Privacy
Publik is built to store little and track nothing. Here is the full picture.
Who we are
Publik is provided by Localghost AS. For privacy questions, contact us at hei@publik.no.
What we store
Your account: email address, name and an encrypted password (if you sign in with Google or Apple we never store a password at all). Your preferences: which sources and categories you follow, and what you have saved or highlighted in the service. Basic usage statistics: which days you were signed in, and whether that was on the web or in the app — not what you did. For invoiced organisations we additionally store invoicing details such as the organisation number and invoice address. That is all.
What we don't do
We use no third-party analytics and no ads, and we never sell or share your data for marketing purposes. Website visit counts are measured by ourselves, on our own servers, without cookies and without being able to identify individuals. The browser and the app only store what is needed to keep you signed in — no tracking cookies.
Why we store it
Everything we store serves to deliver the service you asked for — your personal feed, your notifications and the content you keep. The usage statistics help us understand whether the service is actually being used, and power your own "last logged in" in settings. If you belong to an organisation, its owner can see whether you have been inactive for more than 30 days — to manage licenses — but not which days you were signed in or what you did. The legal basis is our agreement with you and our legitimate interest in running the service (and, for invoicing details, legal bookkeeping obligations).
Notifications
If you use the app with push notifications enabled, we store a technical notification ID for your device with Apple's/Google's notification services so the notifications can reach you. You can turn notifications off at any time in your device settings.
Who helps us
We use a small number of data processors to run the service: Supabase (authentication and database), Vipps (payment for personal subscriptions), Resend (emails such as verification codes and invitations), Sentry (error reports when something crashes, so we can fix it) and Apple/Google (if you choose to sign in with them). They process data only on our behalf, for the purposes above.
Deletion and retention
We keep your data for as long as you have an account. You can delete your account and everything belonging to it yourself at any time, under Settings → Delete account. The account is permanently removed after 7 days — until then you can undo the deletion by signing back in. Invoicing records may be kept longer where bookkeeping law requires it.
Your rights
You have the right to access, correct and delete your data, and to have it exported (data portability). Contact us and we will help. You may also complain to the Norwegian Data Protection Authority (Datatilsynet) if you believe we process data unlawfully.
Changes
If we change how we process data, we will update this page. For material changes we will notify you in the service.