Last updated: 16. april 2026

This Privacy Policy describes how Nyby AS ("Nyby", "we", "us", or "our") collects, uses, stores, and protects your personal information when you use the Nyby mobile application and web application (the "Service").

Our processing of personal data is subject to the European General Data Protection Regulation (GDPR).

Information you provide

When you create an account with Nyby, you are required to provide correct, accurate, and complete information. We collect the following:

• Name (required)
• Phone number (required, used as your account identifier)
• Email address (required)
• Address (optional)
• Profile photo (optional, to improve the experience for other users)

You need to provide your name, phone number, and email address to use the Service. Without this information, we cannot create or maintain your account.

You may also register additional information in your profile. In some cases, the organisation that invited you may have already registered certain details on your behalf.

Content you create

We store text and images you generate when using the Service, such as requests, agreements, and messages exchanged with other users.

Location data

Nyby collects your device's location data in the following ways:

• Approximate location (network-based): Used to show you relevant tasks, requests, and services in your local area.
• Precise location (GPS-based, when granted by you): Used to help you find and respond to nearby requests and to enable organisations to coordinate local service delivery effectively.

Location data is collected only while the app is in use or, if you have enabled background location access, while the app is running in the background. You can control location permissions at any time through your device settings.

Location data is used to match you with relevant tasks, requests, and services near you. It enables the core functionality of Nyby: connecting resources with needs in local communities. Location data is not shared with third parties and is not used for advertising purposes.

Technical and device information

We collect technical information about your mobile device, such as device type, operating system, and usage patterns. We use this information to prevent misuse of the Service, to improve and develop the Service, and to provide content tailored to your usage patterns (e.g., services in your local area).

We use various technologies, including cookies and analytics tools, to recognise you as a user and to analyse usage data at both aggregate and individual levels.

How and why we use your information

We process your personal data to deliver the Service to you, based on your agreement with us and the organisation you belong to. We also process data to improve, secure, and develop the platform, based on our legitimate interest in operating and enhancing the Service.

In practice, this means:

• Providing the Service: Matching needs with offers by finding relevant users and connecting demand with supply.
• Improving the Service: Identifying errors, enhancing the user experience, and developing new features. Nyby may contact you for surveys or feedback; participation is always voluntary.
• Security: Identifying and preventing misuse of the Service, including using external identification services to verify devices.

Verification of information

Nyby may use third-party services to authenticate the information you provide and to obtain additional information relevant to delivering the Service.

Sharing of information

Other users and organisations using Nyby may see your profile picture, name, group affiliation, and approval status. Further information may be made available based on your profile settings.

We do not share personal information with third parties.

International data transfers

Your data is primarily stored and processed within the EEA. Where sub-processors located outside the EEA are involved (for example for push notifications or cloud infrastructure), appropriate safeguards are in place in accordance with GDPR requirements.

Data retention and deletion

Personal information will not be stored longer than necessary to fulfil the purpose of the Service.

You may request deletion of your personal data at any time by logging in to your account and contacting us.

If you deactivate your profile, it is quarantined for 90 days to prevent unauthorised access or illegal activity. After the quarantine period, we delete or anonymise all your personal data, except where:

• The information is necessary to provide a service you still wish to access.
• We need to investigate or prevent suspected fraud or abuse.

Securing your personal data

To protect against unauthorised access to your account, Nyby may use external services to identify the device you use when logging in. If misuse is identified, we may share device and IP address information with the identification service to limit further misuse. We will never share personally identifiable information such as your name or email address with such services.

Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete information
• Delete your personal data
• Restrict how we process your data
• Data portability: receive your data in a structured, commonly used format
• Object to certain types of processing

To exercise any of these rights, contact us using the details below. We will respond within 30 days.

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) at www.datatilsynet.no.

Disclosure to authorities

If there is a suspicion that an offence has been committed using the Service, information may be disclosed to public authorities upon lawful request.

Children's privacy

Users above the age of 13 may consent to personal data being processed in the Service. Children under the age of 13 may not use Nyby without parental consent.

Changes to this Privacy Policy

Nyby reserves the right to update this Privacy Policy at any time. The updated policy will be made available at this URL. If the changes involve a significant change to your rights, we will make the updated policy available 30 days before it takes effect.

Contact us

If you have questions about this Privacy Policy, wish to access your data, or want to request correction or deletion, contact us:

Nyby AS
Org.nr.: NO916333994
Email: hei@nyby.no
Phone: +47 22 12 07 03