Last updated 28 September 2026
Privacy
Freetime is a planning tool for a household's money. It runs on servers in the EU, and Freetime is responsible for the data in it. Freetime follows the GDPR carefully.
What it holds, and where it comes from
| What | From | Why |
|---|---|---|
| Bank accounts: names, numbers (IBAN), balances, and transactions (date, amount, text, the other party) | Your bank, through Enable Banking, for the accounts you approve with BankID | To compare what you spend and owe with the plan, on real numbers |
| The plan: income, loans, homes, savings, budgets | What you type on Setup | To work out the plan and its forecast |
| The log: what was spent and on what, receipts' shops, items and prices | The bank, and what you log or photograph | To show where the money goes |
| People: your name, the names of those you give access, age groups of the household's members | You | Logins, and the reference budget (SIFO) for your household's size |
| Logins: which devices are logged in (a few words, like "iPhone · Safari") and when; two-step login | Logging in | Security, and the list of devices on Account |
| Phone notifications: the address your phone gave for them | Turning notifications on | To send the nudges you chose |
| Your shopping town | Setup | To find this week's offers near you |
Receipt photos are read and then thrown away: only what was read from them is kept.
Who else sees any of it
- Scaleway, in France runs the servers Freetime runs on, and holds the data for it under a data processing agreement. It stays in the EU.
- Scaleway, in France runs the language model that reads receipts: a receipt's photo is sent there to be read, and is not kept or used to train the model.
- Enable Banking (Finland), the licensed provider that relays the data from your bank. Their own privacy terms apply to that.
- Your phone's notification service (Apple, Google or Mozilla) carries the nudges, encrypted so that only your phone can read them: the service sees only that a message went to your phone.
- Tjek (Denmark), the offers service behind mattilbud.no, gets your shopping town as a point and a distance, to find the week's offers near you. Nothing else about you.
- Search engines and Brønnøysundregistrene: to learn what a shop is, or what a product costs, the assistant looks up only the name of the shop or the product, through a search service Freetime runs. Never amounts, dates, accounts or people, and payments to a person are never looked up.
- Statistics Norway (SSB) gives the price index and interest rates. Nothing about you is sent.
The language model reads receipts and suggests where a payment belongs. It never decides anything: every suggestion is yours to accept. The plan is arithmetic done by the app, not a model's guess. Nothing is sold or shared for advertising, and the pages load nothing from other sites: no trackers, no outside fonts.
How it is kept safe
- Each household's data is stored encrypted with a key of its own, on servers in the EU, and every connection to the app is encrypted (HTTPS). When a household is deleted, so is its key: its data and its backups can't be read again.
- Logging in from another device takes a password and a code from an authenticator app (two-step login). Passwords, recovery codes and logins are kept only as hashes.
- Bank access is read-only: the app can't make payments or change anything at your bank.
- A backup is made every night, encrypted with a key kept apart from the servers, and deleted after 3 days.
- The web server logs only requests that failed, without the address they came from.
How long it is kept
| What | For how long |
|---|---|
| Bank data | Until you disconnect the bank on the Bank page: that deletes its accounts and transactions here and ends the approval at Enable Banking. An approval ends by itself after at most 180 days. Payments already filed in the log stay there as your log, until you delete them or the household. |
| The plan and the log | Until you change or delete them, or delete the household |
| A login on a device | 30 days, or until you log it out on Account |
| Backups | 3 days |
| Early-access sign-ups | Until we write to you, and one year at the most |
Your rights
- See and take your data: Account → Download all my data gives everything the app holds about the household in one file (passwords and keys left out).
- Correct it: everything can be changed where it's shown.
- Delete it: an entry where it's shown, a bank on the Bank page, or everything with Account → Delete this household. A payment that came from the bank is hidden instead of deleted, so that the next sync doesn't bring it back; it goes when the household is deleted.
- Withdraw consent: disconnect a bank here, or end the approval at your bank or at Enable Banking.
- Object, or ask for less to be done with it: write to the contact below.
- Complain: to Datatilsynet, the Norwegian Data Protection Authority.
Early access
If you sign up for early access on the front page, we keep your email, and your name if you give it, only to write once when there's room for your household. You agree to that by signing up, and can take it back at any time with the link you get after signing up. We delete the address once we've written, and after a year at the latest. It is never passed on.
Cookies
- A login cookie, when you log in from another device, to keep you logged in (30 days).
- During login, a cookie that remembers the password was right while you enter the code (5 minutes), and, if you tick it, one that skips the code on that device (30 days).
- If you pick a language, a cookie that remembers it (1 year).
All are needed for what you asked for, so none needs a consent banner. None is for tracking or advertising.
Contact
Freetime is responsible for the data.
Write to personvern@freetime.no.