Privacy policy | Driftio

Driftio's Privacy Policy

Version 1.04

1. You decide over your personal data

Driftio App AB is the data controller for personal data processed within the Service. Driftio AB, Driftio Development AB and external technical providers may process personal data only as processors or sub-processors on behalf of Driftio App AB and only where necessary to provide, maintain, develop or operate the Service.

Where processing is based on consent, users may withdraw such consent at any time by deleting their account in the Settings. Driftio needs certain personal data in order to provide our services to you. If you choose to withdraw your consent to your data, it may mean that we cannot provide our services to you and have to suspend or delete your account.

In addition to the information you see directly in the service, Driftio saves data from the third-party providers that you order us to use on your behalf. Driftio can use your contact details and information about the general characteristic profile that the data you have entered into the Service represents for recommendations, as well as what type of services you use as a basis for invoices, notifications and important information relating to our services.

No third-party has granted access to your personal financial data unless you actively request so yourself in the service. Driftio does not sell or actively disclose any financial data to third-party providers. As a user you have to actively and explicitly request to share and disclose your selected data to any third-party.

With personal data, Driftio means the data the company collects and stores about you and how you use our services that directly or indirectly identifies you. Driftio uses this data to provide services, give you a better experience, improve services and provide personalised insights, notifications and service functionality. Driftio processes the following personal data: Contact details, personal identity number or equivalent identification data, name, identification methods and its result, address, e-mail address, telephone number, financial asset and debt data, information about the services you use in Driftio, information about invited and accepted friend relations, friend relations with which you choose to share financial data with, which financial data you actively chose to share and when you shared and revoked the sharing, number and type of shared items, as well as information from third-party providers that you request us to retrieve, provide or process.

When you contact our support, Driftio also collects and saves the information you provide to us so that Driftio can help you as a user with your case. Driftio can therefore use personal data from previous contact with you to be able to provide you as a user with better support.

Driftio protects users' privacy, therefore only the information that is needed for a proper use of our services is stored. Users can enter, edit or delete personal information without Driftio saving copies other than as required by law.

Driftio's security developers regularly review and test our service for various threats to keep the system up-to-date and secure against possible attacks.

The information below is a summary of how Driftio collects and handles your personal data in accordance with the European Data Protection Regulation (GDPR). See more information about GDPR via the following link: https://www.imy.se/en/organisations/data-protection/

2. How Driftio collects personal data

Driftio collects the information that concerns the service a user actively uses or is presumed to be using in the future. Driftio collects and processes the following data:

When you register as a new user with us
Information needed or created when you use any of our services
Validation information
Optional payment information
Information Driftio obtains from other third-party providers
Information that you actively enter into the service yourself
Information that you actively choose to share with private friends or businesses after accepted friend relation invites
When you contact us in the form of responses to notifications, chat conversations, e-mails and calls that may be recorded
Information collected via cookies in your browser
Information, images, screenshots and snapshots that you upload or import using AI-based scanner functionality
Chat messages, prompts and selected Balance data processed when you use the AI assistant
Technical metadata related to AI use, such as usage limits, timestamps, feature activity and error logs

3. Personal data

In order for us to process your data, it is required that one of the following legal grounds is met:

Fulfill requirements in the terms of use in order to be able to use our services and thereby fulfill the agreement with you
Consent from you for a specific treatment
In order for us to be able to provide our service to you

Driftio provides the Service in accordance with Swedish and European Union data protection laws. Users outside the EU/EEA are responsible for ensuring that their use of the Service complies with any local laws applicable to them. Driftio does not represent or warrant that the Service complies with all privacy, financial, consumer protection or other regulatory requirements in every jurisdiction from which the Service may be accessed.

Where personal data is processed or transferred outside the EU/EEA, Driftio implements safeguards required under applicable European data protection laws, including where required the European Commission’s Standard Contractual Clauses (SCCs) or other recognised transfer mechanisms designed to protect personal data.

You may request information regarding the processing of your personal data by contacting privacy@driftio.com. Below you will find information about what Driftio uses your data for, as well as the legal basis for the processing.

4. AI-based functionality, scanner and AI Chatbot assistant

Driftio may offer optional AI-based functionality, including AI-assisted import of financial data from images, screenshots and snapshots, and an AI assistant for general financial insights, education and analysis based on your asset and debt data.

AI-based functionality is activated solely at the user’s request and is processed on the basis of performance of the Service requested by the user and, where applicable, the user’s consent. AI service providers may process data within or outside the EU/EEA. Where such processing involves international transfers of personal data, Driftio applies the safeguards described in this Privacy Policy.

