Privacy Policy
Last updated: 11 September 2026
1. Data controller
Fresh Up AS
Organisation number: 933 816 605
Breimyra 60, 5134 Flaktveit, Norway
Email: personvern@freshup.app
Fresh Up AS is the data controller for personal data processed through the Fresh Up app and the website freshup.app.
2. What Fresh Up is
Fresh Up is a distribution platform. Customers request a service, and the system automatically sends the request to qualified providers nearby. The customer does not choose a specific provider. Providers are independent contractors, not employees of Fresh Up AS.
3. What we collect
All users
- Name
- Phone number
- Email address
- Profile photo, if you upload one
- Location (GPS coordinates)
- Device information and push notification token
- Usage data
Customers
- Payment details (processed by Stripe, see section 6)
- Request history
- Ratings you submit
- Messages in chat with providers and with support
Providers
- Which services you offer and your own competence rating per service
- Price input for your area
- Identity and bank details for payouts (processed by Stripe, see section 6)
- Job history and earnings
- Availability status and location while you are online
4. Why we process it
| Purpose | Legal basis |
|---|---|
| Creating and managing your account | Performance of a contract, GDPR Art. 6(1)(b) |
| Distributing requests to nearby providers | Performance of a contract |
| Calculating price and delivery fee based on distance | Performance of a contract |
| Processing payments and payouts | Performance of a contract, and legal obligation |
| Verifying providers | Legal obligation and legitimate interest |
| Sending status notifications | Performance of a contract |
| Support and complaint handling | Performance of a contract, legitimate interest |
| Accounting | Legal obligation, Norwegian Bookkeeping Act |
| Fraud and abuse prevention | Legitimate interest |
| Improving and securing the service | Legitimate interest |
About location
Location is necessary for Fresh Up to work. We use it to find providers within range, to calculate the delivery fee from actual driving distance, and to determine the correct area price.
Providers also share location while a job is active, so the customer can see when the provider is arriving. This sharing stops when the job is completed.
You can withdraw location permission at any time in your phone settings. The app will then be unable to send or receive requests.
5. Who sees what
When a provider accepts a request, the following is shared with the provider: the customer's name, location, chosen service and any add-ons, and the amount the provider will receive.
The customer sees the provider's name, profile photo, rating and location while the job is in progress.
Providers do not see what the customer paid in total. Customers do not see a provider's internal tier in the matching system.
We never sell personal data.
6. Processors and third parties
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication and storage | EU |
| Stripe | Payments, payouts and provider identity verification | EU/US |
| Twilio | Sending one-time codes by SMS | EU/US |
| Mapbox | Maps, geocoding and distance calculation | EU/US |
| Expo, Apple and Google | Push notifications | EU/US |
| Google and Apple | Sign-in, if you choose it | EU/US |
All processors are bound by a data processing agreement. Where data is transferred outside the EEA, this takes place under the EU Standard Contractual Clauses or another valid transfer mechanism.
Stripe is an independent controller for payment data. Fresh Up AS never stores full card numbers.
We may disclose data to public authorities where legally required.
7. Retention
- Account data is kept for as long as your account is active, and for up to three months after deletion to handle any disputes
- Requests, payments and payouts are kept for five years after the end of the financial year, as required by the Norwegian Bookkeeping Act
- Chat logs are kept for twelve months after job completion
- Location data tied to an individual job is deleted or anonymised within 90 days
- System logs are deleted on a rolling basis, at the latest after 90 days
When you delete your account, we anonymise your personal data. Request and payment history is retained in anonymised form where the law requires it.
8. Your rights
You have the right to:
- request access to the data we hold about you
- have inaccurate data corrected
- have data deleted, subject to statutory retention obligations
- request restriction of processing
- receive your data in a machine-readable format
- object to processing based on legitimate interest
- withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand
You can delete your account directly in the app, under My Profile.
Privacy enquiries go to personvern@freshup.app. We respond within 30 days.
If you believe we are processing your data unlawfully, you may complain to the Norwegian Data Protection Authority (Datatilsynet), www.datatilsynet.no.
9. Security
Your data is stored encrypted. The database uses row level security so that users can only access their own data. All communication between the app and our servers is encrypted in transit. Access to production data is limited to those who need it to operate the service.
No system is completely secure, and we cannot guarantee absolute security.
10. Children
Fresh Up is not intended for anyone under 18. We do not knowingly collect data about children.
11. Changes
We may update this policy. For material changes we will notify you in the app or by email before the change takes effect. The current version is always available at freshup.app/privacy.