1. Scope and controller
This Privacy Policy explains how 4PLANET processes personal data when you use 4planet.org and connected 4PLANET services that use the shared 4PLANET identity system, including 4SAPIEN at 4sapien.com.
Until a dedicated 4PLANET operating entity is established, the service is operated by SKOG COMMUNICATIONS AS, organisation number 923 003 789, Norway. For privacy requests, contact odin@4planet.org.
2. Data we may process
Account and identity data
If you create an account, we may process your email address, account identifier, authentication events and, if you choose Google sign-in, basic profile information made available by Google such as your name, email address and profile image.
4SAPIEN profile and service data
Where you choose to use 4SAPIEN features, we may process information you provide such as household settings, dietary preferences, items you avoid, preferred store, weekly budget, personal priorities, shopping lists, meal plans, shopping trips and receipt images or totals.
Technical and security data
Our infrastructure providers may process technical information necessary to deliver and protect the service, such as IP address, browser and device information, timestamps, request metadata and security logs.
Location data
Some 4PLANET features may use location to provide place-based functionality. Precise location is transient by default. We do not intend to store a person's precise location unless the functionality requires it and the user knowingly enables that use.
Local device data
Some features are local-first and may use browser storage on your device for preferences, session state or continuity. Clearing browser data may remove locally stored information.
3. Why we process data
We process personal data only where there is a defined purpose, including to:
- create, authenticate and secure your account;
- provide requested 4PLANET and 4SAPIEN functionality;
- save and synchronise information you choose to store;
- protect users, prevent abuse and maintain service reliability;
- respond to support, privacy and account requests;
- improve functionality using appropriately minimised or aggregated information; and
- meet legal obligations where applicable.
Depending on the context, the legal basis may be performance of a contract or steps you request before entering one, our legitimate interests in operating and securing the service, your consent for optional processing where required, or compliance with a legal obligation.
4. Service providers and external services
We use specialised providers to operate 4PLANET. These currently include:
- Supabase for authentication, database and private file storage;
- Cloudflare for hosting, delivery and security;
- Google if you choose Sign in with Google; and
- external product or ecological data sources where a feature requires a lookup.
For example, a product lookup may send a barcode or search term to an external product-data source. We aim not to send your account identity to a data provider unless it is required for the functionality and disclosed appropriately.
Providers may process data in countries outside Norway or the EEA. Where applicable, we rely on the provider's lawful transfer mechanisms and contractual safeguards.
6. Retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, to provide an active account or requested service, to protect the system, or to meet legal obligations. Retention can differ by data type. We avoid inventing longer retention periods merely for possible future use.
If you ask us to delete your account or personal data, we will act on the request subject to technical, security and legal requirements. Some limited records may need to be retained where law or legitimate security requirements require it.
7. Security
We use access controls, authentication, private storage, row-level access policies and secret-handling practices designed to protect personal data. No online service can guarantee absolute security, but we design the system to minimise unnecessary exposure and restrict user-owned data to the relevant authenticated user.
8. Your rights
If European or Norwegian data-protection law applies, you may have rights including access, correction, deletion, restriction, data portability, objection to certain processing and withdrawal of consent where processing is based on consent.
To exercise a right, contact odin@4planet.org. We may need to verify your identity before acting on a request. You also have the right to complain to the Norwegian Data Protection Authority (Datatilsynet) or another competent supervisory authority.
10. Children
Account-based services are not designed for children under 13 to create accounts independently. If we develop services specifically for children or schools, we will apply additional age-appropriate protections and consent requirements.
11. Changes to this policy
4PLANET is developing quickly. We may update this policy as products, providers or legal requirements change. We will publish the current version here and update the date at the top. Material changes may be communicated through the relevant service where appropriate.
12. Contact
Privacy questions, access requests or deletion requests can be sent to odin@4planet.org.
SKOG COMMUNICATIONS AS
Organisation no. 923 003 789
Norway