Privacy Policy of Devity Applications

This privacy policy explains how Devity AS collects, uses, stores and protects personal data when users access or use Devity applications, websites and related services.

This document can be printed for reference by using the print command in the settings of any browser.

Contact information

Owner and Data Controller: Devity AS

Organisation number: 929 162 226

Phone: 924 03 548

Address: Grenseveien 19, 4313 Sandnes, Norway

Policy summary

Devity applications may process Personal Data for the following purposes, depending on the application and the features used:

Types of Data collected

Among the types of Personal Data that Devity applications may collect, by themselves or through third parties, are:

Complete details on each type of Personal Data collected may be provided in dedicated sections of this privacy policy or by specific explanation texts displayed before Data collection.

Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically when using Devity applications.

Unless specified otherwise, all Data requested by Devity applications is mandatory. Failure to provide this Data may make it impossible for Devity applications to provide their services. Where Devity applications specifically state that some Data is optional, Users are free not to provide it without consequences to the availability or functioning of the Service.

Users who are uncertain about which Personal Data is mandatory are welcome to contact Devity AS.

Any use of Cookies or other tracking tools by Devity applications or by third-party services used by Devity applications serves the purpose of providing the Service requested by the User, in addition to any other purposes described in this document.

Users are responsible for any third-party Personal Data obtained, published or shared through Devity applications.

Mode and place of processing the Data

Methods of processing

Devity AS takes appropriate security measures to prevent unauthorised access, disclosure, modification or unauthorised destruction of Data.

Data processing is carried out using computers and IT-enabled tools, following organisational procedures and methods strictly related to the purposes indicated. In addition to Devity AS, in some cases Data may be accessible to persons involved with the operation of Devity applications, such as administration, sales, marketing, legal, system administration, or external parties such as technical service providers, hosting providers, IT companies and communications agencies. Such parties may be appointed as Data Processors where required by law. An updated list of these parties may be requested from Devity AS at any time.

Place

The Data is processed at Devity AS’ operating offices and in any other places where the parties involved in the processing are located.

Depending on the User's location, Data transfers may involve transferring the User's Data to a country other than their own. Users may contact Devity AS for more information about the place of processing of transferred Data.

Retention time

Unless specified otherwise in this document, Personal Data shall be processed and stored for as long as required by the purpose for which it was collected and may be retained for longer where required by applicable legal obligations or based on the User's consent.

The purposes of processing

Data concerning the User is collected to allow Devity AS to provide its Service, comply with legal obligations, respond to enforcement requests, protect its rights and interests, protect the rights and interests of Users or third parties, detect malicious or fraudulent activity, and for the purposes listed in this privacy policy.

Device permissions for Personal Data access

Depending on the User's device and the application used, Devity applications may request certain permissions that allow access to the User's device Data.

By default, these permissions must be granted by the User before the respective information can be accessed. Once permission has been granted, it can be revoked by the User at any time through device settings or by contacting Devity AS for support.

Revoking permissions may impact the proper functioning of Devity applications.

Approximate location permission

Used for accessing the User's approximate device location. Devity applications may collect, use and share User location Data in order to provide location-based services.

Contacts permission

Used for accessing contacts and profiles on the User's device, including changing entries where the application functionality requires it and where the User has granted permission.

Reminders permission

Used for accessing the Reminders app on the User's device, including reading, adding and removing entries where the User has granted permission.

Storage permission

Used for accessing shared or external storage, including reading and adding items where this is required by the application functionality and permitted by the User.

Detailed information on the processing of Personal Data

Access to third-party accounts

Devity applications may access third-party account services, such as Google Drive, only where the User has granted the required permissions. The Personal Data processed may include various types of Data as specified in the privacy policy of the relevant third-party service.

Advertising

Where advertising services are used, such as Google AdSense, these services may process Trackers and Usage Data in accordance with their own privacy policies.

Analytics

Devity applications may use analytics services to understand how applications are used and to improve stability, performance and user experience. These services may process Trackers and Usage Data.

Backup saving and management

Where backup functionality is enabled, Devity applications may save and manage backups through services such as Google Drive. The Data processed depends on the content backed up by the User and the privacy policy of the relevant service.

Commercial affiliation

Where commercial affiliation services are used, such as iTunes affiliation, these services may process Trackers and Usage Data.

Contacting the User

Users may contact Devity AS through contact forms, email, support channels, mailing lists or newsletters. Personal Data processed for this purpose may include company name, email address, first name, last name and physical address.

Interaction with external social networks and platforms

Devity applications may include social network features or widgets, such as Facebook or LinkedIn buttons. These services may process Trackers and Usage Data according to their own privacy policies.

Registration and authentication

Users may register directly in Devity applications. Personal Data processed for registration and authentication may include company name, country, email address, first name and last name.

Remarketing and behavioural targeting

Where remarketing or behavioural targeting services are used, such as Google Ads Remarketing, Facebook Remarketing, LinkedIn Website Retargeting or Remarketing with Google Analytics, these services may process Trackers and Usage Data in accordance with their own privacy policies.

Information on opting out of interest-based advertising

In addition to any opt-out feature provided by the services listed in this document, Users may follow instructions provided by YourOnlineChoices in the EU, the Network Advertising Initiative in the US, the Digital Advertising Alliance in the US, DAAC in Canada, DDAI in Japan or similar initiatives. These initiatives allow Users to select their tracking preferences for most advertising tools.

