Privatlivspolitik

Senest opdateret: 10. maj 2026

Denne privatlivspolitik beskriver, hvordan Hockey Stick ApS ("vi", "os", "vores") indsamler, behandler og beskytter personoplysninger, når du bruger vores tjenester, herunder PickupBot (voice- og SMS-agenter til restauranter, klinikker og andre virksomheder) og Real Talk Lingo (sprogapp).

1. Dataansvarlig

Hockey Stick ApS
CVR: 45733270 / VAT: DK45733270
Saxogade 1, 3. sal
1662 København V
Danmark
Kontakt: jakob.bjorndahl@gmail.com
Telefon: +45 31 40 88 99

2. Hvilke data indsamler vi

2.1 PickupBot (voice- og SMS-agenter)

Når du ringer eller sender SMS til en virksomhed, der bruger PickupBot, behandler vi:

Telefonnummer (modtaget via Twilio)
Navn oplyst under samtalen
Leveringsadresse (gade, husnummer, postnummer, by, etage/dør)
Ordredetaljer (varer, mængder, beløb, betalingsmetode, leveringsmåde)
Stemmeoptagelser og transskriptioner af telefonsamtaler med voice-agenten
SMS-historik mellem dig og virksomheden
Tidspunkter for opkald og beskeder

2.2 Real Talk Lingo

Konto-information (email, navn) hvis du opretter en bruger
Sproglige data (tekst og lyd) du indtaster eller indtaler i appen
Brugsdata (lektioner gennemført, fremgang)

2.3 Dashboard og administration

Login-oplysninger for restaurant-/virksomhedsejere (email, krypteret password via Supabase Auth)
Session-cookies til at holde dig logget ind

3. Formål og retsgrundlag

Formål	Retsgrundlag (GDPR)
Modtage og behandle ordrer / bookinger	Art. 6(1)(b) — opfyldelse af aftale
Levere varer/services til oplyst adresse	Art. 6(1)(b)
Forbedre voice-agentens kvalitet via samtalehistorik	Art. 6(1)(f) — legitim interesse
Overholde regnskabs- og bogføringspligt	Art. 6(1)(c) — retlig forpligtelse
Sende driftsbeskeder (ordrebekræftelse, status)	Art. 6(1)(b)
Sprogtræning i Real Talk Lingo	Art. 6(1)(b)

4. Opbevaringsperioder

Ordredata: opbevares i op til 5 år (bogføringsloven)
Stemmeoptagelser og transskriptioner: op til 90 dage, derefter slettes lyd; transskription kan opbevares anonymiseret til kvalitetsforbedring
SMS-historik: op til 12 måneder
Konto-data: så længe kontoen er aktiv + 30 dage efter sletning

5. Databehandlere og tredjeparter

Vi anvender følgende underdatabehandlere:

Leverandør	Funktion	Lokation
Twilio Inc.	Telefoni og SMS	EU/USA (SCC)
Dograh	Voice-agent platform	USA (SCC)
Supabase Inc.	Database og authentication	EU
OpenAI	AI-sprogmodel (transskription, generering)	USA (SCC)
Anthropic	AI-sprogmodel (Claude)	USA (SCC)
Cloudflare Inc.	DNS, CDN, tunnel	Globalt
Hostinger	VPS-hosting	EU

Overførsler til USA sker på baggrund af EU-Kommissionens standardkontraktbestemmelser (SCC) og/eller EU-US Data Privacy Framework.

6. Dine rettigheder

Du har efter GDPR ret til:

Indsigt i hvilke data vi behandler om dig
Berigtigelse af forkerte oplysninger
Sletning ("retten til at blive glemt")
Begrænsning af behandling
Dataportabilitet
Indsigelse mod behandling baseret på legitim interesse
At klage til Datatilsynet

Anmodninger sendes til jakob.bjorndahl@gmail.com.

