Privacy

How Kvatr handles personal data – in the app, on the screens in the house and on this website.

Updated 15-OCT-2026.

Who we are

Kvatr is made by Kvatr ApS (under formation), Agern Allé 5 A, 2., DK-2970 Hørsholm. Write to hi@kvatr.com about anything on this page.

Who decides about the data

A house that uses Kvatr – a science park, an office hotel, a coworking space – decides about the personal data of the people in it: it is the data controller. We process the data for the house, under a data processing agreement with it, public at app.kvatr.com/dpa. For this website, and for keeping sign-in safe, we are the controller ourselves – and for a house's sign-up until the house exists (the name and number typed and the code sent), and for the record of what a house accepted: which versions of the terms and the agreement, when, by whom and in which language, kept for five years after the house is deleted. For the community – the shared room where Kvatr's users help each other – we are the controller ourselves: it is Kvatr's own service, outside your house's agreement.

For our own invoicing of the houses we are the controller too: the house's details as a buyer and the payment's reference.

This website

kvatr.dk and kvatr.com use no cookies and no tracking, and fetch nothing from other companies. Like any web server, ours writes each visit's IP address in a log, to keep the site running and safe. The log is deleted after 30 days.

What the app keeps about you

• Your mobile number – you sign in with it – your name, your email address if you give one, and the language you choose. If you created a house: the house's name, country and time zone, and that you accepted the terms and the agreement for it.
• A profile photo, if you add one. You can hide it or delete it.
• What you do in the house: the faults you report, what you buy from the kiosk, the keys and access cards you sign for, and the contracts you sign – with your signature as you drew it, and the signed PDF – and your company's invoices.
• Every sign-in, sign-out and failed attempt, and each time the app renews your sign-in: when, which number, and the phone's system and the app's version. A sign-in code works for 10 minutes, and you stay signed in until you sign out or go 90 days without using Kvatr.
• If you send the app's log to support from the settings, its lines go into our server log.
• The messages you write in the app – in a task's thread and to others in the house – and the pictures and PDFs you send with them, and what you write in the community (see below). A task's thread stays with the task; a conversation between two people is deleted 30 days after they no longer share a house. If you report a message in a conversation in the house, the house's administration is told who wrote it and that you reported it – never the words.
• What you use that the house pays for: each message you send to the assistant and each text message sent to you – who it was for, the house, the place it concerns, when, what kind and what it cost – never the words. The house's administration and your company's admins can see it.

Your position

The app reads your phone's position only for what you ask of it: “Help here”, the nearest place, and tasks “Nearby” – the list reads it again each time you open it. A fault you report with “Help here” keeps the position, so Operations can find it; the nearby lists keep nothing. Staff who set a place's position stand at the place and press a button, and the place keeps it. The app never follows where you go.

Camera and photos

The camera reads QR codes and takes photos of faults. A photo is redrawn before it is kept, so the details hidden in the file – where it was taken, and with which phone – are gone.

A fault report without signing in

Anyone can report a fault from a QR code without signing in. If you leave your number, it is used only to send you text messages about that fault, in the language of the page you used, and nobody in the house sees it. It is cleared 30 days after the fault is fixed, or a year after you reported it if it never is.

The assistant

What you write to the assistant goes to an AI provider – Anthropic, with OpenAI in reserve – together with what it needs to answer: the house, your name and company, your own bookings, and the name, company and email address of anyone in the house it looks up for you. Never a phone number. The AI providers may process it outside the EU, in the USA. A house can choose AI in the EU at an extra price.

The community

Joining is your choice. Others in the community see your name and the house you chose to show, nothing more – never your number, your company or your role.

A question and its answers are kept for a year after the last answer, then deleted, the pictures too. If you leave, or no longer belong to any house, what you wrote stays until then without your name, as “a former member”. Write to hi@kvatr.com to have your messages deleted sooner, or to get them as a file.

Anyone can report a message. A report tells us who wrote it and who reported it; we see the message for 90 days, then the report is deleted. We can remove a message and close the community to a person who misuses it.

In the community and in conversations in the house you can hide a person; they are not told, and it changes nothing for them.

Who else handles it

• Hetzner, in Germany – the servers and the database.
• Twilio – the text messages: the number and the text.
• smtp2go – the emails, with attachments such as a signed receipt.
• Google Workspace – mail to hi@kvatr.com, and the copies the app sends there, such as your request to delete your account, with your name, houses and companies (and your number, if you belong to no house at all).
• Anthropic and OpenAI – the assistant, as above.
• Google (Firebase Cloud Messaging) – the notifications: the phone's token, a name and a kind, never a message's words; a notification waits at Google at most a day for a phone that is off.
• Apple – relays the notification to iPhones under its developer terms, without reading it; it is not our processor.
• Stripe (Stripe Payments Europe, Ltd., Ireland) – the card payments when a house tops up: the card and the payment, which never pass through Kvatr. Stripe takes the payment for Kvatr as our processor under Stripe's data processing agreement, and is a controller for its own purposes under its own terms. Stripe may process outside the EU under its standard contractual clauses. We give Stripe the house's legal name and invoice email address for its payments.

Each of them is named in the data processing agreement, public at app.kvatr.com/dpa. Twilio processes the number and the text in the USA, under the EU-U.S. Data Privacy Framework and its Binding Corporate Rules, and the EU's standard contractual clauses where neither applies; smtp2go processes the emails in the EU and the UK, which has an EU adequacy decision; Google may process mail to us and the notifications outside the EU: in the USA under the EU-U.S. Data Privacy Framework, elsewhere under its standard contractual clauses.

Cookies in the web app, data on the phone

app.kvatr.com sets a cookie that keeps you signed in, one that protects its forms, and – only if you choose a language before you sign in – one that remembers it. Its web server logs each request's IP address for 30 days, and the app keeps in memory – never stored – the numbers each address asked to sign in or sign up with, to count them over an hour; it forgets them some time after that hour, at the latest when it restarts. The phone app keeps your sign-in and a copy of what it shows on the phone; signing out removes the copy.

How long

Personal data is kept while the house uses Kvatr, unless the house deletes it sooner. When a house stops using Kvatr, its data can be exported and is deleted 30 days later. Someone who no longer belongs to any house loses their number, name, email address and photo 30 days later (later only while a document waits for their signature); what they did in the house stays in the house's records without their name, and their name and signature stay on the documents they signed and the invoices that were issued. The number a fault reporter leaves is cleared 30 days after the fault is fixed, or a year after it was reported if it never is. Mail to us is deleted by hand: a request once we have passed it on or it has been decided, a house's mail – also from people who have since left it – when the house's data is deleted, and other mail once it is answered. The sign-in log is kept for a year, the app's server logs for 30 days and its error logs for 90.

The record of what the house pays for is kept with the house's data. What a house paid and was invoiced stays in our own books for five years after the financial year, without your name.

Your rights

You can see what is kept about you, have it corrected or deleted, object to it, and get it as a file. Ask your house, or write to hi@kvatr.com and we'll help. You can complain to the data protection authority in your own country – in Denmark, Datatilsynet.

When this page changes, the date at the top changes too.