Privacy Policy

Maja Athena AB ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information when you use the samla.ai mobile application and website.

We are a Swedish company and comply with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

Maja Athena AB is the data controller for your personal data.

Contact Information: • Email: privacy@samla.ai • Address: Sweden • Data Protection Officer: privacy@samla.ai

Account Information • Email address • Display name • Profile photo (optional) • Country/region and language preference • City / address details you enter for your profile (optional)

Collection Data • Item photos you capture or select • Item descriptions, categories, tags, notes, and custom fields • Storage location labels (building, room, shelf, and similar text) • AI-generated item fields and classified-ad drafts you create

Usage Data • App usage statistics • Device information • IP address • Crash reports and error logs

Payment Information • Processed by Apple App Store, Google Play, or Stripe • We do not store payment card details

Service Provision • Create and manage your account • Store and sync your collection data • Provide AI-powered item identification and categorization • Generate market value estimates and classified-ad drafts

Communication • Send service-related notifications • Respond to support requests • Send marketing communications (with consent)

Improvement • Analyze app usage to improve features • Develop new functionality • Fix bugs and technical issues

Legal Compliance • Comply with legal obligations • Protect against fraud and abuse

Contract Performance • Providing the app services you requested • Managing your subscription

Legitimate Interest • Improving our services • Security and fraud prevention • Analytics and research

Consent • Marketing communications • Sharing photos and item details with third-party AI providers • Optional features

Legal Obligation • Compliance with applicable laws • Tax and accounting requirements

AI features (item identification, valuation assistance, and classified-ad generation) require sending personal data to third-party AI providers.

What we send • Photos you select for analysis • Item descriptions and related collection details • Your language preference and country • City or address locality when used for classified ads

Who receives the data • OpenRouter (request routing and AI API gateway) • OpenAI (model inference used via OpenRouter and, when configured, direct API access)

Purpose • Identify and categorize items • Extract item attributes and estimate market value • Draft classified ads from your item data

Permission • We ask for your explicit in-app permission before the first AI request and before any later request if you withdrew permission or our disclosure version changed. • You can withdraw permission anytime under Account & Security → AI Data Sharing. AI features then stop sending data until you allow sharing again.

Provider commitments • We require these providers to protect personal data with safeguards that are at least equivalent to those described in this policy, including contractual terms and international transfer safeguards where applicable. • Provider retention and model-training practices are governed by their own terms and our agreements with them. We do not sell your photos or collection data.

We may share your data with:

Service Providers • Cloud hosting and authentication (Google Firebase) • Third-party AI providers (OpenRouter and OpenAI) as described in “Third-Party AI Services” • Payment processing (Apple, Google, Stripe) • Subscription entitlement sync (RevenueCat) • Analytics services • Customer support tools

Legal Requirements • When required by law • To protect our rights or safety • In case of business transfer

We do not sell your personal data to third parties.

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States (for example Firebase, OpenRouter, and OpenAI).

We ensure adequate protection through: • Standard Contractual Clauses • Adequacy decisions by the European Commission • Other appropriate safeguards

For transfers to the US, we rely on service providers that comply with relevant data protection frameworks.

• Account data: Until account deletion • Collection data: Until you delete items or your account • AI request content: Processed to produce results; provider-side retention follows their terms and our configuration • Usage data: Up to 2 years • Support communications: Up to 3 years

After account deletion, we may retain some data for legal compliance, but it will be anonymized where possible.

Under GDPR and other privacy laws, you have the right to: • Access your personal data • Rectify inaccurate data • Erase your data ("right to be forgotten") • Restrict processing • Data portability • Object to processing • Withdraw consent (including AI data sharing)

To exercise these rights, contact us at privacy@samla.ai or use in-app controls where available (for example AI Data Sharing). We will respond within 30 days.

We implement appropriate technical and organizational measures to protect your data: • Encryption in transit and at rest • Access controls and authentication • Regular security assessments • Employee training on data protection • Incident response procedures

However, no system is 100% secure. We cannot guarantee absolute security.

Our service is not intended for children under 13. We do not knowingly collect personal data from children under 13.

If you are a parent and believe your child has provided us with personal data, please contact us immediately.

We use cookies and similar technologies for: • Essential app functionality • Analytics and performance monitoring • User preferences

You can control cookies through your device settings. Some features may not work if you disable cookies.

We may update this Privacy Policy from time to time. We will notify you of material changes through: • In-app notifications • Email notifications • App store update notes

The updated policy will be effective when posted. Material changes to third-party AI sharing may also require renewed in-app consent.

Email: privacy@samla.ai Address: Maja Athena AB, Sweden

You also have the right to lodge a complaint with your local data protection authority.