7. Sikkerhed

Vi anvender HTTPS/TLS, krypteret datalagring, adgangskontrol via Supabase Auth, og rollebaserede tilladelser. Adgang til personoplysninger er begrænset til personer med arbejdsmæssigt behov.

8. Cookies

Vores dashboard anvender kun nødvendige session-cookies til login. Vi anvender ikke tracking- eller marketing-cookies.

9. Ændringer

Vi kan opdatere denne politik. Den til enhver tid gældende version findes på denne side med opdateret dato øverst.

Privacy Policy

Last updated: 10 May 2026

This privacy policy describes how Hockey Stick ApS ("we", "us", "our") collects, processes, and protects personal data when you use our services, including PickupBot (voice and SMS agents for restaurants, clinics, and other businesses) and Real Talk Lingo (language app).

1. Data Controller

Hockey Stick ApS
Company reg. (CVR): 45733270 / VAT: DK45733270
Saxogade 1, 3rd floor
1662 Copenhagen V
Denmark
Contact: jakob.bjorndahl@gmail.com
Phone: +45 31 40 88 99

2. Data We Collect

2.1 PickupBot (voice and SMS agents)

When you call or text a business using PickupBot, we process:

Phone number (received via Twilio)
Name provided during the conversation
Delivery address (street, house number, postal code, city, floor/door)
Order details (items, quantities, amounts, payment method, delivery mode)
Voice recordings and transcripts of phone conversations with the voice agent
SMS history between you and the business
Timestamps of calls and messages

2.2 Real Talk Lingo

Account information (email, name) if you create a user
Language data (text and audio) you input or record in the app
Usage data (lessons completed, progress)

2.3 Dashboard and administration

Login credentials for restaurant/business owners (email, encrypted password via Supabase Auth)
Session cookies to keep you signed in

3. Purposes and Legal Basis

Purpose	Legal basis (GDPR)
Receive and process orders / bookings	Art. 6(1)(b) — performance of contract
Deliver goods/services to provided address	Art. 6(1)(b)
Improve voice agent quality via conversation history	Art. 6(1)(f) — legitimate interest
Comply with accounting and bookkeeping obligations	Art. 6(1)(c) — legal obligation
Send operational messages (order confirmation, status)	Art. 6(1)(b)
Language training in Real Talk Lingo	Art. 6(1)(b)

4. Retention Periods

Order data: retained up to 5 years (Danish Bookkeeping Act)
Voice recordings and transcripts: up to 90 days, after which audio is deleted; transcripts may be retained anonymized for quality improvement
SMS history: up to 12 months
Account data: while account is active + 30 days after deletion

5. Sub-processors and Third Parties

We use the following sub-processors:

Provider	Function	Location
Twilio Inc.	Telephony and SMS	EU/US (SCC)
Dograh	Voice agent platform	US (SCC)
Supabase Inc.	Database and authentication	EU
OpenAI	AI language model (transcription, generation)	US (SCC)
Anthropic	AI language model (Claude)	US (SCC)
Cloudflare Inc.	DNS, CDN, tunnel	Global
Hostinger	VPS hosting	EU

Transfers to the US are made under the EU Commission's Standard Contractual Clauses (SCC) and/or EU-US Data Privacy Framework.

6. Your Rights

Under GDPR you have the right to:

Access the data we process about you
Rectification of inaccurate data
Erasure ("right to be forgotten")
Restriction of processing
Data portability
Object to processing based on legitimate interest
Lodge a complaint with the Danish Data Protection Agency

Send requests to jakob.bjorndahl@gmail.com.

7. Security

We use HTTPS/TLS, encrypted data storage, access control via Supabase Auth, and role-based permissions. Access to personal data is limited to persons with a legitimate work need.

8. Cookies

Our dashboard uses only essential session cookies for login. We do not use tracking or marketing cookies.

9. Changes

We may update this policy. The current version is always available on this page with the updated date at the top.