How we handle your data.

Short and plain: Grodan works without an account and without a login. No ads, no profiling, nothing sold on. The unit sends usage statistics to us and can be assisted remotely when you ask, and in the web demo you leave your name and email before trying it. All of that is below.

Last updated: 2026-10-29

Grodan (the unit you buy)

Grodan is a Samsung tablet locked to Grodan's games and activities. It works entirely without internet; with WiFi it also gets updates, remote support and the family portal.

This stays in the unit: game results, settings and difficulty, profiles (you choose the names) and per-profile statistics. Photos taken with the camera in the Photo Album are stored locally and sent nowhere. The camera is used only when someone presses the shutter.

This is sent, when the unit has WiFi:

Usage statistics to grodan.app (App Family AB, servers in Sweden at Websupport): per day and per app, number of plays and time spent, keyed to the unit's id. The statistics themselves contain no names, no photos and no content — but because we know who bought which unit, we can link them to you as the owner. They are therefore not anonymous and we do not describe them as such. We use them to see that Grodan is working, to provide support and to develop the product.
The family portal (optional): the unit registers a device key with grodan.app and downloads photos, music and reminders that relatives upload at grodan.app/portal. Uploaded photos are EXIF-stripped on the server. The unit only reports which portal photos were deleted in it – it never uploads media.
Device status (model, battery, software version, connectivity and similar) to the remote management service Fully Cloud, operated by Fully Factory GmbH in Germany. That is what lets us help you remotely.

Remote access. Through Fully Cloud we can view and change settings, take a screenshot, manage files in the unit, restart apps, install updates, and lock or wipe it. We do so for updates we tell you about and for troubleshooting you have asked for – not to monitor the person using Grodan. A screenshot shows what is on the screen at that moment and may therefore contain a photo or a reminder; we keep it no longer than the matter requires and never pass it on.

Disabled: remote camera images, the microphone (no app uses it and the Android permission is not granted) and location.

Other. Android security updates install automatically at night over WiFi. USB debugging is on for servicing and works only from computers already paired with the unit, with it in hand. The Web app (optional, added per person by staff) opens only sites on an approved list; those sites have their own terms and cookies, and an ad/tracker blocklist is applied. No ads, no purchases, no accounts or logins for the person using Grodan.

Roles. For usage statistics and device status we are the data controller. If an organisation has bought Grodan, the organisation is the controller for what is entered about its residents (profile names, photos, reminders) – we process that only on the organisation's instructions during support and updates, and will sign a data processing agreement on request.

The Grodan app (Google Play and App Store)

The app needs no account and works without internet. This is what it can still send to us:

Usage statistics and crash reports via Google Firebase (Analytics and Crashlytics): a random app id, the tablet model and OS version, which games are opened and for how long, and technical crash data. No name, no email, no location – the app id is not linked to you as a person. The statistics are only used to improve Grodan. You can switch them off on the Statistics page in the app (five taps in the top-left corner of the start screen).
Purchases are handled by Google Play or Apple. We learn that a purchase was made, which product and its status, through our provider RevenueCat (data processor). We never see card details or your name.
Photos you take in the Photo Album are stored only on the tablet and are not sent anywhere.

The web demo at grodan.app/demo

The demo is open to anyone and needs no account. This is what is stored:

How the demo is used: a random id in the browser's local storage (not a cookie, and nothing that identifies you) together with which games are opened and for how long. We use it to see which games people like. The legal basis is our legitimate interest in developing Grodan (Article 6(1)(f) GDPR).
Your name and email. The demo asks once who you are before you start trying it. We store it alongside the usage above and use it only to know who is trying Grodan and to be able to get in touch with you about it. We do not verify the address, do not pass it on, and do not use it for newsletters or ads. The legal basis is our legitimate interest in knowing who tries the product and being able to follow up (Article 6(1)(f) GDPR) — you can object at any time.

We keep it for as long as it is useful for contacting you, and at most 24 months after the demo was last used. You can object to the processing and have your data deleted at any time by mailing hej@grodan.app — just tell us which address you left.

Legal basis and retention

Usage statistics and device status are processed on the basis of our legitimate interest in supporting and developing Grodan (Article 6(1)(f) GDPR). You can object – contact us and we will switch the statistics off for your unit. Data connected to purchase and support is processed to perform the contract with you (Article 6(1)(b)) and kept as long as bookkeeping rules require.

Statistics are kept as long as they are useful for support and product development, at most 36 months. Family portal content stays until whoever uploaded it removes it. The data is stored in Sweden at Websupport; device status at Fully Factory GmbH within the EU.

The app: usage statistics and crash reports are processed on the same legitimate-interest basis and can be switched off in the app at any time. Purchase data is processed to perform the contract with you (Article 6(1)(b)) and kept as long as bookkeeping rules require. Firebase keeps user data for at most 14 months and crash data for 90 days. Google and RevenueCat may process data outside the EU/EEA; the transfer is protected by the EU standard contractual clauses.

Your rights

Under the GDPR you have the right to:

know what data we hold about you,
have incorrect data corrected,
have your data erased,
object to the processing – for example have the statistics for your unit switched off,
complain to the Swedish Authority for Privacy Protection (IMY) if you believe we handle your data incorrectly.

Contact hej@grodan.app and we will sort it out.

Cookies

The website grodan.app uses no cookies, no ads and no profiling. The web demo under /demo stores a random id in the browser's local storage — not a cookie — as described above.

We count visits anonymously: which page was shown, where the visitor came from (only the website's name, such as hd.se) and which country the visit came from. The country is looked up from the IP address on our own server, and the IP address is never stored. The count uses no visitor IDs, nothing that recognises you from one visit to the next, and the statistics never leave our server. Country data by DB-IP.

If you send the contact form, we store what you wrote — your name, email address, any phone number, on the trial form also the day programme and municipality, and your message — and email it to ourselves. We use it only to reply to you, never pass it on, and delete it once the matter is closed. The lawful basis is our legitimate interest in answering people who get in touch (Article 6(1)(f) GDPR).

Data controller

App Family AB (reg. no. 556885-0761)
Månstorpsvägen 23, 263 32 Höganäs, Sweden
Email: per.haglund@appfamily.se

Data processors: Websupport Sverige AB (hosting of grodan.app), Fully Factory GmbH, Germany (remote management of the units) and, for the app, Google (Firebase, Google Play) and RevenueCat (purchases). For a copy of your data, a correction or an erasure, email hej@grodan.app.