Privacy policy

Effective from October 2026

This is a translation of the Danish privacy policy. If there is any difference, the Danish text applies.

Kemipilot is a work tool for staff at recycling centres.

In short: we store what is needed to recognise chemical products and make the recognition better - the picture of what was scanned, the text read and the position. We do not sell data or use it for marketing, and the position is not passed on to any third party. You can have your information deleted at any time.

Data controller

The municipality or waste company that makes the app available is the data controller. Fintech Services ApS (company reg. no. 32561101), which operates Kemipilot under the trading name Sandbox Ventures ApS, is the data processor under a data processing agreement. Questions: kontakt@kemipilot.com.

What we process

Information	Purpose	Retention
Work email	Login with a one-time code, and so that a site can follow up on its own registrations.	As long as the access is active
Name	If the municipality or waste company has provided your name, it is shown in the app under Konto (Account) and as "scanned by" on your scans, so that a site can follow up on its own registrations.	As long as the access is active
One-time codes	Login. Stored only as a hash, never in plain text, and can be used once.	10 minutes
Device id	Random id per phone. Not phone number, IMEI or advertising id.	Until the app is uninstalled
Picture of what was scanned	Troubleshooting, quality control and training data, so that recognition gets better on real products in real light.	24 months
Text read and barcode	The basis for measuring and improving accuracy.	24 months
Position	Used in two ways. To decide which site a scan belongs to, it is truncated on the phone to about 150 × 150 metres. From app version 2.0.9 the precise position (the GPS coordinate) is also stored in the picture file itself together with the time and camera model, so that an answer can be verified afterwards. The position stays in our own systems: if pictures are passed on to storage or training at a third party, the coordinate is removed first. We store no route or movements, and location is never fetched when the app is closed.	24 months
Corrections and confirmations	When someone confirms or corrects a suggestion, it improves the catalogue for everyone.	As long as the catalogue is maintained
Operations log	Calls, response times and errors - for operations and security.	90 days
Connection and equipment	From version 2.2.3 we note what the connection was like when a measurement was made: wi-fi or mobile network, signal level on a scale from 0 to 4, an estimate of the speed, whether the connection is metered, and which operator the phone was on. We also note the phone's equipment: memory, screen, free space (Android only) and the rear camera's resolution, optics and flash. The purpose is to tell "the coverage was bad" from "our server was slow" - and to see whether certain models read labels worse than others. The identity of the mast, IMEI, phone number or SIM number is not noted, and no position accompanies it.	90 days
Use of the app	From version 2.1.8 we note what is done in the app: that it is opened, which tab is shown, that a photo is taken and whether it was sent or filtered out, that send is tapped or feedback is given, and whether camera and location permission were granted. The purpose is to see when something does not work: in August an employee could not scan for a whole day because the app filtered out his pictures - and it could not be seen anywhere. The content is never noted: not what is on the label, not what you write in a comment field.	90 days

We do not process information about the residents who deliver waste: not name, address or personal identity number. We use no tracking cookies, ad networks or biometrics. The camera is aimed at products, not at people; if a picture accidentally captures a person, we delete it on request.

The forms on kemipilot.com

If you write to us through one of the forms on the front page (the contact form or the request for an invitation to the iPhone app), we store what you write yourself: name, workplace, email, any phone number and your message. We only use it to reply to you and follow up on the enquiry. The enquiry is stored with us (not with a third party) and sent as an email to kontakt@kemipilot.com. To limit spam we store with the enquiry an irreversible code (hash) of your IP address; the IP address itself is not stored. You can at any time ask us to delete your enquiry by writing to kontakt@kemipilot.com.

Deletion

You can delete your account in the app under Konto, on the page kemipilot.com/en/delete - even if you no longer have the app - or by writing to kontakt@kemipilot.com. We confirm within 30 days.

On deletion we remove what can be tied to you: email, device id, pictures from your scans, positions and your history.

Your corrections and confirmations stay - without pointing to you. They have changed the catalogue for all other users, and a product you confirmed is an acid should keep being an acid after you have stopped using the app. The contribution is therefore kept anonymously: without email, without device id and without position, so that it is no longer personal data.

Legal basis

Under agreement and in the public interest (Art. 6(1)(b) and (e)): correct handling of hazardous waste.
Legitimate interest (Art. 6(1)(f)): operations, security and better recognition. The processing is limited to the work situation.

Data processors

Operations are hosted by Cloudflare (application, database, image storage, email).

If the app meets a product it does not know, the picture is sent for analysis to Anthropic, OpenAI and/or Google. We use their business terms, and the pictures may not be used to train their models.

Pictures and text read that are used as training data to improve recognition are kept in a private, access-restricted store at Hugging Face. The coordinate is removed from the picture file before it is placed there.

The app is published through Apple's App Store and Google Play. Apple and Google themselves process information about downloads and, if you have allowed it, use and crashes, under their own policies. They are not our data processors, and we only receive aggregate figures from them, not information about you.

All our data processors have a data processing agreement and the European Commission's standard contractual clauses, where transfers outside the EU/EEA may occur.

Your rights

Access, rectification, erasure, restriction and objection. Write to kontakt@kemipilot.com - we reply within 30 days. If you are dissatisfied, you can complain to the Danish Data Protection Agency (Datatilsynet).

Security

All traffic is encrypted (TLS), and data is encrypted at rest. Scan pictures can only be fetched with a signed address, which is issued together with the scan the picture belongs to and expires after at most a day - an address without a valid signature is rejected. Login requires a one-time code to the work email; access is stored in the phone's secure keychain, bound to the individual device. The administration module requires a separate login, and access can be closed immediately. Access to production data is limited to those who need it for operations.

Changes

If we change the policy materially, we inform the data controller customers before the change takes effect. The date at the top shows the current version.