External AI service providers may, if you actively select or enable AI-based functionality, process personal data as processors or sub-processors on behalf of Driftio App AB. Only the data necessary to provide the requested AI-based feature is processed, including asset items, debt items, uploaded images, uploaded screenshots, chat messages and related technical metadata. Profile data, friend data and relationship data are however not shared with AI functionality. Data processed through AI-based functionality is furthermore not used to train AI models unless this is explicitly stated and consented to.

AI-generated outputs may be incomplete, inaccurate or based on assumptions. They are provided for informational and assistance purposes only and do not constitute financial, investment, legal, tax or other professional advice. AI-based functionality does not make binding decisions about you. You are not subject to any decision based solely on automated processing that produces legal effects or similarly significant effects through the AI functionality.

Provision of services for the fulfillment of agreements

Driftio processes personal data to identify you as a user, enter into agreements with you and to manage and deliver the services you have ordered and subscribed to. Driftio also provides personal data required to manage invoicing and payment for the services you use.

Development of our services and products upon interests and consent

Driftio processes personal data about how you use our services as a basis for improving your experience specifically and our services in general.

Insights, education and general guidance based on your data

Driftio may process your personal data, asset and debt data, service usage data and selected financial information to provide personalised dashboards, notifications, educational insights and general guidance within the Service.

Such processing may include automated analysis of your financial position, for example to identify concentration risk in savings, diversification gaps in investments, debt exposure, pensions, changes in values and missing information or other general financial patterns. AI-based functionality may also be used, if you choose to activate it, to generate explanations, summaries and general financial insights based on the data that is included in Your Balance.

These outputs are provided for informational and educational purposes only and do not constitute financial advice, investment advice, portfolio management, credit assessment or a recommendation for any specific investment, allocation, product or transaction. No AI-generated output should be interpreted as a recommendation to buy, sell, hold or allocate assets in any particular manner.

Security and prevention of abuse for the fulfillment of contracts and legal obligations

Driftio processes personal data in order to detect and prevent use that is contrary to Driftio's terms of use or otherwise may be suspected of constituting unauthorised or illegal activities that may take place, such as for example:

Abuse
Intrusion attempts
Attacks in the form of viruses, DDOS etc.
Breaking the law
Use of our services contrary to its purpose

5. How long personal data is stored

Driftio saves personal data as long as there is a purpose for the processing, and processes and saves personal data in order to comply with the requirements set by law.

6. Our services require exchange of personal data

Apart from your actual financial details that is yours to decide the access to, Driftio may need to disclose your other personal data to the following actors in order to deliver our services: invited private and business users, third parties such as partners or subcontractors and other service providers or affiliated companies where necessary to provide, maintain or improve the Service. Note, this does not include your financial data that only you yourself can control access to. Driftio strives to never share more personal data than is necessary with each party. Driftio takes appropriate protective measures to ensure that your personal data is handled in accordance with current laws regarding security and personal privacy. Driftio makes the same demands on our subcontractors.

According to the purposes below, Driftio may share certain personal data with the following example actors:

Marketing and analytics purposes

Personal data shared and why:

Analytics data via third-party cookies for our own marketing and analytics to improve our services
Cookie data for the purpose of tracking or purchases

In order to streamline communication with you, enter into agreements or deliver ordered services

Personal data shared and why:

Third party signing and identification methods to agree with and to identify users
Manual, algorithm and AI-based support and telephone service to support and help users to use our services
External AI providers and technical sub-processors, but only to the extent necessary to provide AI-based functionality that you choose to use, such as image-based data import or AI assistant responses
Driftio AB and Driftio Development AB, where necessary to provide, maintain, develop and operate the Service, acting only as processors on behalf of Driftio App AB

In order to charge for our services

Personal data shared and why:

Data required to complete a card or invoice payment and to store this data for recurring subscription or other recurring payments methods
Data required to check the authenticity of the personal data or financial data entered into the service

Authorities

Upon request, according to law and authority decisions, Driftio may be obliged to disclose certain personal data to the Police, Tax authorities or similar authority entities.

7. How Driftio processes your personal data when you are no longer a user

When you cancel your account, Driftio deletes all your personal data where there is no longer a purpose for further processing. However, data about your purchases, signed terms or other previously signed agreements is examples of information which is required to be saved and will not be deleted.

As an integral part of this document is also Driftio's Terms of service.