SonoNordic ABController and contact
SonoNordic AB, company number 559586-5816, Åbroddsvägen 31D, 132 37 Saltsjö-Boo, Sweden, is the controller for the processing described here. Contact: info@sononordic.se. This notice covers AkutPOCUS App, not the website or AkutPOCUS Clinical.
Information in the app
AkutPOCUS is an educational and reference app for healthcare professionals and medical students. It has no separate user account, advertising or patient information forms. It does not accept patient images, measurements or examination findings. Language and acknowledgement of app information are stored locally. The last verified access status, expiry date, technical user ID and time information are stored on the device for offline access and expiry checks. Uninstalling may not remove every item on every platform.
Purchases and access
Apple App Store or Google Play handles payment. The app does not give SonoNordic your card number. RevenueCat verifies purchases and access using a technical user ID, purchase status, product and transaction details, receipt or purchase token, expiry date and technical information about the app, system and contact with the service. The ID is also shown as your support ID. Access checks start when the app opens and may contact RevenueCat for free users too. This integration does not send a record of which educational pages or media you open. Advertising identifiers and separate diagnostic collection are not enabled in the app configuration. RevenueCat provides subscription and revenue reporting. If you send us your support ID, we can link it to your enquiry, so it is not fully anonymous. Network communication also involves processing an IP address.
Access for store reviewers
When a dedicated store review code is used, the code and the app’s technical support ID are sent to our access service hosted by Cloudflare. Cloudflare also processes the connection IP address. This is used to provide reviewer access and prevent abuse, not as an alternative payment method. The service stores a cryptographic hash of the code, the support ID, expiry and revocation status. Each verified period lasts up to 24 hours. Delivery records are removed 30 days after expiry. Request limits use a keyed hash of the IP address; expired counter records are normally removed within seven minutes. The service does not log codes or request content. Cloudflare’s own operational and security records and backups are subject to the provider’s rules. Cloudflare processes data on our behalf under its data processing addendum. Processing may take place outside the EEA; the addendum describes relevant transfer mechanisms, including EU Standard Contractual Clauses. The RevenueCat retention period below continues to apply to the access history.
Email and platform reports
When you contact us, we process your sender address, message and information you provide, such as support ID and app version. Email to info@sononordic.se is received and stored by Loopia and forwarded to the company's free Gmail account. Send only necessary information, never identifiable patient information. Google processes Gmail data under its own consumer terms and privacy policy and does not act as our processor for this service. Apple and Google may also provide platform usage and error reports, depending on user settings. The app has no separate general usage analytics or crash reporting service.
Purposes and legal bases
Information is used to deliver and restore agreed access, provide necessary support and manage subscriptions on the basis of contract, GDPR Article 6(1)(b). Service security, abuse prevention, general support and overall service monitoring rely on legitimate interests, Article 6(1)(f). Our interest is to run a reliable service and handle enquiries with limited data use. You may object to this processing. Where a specific law requires retention, Article 6(1)(c) applies.
Providers and international transfers
RevenueCat processes subscription data on our behalf. Loopia processes email under its contractual framework. Apple, Google Play and free Gmail also process information under their own platform terms. Providers may process data outside the EEA, including in the USA. RevenueCat's and Loopia's processing agreements describe relevant transfer mechanisms, including standard contractual clauses. Free Gmail is covered by Google's own privacy policy and transfer mechanisms, not a processing agreement with SonoNordic. Contact us for information about safeguards and copies where applicable. Provider links are below.
Retention and deletion
The selected RevenueCat retention rule is active access plus twelve months after the last access period expires. Profiles that have never had purchased or granted access have a selected deadline of twelve months from their last recorded contact with the service; exclusively offline use is not visible. Deletion deadlines are planned during a weekly manual review in RevenueCat, with deletion when due. Ambiguous cases are investigated separately. Necessary information for a specific dispute or legal obligation may be kept longer for that limited purpose. Local values are replaced when the app saves new values. Deleting our data does not automatically delete the store's own records. Our stated support practice is to delete completed enquiries from both Loopia and Gmail. Gmail normally deletes messages from Trash after 30 days. Loopia states that email backups are normally kept for up to 21 days, with a few extra days when an entire mailbox is deleted. This is not immediate deletion of all copies.
Your rights
Contact info@sononordic.se to request access, rectification, erasure or restriction. Where the conditions are met, you also have rights to portability and to object to processing based on legitimate interests. You may include your support ID; we only request necessary identity checks. You may complain to IMY in Sweden or the authority where you live. Deleting data does not cancel a store subscription. Continued use or restoring purchases may create new access data. We update this notice when processing changes and make material changes clear before they take effect.