Privacy Policy for Qrokodil

Last updated: 9 October 2026.

This policy explains the personal data Qrokodil uses, why it is needed and how to contact us about your data.

Who is responsible for the data?

Qrokodil is provided by Qlave AB, Swedish company registration number 556644-5861. When you use the app through your employer or another organisation, that organisation is responsible for how its user directory, contacts and telephony are used. Qlave processes this data to provide the service to the organisation. Qlave is responsible for processing information you provide directly to us, for example in a support request.

Account and sign-in

The app processes your organisation’s domain, user identity, name, email address, telephone number or extension, and permissions to sign you in and connect the correct telephony service. Sign-in uses the methods available to your organisation, such as a password, Microsoft or BankID. A saved session contains an access token, organisation and email address in the device’s protected storage.

Calls, contacts and presence

Qrokodil processes telephone numbers, contact details, call times, call status and history, and information about queues, presence and connected devices. This data is used to make and receive calls, identify callers and manage business telephony. Displayed contacts are retrieved from the organisation’s system. During a call, audio is transmitted between participants through the telephony service. Any recording or voicemail in the organisation’s telephone system is also covered by the organisation’s own rules and notices.

Microphone and notifications

The microphone is used for voice calls after you grant the app access. Device identifiers and push tokens are used to reach the correct device with incoming calls and notifications. Notifications may contain the caller’s name or number. You can change the app’s permissions and notification display in your device settings. Disabling the microphone or restricting notifications may affect calling functionality.

Operation and support

Technical information, such as IP address, connection status and error information, may be processed to operate the service, troubleshoot and protect accounts. When you contact us, the contact details and message you provide are stored in our support system. Only send information needed for us to help you.

Why may the data be processed?

For organisational use, the organisation acting as controller determines the purposes and legal basis. Qlave’s own handling of enquiries and support is based on performing a contract or our legitimate interest in answering questions, helping users and protecting the service. Data may also need to be retained to meet legal obligations. A phone permission for the microphone or notifications is a technical permission and does not replace information about the legal basis.

Who can access the data?

Authorised users and administrators in your organisation can access data according to their permissions. Providers needed for hosting, telephony, sign-in and notifications may process data for these functions. These may include telephony providers, Apple for iOS notifications, Google Firebase when its push service is used, and the sign-in provider selected by the organisation. Contact us for information about providers, processing countries and any transfer safeguards for your organisation’s service.

How long is data kept?

Your organisation’s account, call history and contacts are subject to its retention rules and service agreement. Retention depends on the purpose of the data, how long the account or request is needed, and any legal requirements. Uninstalling the app does not automatically delete data in the organisation’s system. Contact your organisation’s administrator or Qlave to end access or request deletion.

Your rights and choices

You can request information and access to your personal data, and request correction or deletion. Depending on the processing, you may also have the right to object, restrict processing or obtain data for transfer. Where processing is based on consent, you can withdraw it. Some data may need to be retained by law. For your organisation’s data, contact its administrator first; we can help you find the right contact. You can lodge a complaint with the Swedish Authority for Privacy Protection, IMY.

Contact us about privacy

Qlave AB · Swedish company registration number 556644-5861

fredrik.balstedt@qlave.se

Support and personal data requests

Read about your rights at IMY