The Digital Advertising Alliance offers an application called AppChoices that helps Users control interest-based advertising on mobile apps.

Users may also opt out of certain advertising features through applicable device settings, such as device advertising settings on mobile phones or general advertising settings.

Legal basis of processing

Devity AS may process Personal Data relating to Users if one of the following applies:

Devity AS will help clarify the specific legal basis that applies to the processing, including whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

Further information about retention time

Personal Data collected for purposes related to the performance of a contract between Devity AS and the User shall be retained until the contract has been fully performed.

Personal Data collected for the purposes of Devity AS’ legitimate interests shall be retained as long as needed to fulfil such purposes. Users may request specific information regarding these legitimate interests by contacting Devity AS.

Devity AS may retain Personal Data for a longer period where the User has given consent, as long as such consent is not withdrawn. Devity AS may also be required to retain Personal Data for a longer period where necessary to fulfil a legal obligation or upon order of an authority.

Once the retention period expires, Personal Data shall be deleted. Therefore, the rights of access, erasure, rectification and data portability cannot be enforced after expiration of the retention period.

The rights of Users under the GDPR

Users may exercise certain rights regarding their Data processed by Devity AS, to the extent permitted by law. In particular, Users have the right to:

Users are also entitled to learn about the legal basis for Data transfers abroad, including transfers to international organisations, and about the security measures taken by Devity AS to safeguard their Data.

Details about the right to object to processing

Where Personal Data is processed for a public interest, in the exercise of official authority vested in Devity AS or for the legitimate interests pursued by Devity AS, Users may object to such processing by providing a ground related to their particular situation.

Where Personal Data is processed for direct marketing purposes, Users can object to that processing at any time, free of charge and without providing any justification. Where the User objects to processing for direct marketing purposes, the Personal Data will no longer be processed for such purposes.

How to exercise these rights

Any requests to exercise User rights can be directed to Devity AS through the contact details provided in this document. Such requests are free of charge and will be answered as early as possible and always within one month, providing Users with the information required by law.

Any rectification or erasure of Personal Data or restriction of processing will be communicated by Devity AS to each recipient, if any, to whom the Personal Data has been disclosed, unless this proves impossible or involves disproportionate effort. At the User's request, Devity AS will inform the User about those recipients.

Transfer of Personal Data outside the European Union

Data transfer abroad based on consent

If this is the legal basis, Personal Data of Users shall be transferred from the EU/EEA to third countries only if the User has explicitly consented to such transfer after having been informed of the possible risks due to the absence of an adequacy decision and appropriate safeguards.

In such cases, Devity AS shall inform Users appropriately and collect their explicit consent through Devity applications where required.

Additional information about Data collection and processing

Legal action

The User's Personal Data may be used for legal purposes by Devity AS in court or in the stages leading to possible legal action arising from improper use of Devity applications or related services. The User acknowledges that Devity AS may be required to reveal Personal Data upon request of public authorities.

Additional information about User's Personal Data

In addition to the information contained in this privacy policy, Devity applications may provide the User with additional and contextual information concerning particular services or the collection and processing of Personal Data upon request.

System logs and maintenance

For operation and maintenance purposes, Devity applications and third-party services may collect files that record interaction with Devity applications, such as system logs, or use other Personal Data, such as IP addresses, for this purpose.

Information not contained in this policy

More details concerning the collection or processing of Personal Data may be requested from Devity AS at any time using the contact information provided in this document.

Changes to this privacy policy

Devity AS reserves the right to make changes to this privacy policy at any time by notifying Users on this page and possibly within Devity applications and/or, where technically and legally feasible, by sending a notice to Users via contact information available to Devity AS.

Users are encouraged to check this page often, referring to the date of the latest update listed below. Should changes affect processing activities performed on the basis of the User's consent, Devity AS shall collect new consent from the User where required.

Definitions and legal references

Personal Data or Data

Any information that directly, indirectly or in connection with other information allows for the identification or identifiability of a natural person.

Usage Data

Information collected automatically through Devity applications or third-party services used by Devity applications. This may include IP addresses, domain names, URI addresses, request times, server response details, country of origin, browser and operating system details, time spent in the application and other parameters about the device operating system or IT environment.

User

The individual using Devity applications who, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data refers.

Data Processor or Processor

The natural or legal person, public authority, agency or other body which processes Personal Data on behalf of the Controller.

Data Controller or Owner

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of processing Personal Data, including security measures concerning the operation and use of Devity applications.

Application

The means by which the Personal Data of the User is collected and processed.

Service

The service provided by Devity applications as described in the relevant terms, website or application.

European Union or EU

Unless otherwise specified, references to the European Union include all current member states of the European Union and the European Economic Area.

Cookie

Cookies are Trackers consisting of small sets of data stored in the User's browser.

Tracker

Tracker means any technology, such as cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting, that enables tracking of Users by accessing or storing information on the User's device.

Legal information

This policy relates solely to Devity applications, unless stated otherwise within this document.

Latest update: May 15, 2026

This document is based on the previous F5IT application privacy policy and has been updated for Devity AS. It should be reviewed by legal counsel before publication if used as a formal legal document.