How Apparat uses your information.

Who is responsible.

Apparat Ab, Teknikringen 1, KTH Campus, 114 28 Stockholm, Sweden, is responsible for the personal data submitted through Apparat's public forms and launch waitlist.

Apparat has not appointed a data protection officer. For privacy questions or requests, email info@apparat.me.

What we collect and why.

When you join the launch waitlist, Apparat collects your email address and whether you joined as a client or creator. With your consent, we use that information to tell you when the app is available and to send launch updates.

For feedback, we collect the feedback kind you select and the message you send. A reply email is optional. We use the kind and message to review feedback about Apparat's public website and product direction. If you provide a reply email, we use it only to reply about that submission.

The feedback form is separate from account and waitlist flows. Submitting feedback does not create an account or provide consent for launch or marketing updates.

For a privacy request, we collect your email address, the kind of request and any details you choose to add. We use those details to verify, review and respond to the request. The request is not sent to the operator until you confirm the link emailed to you.

When you use the website, its hosting and form systems process limited technical request information, such as IP address, requested path, timestamp and browser details, needed to deliver the service, measure aggregate traffic, diagnose failures and prevent misuse. Website access logs are deleted after 90 days.

Consent, choices and retention.

Consent provided for waitlist and launch updates may be withdrawn at any time. To withdraw it or make a privacy request, use the withdrawal link in a launch email, the form below, or email info@apparat.me.

Waitlist entries are scheduled for deletion once the latest affirmative-consent timestamp is more than 365 days old. Feedback submissions are scheduled for deletion once they are more than 365 days old. A request to delete information may be made sooner.

When a privacy request is resolved, its readable email and details are removed. A minimized record of the request type, outcome and dates is retained for up to 24 months, then deleted. Unconfirmed requests expire with their verification link.

Service providers and transfers.

Apparat uses service-provider categories for website and API hosting, data storage and email delivery. The public forms open only when the approved server-side notice version matches the version shown on this page.

Your choices and rights.

You may request access to, correction or deletion of your data, restriction of processing, data portability, or object to processing based on legitimate interests. You may withdraw previously provided waitlist consent at any time and may complain to the Swedish Authority for Privacy Protection, IMY.

The public pages store your colour-theme preference. They do not use browser storage for advertising.