Privacy policy

In force since 2026-09-24.

Portfoliobox Stockholm AB, Rånövägen 30, 168 39 Bromma, Sweden, is responsible for your data. Contact: caremcp@portfoliobox.net.

What we hold, and why

Your account: an Apple or Google identity, your birth date, country and language, and an email when you gave one. The birth date and the country are what our rules read on every order; the language is what the professional writes in. Your orders, each with the brief your assistant sent and the document written for it, so the professional can write and you can read. Your credit, with its deposits and charges, and the receipts, because we sell you something. The assistants you have allowed, so you can revoke them.

Health data

A brief carries health information: a short health declaration and the diagnoses, medications and injuries you told your assistant about. You give explicit consent to this when you create your account, to the health data notice in force at the time, and it is read by the one professional who takes the order, under a pseudonym. Withdraw it by deleting your account.

Where, and for how long

Everything is kept in the European Union. Briefs, drafts and documents are sealed in the database with a key kept outside it. Receipts are kept seven years, as bookkeeping law requires. Everything else is erased when you delete your account.

Who else handles it

Fly.io hosts the service in Amsterdam. Mollie handles payments and sees the amount and what your card or bank provides, never the brief. Resend sends our mail: receipts and a notice that a document is in, never the brief or the document. Apple and Google give us a stable identity when you sign in. We do not sell or share your data, and we do not use it to train models.

Your rights

You can read everything we hold through your assistant or your account page, revoke an assistant's access on your account page, and ask us to delete your account. You can complain to the Swedish Authority for Privacy Protection (IMY).