AmidaAmida

Privacy Policy

Last updated: February 23, 2026

1. Data Controller

Babalisk AB is responsible for the processing of your personal data in connection with the service Amida (amida.babalisk.com). Contact us with any questions:

Email: support@babalisk.com

2. Data We Collect

  • Account information — email address and password (encrypted) upon registration.
  • Company information — company name, registration number, address, and bank details that you enter in settings.
  • Gigs and invoices — dates, fees, client names, and invoice data that you create in the service.
  • Receipts and attachments — images you upload for receipt scanning or as attachments to gigs.
  • Payment information — handled by Stripe (web) or Apple In-App Purchase (iOS app). We do not store card numbers.
  • Technical data — IP address, browser type, and device information for security and performance.

3. Why We Process Your Data

  • Deliver and improve the service (contractual basis).
  • Manage your account and subscription.
  • Send invoices and reminders via email at your request.
  • AI processing of receipts to extract amounts and suppliers.
  • Prevent abuse and maintain security (legitimate interest).

4. Third Parties

We share data with the following services, all with adequate safeguards:

  • Supabase (EU) — database and authentication.
  • Stripe (USA, EU SCC) — payment processing (web).
  • Apple (USA, EU SCC) — in-app purchase processing (iOS app).
  • Resend (USA, EU SCC) — email delivery of invoices.
  • Anthropic (USA, EU SCC) — AI analysis of receipts. Image data is not used for model training.
  • Vercel (USA, EU SCC) — hosting and CDN.

5. Storage and Deletion

Your data is stored as long as you have an active account. If you delete your account, we will remove all personal data within 30 days, except for data we are required to retain under accounting regulations (7 years for invoice data).

6. Your Rights (GDPR)

You have the right to:

  • Access your personal data.
  • Rectify inaccurate data.
  • Erase your data ("right to be forgotten").
  • Export your data in a machine-readable format.
  • Object to processing based on legitimate interest.
  • Lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

Contact support@babalisk.com to exercise your rights.

7. Cookies

Amida only uses essential cookies for authentication (Supabase session cookies) and language preferences. We do not use tracking cookies or third-party cookies for advertising. Vercel Analytics collects anonymized performance data without cookies.

8. Changes

We may update this policy. Material changes will be communicated via email or within the service. Continued use after changes constitutes acceptance of the updated policy.