1. Introduction
This Privacy Policy explains how Gi Pant AS processes personal data in the Gi Pant and Henter Pant apps.
Gi Pant AS is the Data Controller.
2. User Roles
We process data for the following roles:
- Donor
- Player
- Guardian
- Children (< 15)
- Team administrator
3. Categories of Data Processed
3.1 Basic Information
- Name, address, contact details, team affiliation, account info, order history.
3.2 Deposit & Receipt Data
- Deposit amount, receipt photos, timestamps.
3.3 GPS Data (Guardians Only)
- Only guardians may enable location
- OS-controlled intervals
- Used solely to match orders
- Never stored
- Deleted automatically after 7 days
3.4 Technical Data
- Device, OS version, crash logs (Crashlytics).
Crashlytics does not receive identity, GPS or child data.
3.5 Date of Birth
We collect the user’s date of birth to determine whether the user is a minor.
This allows us to enable appropriate safety features, parental supervision flows, and restricted permissions for underage users.
We do not use the date of birth for marketing or profiling purposes.
4. How Data Is Collected
- user input
- guardian's OS location (if enabled)
- Google Maps API
- Crashlytics technical logs
- Nets / PowerOffice for payments
5. Legal Bases
- Art. 6(1)(b) contract
- Art. 6(1)(a) consent (GPS, child accounts)
- Art. 6(1)(f) legitimate interests
- Art. 8 children
- Accounting Act (5 years receipts)
6. Purposes
- matching pickup orders
- team management
- receipt verification
- billing
- support
- fraud prevention
- safety and misconduct handling
7. Location Data
Who is tracked?
- Only guardians.
- Players, donors, and children are never tracked.
How GPS works
- delivered by phone OS
- real-time only
- never stored
- deleted after 7 days
Pause
- Stops GPS, orders, and notifications.
8. Misconduct & Security
Suspension or termination may occur in cases of:
- hazardous waste
- threats
- fraud
- repeated incorrect receipt entries
- misuse or manipulation
9. Data Sharing
Processors:
- PowerOffice Go
- Nets
- Hetzner Cloud
- Google Crashlytics (technical only)
- HubSpot (B2B only)
10. Retention
| Data | Duration |
|---|---|
| GPS | 7 days |
| Receipts | 5 years |
| Accounts | deleted immediately |
| Technical logs | pseudonymized |
11. User Rights
- Access, correction, deletion, restriction, portability, objection.
Contact: personvern@gipant.no
12. Third-Country Transfers
- Only anonymised Crashlytics logs are transferred.
- No identifiable data, GPS, or child data.
- Low residual risk per TIA v1.2.
13. Security
- TLS 1.3, AES-256, RBAC, pseudonymisation, audit logs.
14. Contact
- Gi Pant AS
- personvern@gipant.no
