain technical information may be processed temporarily as part of normal internet communications and to establish and maintain connections between your device and the Service. This may include information such as an IP address, device or connection information, and other information technically necessary to deliver the Service. We do not use this information to create advertising profiles or track users across unrelated apps or websites.

If IN-it allows users to create accounts, we may need to process the minimum information necessary to create, authenticate, and maintain an account. Any such information will be limited to what is necessary to provide the requested account functionality.

We will not sell account information or provide it to third parties for their own advertising or marketing purposes. Users may request deletion of their account and associated personal information where applicable.

Where personal information must be processed to operate IN-it, we use it only as necessary to:

• Provide requested features and live experiences;
• Establish and maintain live connections;
• Authenticate users, if account functionality is provided;
• Protect the security and integrity of the Service;
• Comply with applicable legal obligations; and
• Respond to user requests.

We do not use personal information for targeted advertising or to create commercial advertising profiles.

IN-it is designed to avoid unnecessary permanent storage of personal information. Information that must be processed temporarily to provide a live experience is intended to be retained only for as long as technically necessary to provide that functionality.

If certain information must be retained for account functionality, security, legal compliance, or another clearly disclosed feature, it will be retained only for as long as reasonably necessary for that purpose. When information is no longer required, it will be deleted or anonymized as appropriate.

IN-it does not sell personal information. We do not provide users' personal information to third parties for their own advertising, profiling, or marketing purposes.

Information may be disclosed where required by applicable law, regulation, legal process, court order, or a valid governmental request.

If IN-it later uses service providers that process personal information on our behalf, this Privacy Policy may be updated as appropriate, and such providers will be required to process information only for authorized purposes and subject to appropriate privacy and security protections as required by applicable law.

IN-it does not use personal information for targeted advertising. IN-it does not sell or share personal information for cross-context behavioral advertising. IN-it does not intentionally track users across third-party apps or websites for advertising purposes.

Users located in the European Economic Area ("EEA"), United Kingdom, or Switzerland may have privacy rights under applicable data protection laws, including the GDPR where applicable. Depending on the circumstances, these rights may include the right to:

• Access personal information;
• Correct inaccurate personal information;
• Request deletion of personal information;
• Restrict or object to certain processing;
• Receive certain personal information in a portable format;
• Withdraw consent where processing is based on consent; and
• Lodge a complaint with the appropriate data protection authority.

Because IN-it is designed to minimize the storage of personal information, in some circumstances we may not hold information that can be retrieved or associated with a particular user. Where personal information is processed, the applicable legal basis may include the performance of a contract, compliance with a legal obligation, legitimate interests where permitted by law, or your consent, depending on the particular processing activity. You may contact us at report@in-itapp.com regarding your privacy rights.

Residents of certain U.S. states may have additional rights under applicable state privacy laws. Depending on the applicable law and whether IN-it is subject to that law, these may include rights to: know or access personal information; request deletion; correct inaccurate personal information; obtain a portable copy of certain information; opt out of certain sales, sharing, targeted advertising, or profiling; and exercise privacy rights without unlawful discrimination.

IN-it does not sell personal information and does not use personal information for targeted advertising.

California Residents — California residents may have rights under the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA"), where those laws apply. IN-it does not sell personal information. IN-it does not share personal information for cross-context behavioral advertising. Requests concerning applicable California privacy rights may be submitted to report@in-itapp.com.

IN-it is not intended for children under the minimum age required to use the Service under applicable law. We do not knowingly collect personal information from children in violation of applicable law.

If we learn that personal information from a child has been processed or retained in violation of applicable law, we will take appropriate steps to delete it. Parents or legal guardians who believe that a child has provided personal information in violation of this policy may contact us at report@in-itapp.com.

We use reasonable technical and organizational safeguards designed to protect information processed through IN-it against unauthorized access, disclosure, alteration, or destruction.

However, no method of transmission over the Internet, mobile network, or electronic storage system can be guaranteed to be completely secure. Accordingly, while we take reasonable measures to protect information, we cannot guarantee absolute security.

IN-it may be available to users in multiple countries. Where personal information is transferred internationally, we will handle such transfers in accordance with applicable data protection laws and implement appropriate safeguards where required.

You control whether IN-it can access device features such as your camera, microphone, and location through your device's privacy settings. You may revoke these permissions at any time through your device settings. Certain IN-it features may not function without the permissions necessary to provide them.

Where account functionality is available, users may also contact us to exercise applicable rights concerning their account or personal information.

This Privacy Policy may change in the future. IN-it is an evolving service, and we reserve the right to update, revise, modify, or replace this Privacy Policy from time to time to reflect changes to the Service, our technology, our information practices, our business operations, applicable laws or regulations, or for other legitimate operational purposes.

The version of the Privacy Policy made available through the Service will indicate the date on which it was last updated. Where required by applicable law, we will provide appropriate notice of material changes and obtain consent where consent is legally required before the relevant changes take effect.

Changes will become effective when stated in the updated Privacy Policy or as otherwise communicated to users, subject to applicable law. Your continued use of the Service after an updated Privacy Policy becomes effective may constitute acknowledgment of the updated policy where permitted by applicable law. Nothing in this section limits any privacy or data protection rights that cannot legally be waived or restricted.

We encourage users to review this Privacy Policy periodically so they remain informed about our current privacy practices.

If you have questions about this Privacy Policy, IN-it's privacy practices, or your privacy rights, please contact: In-Itapp, Lodjurstråket 1, 417 51 Gothenburg, Sweden.

General inquiries: info@in-itapp.com — Privacy and reporting: report@in-itapp.com