1. Who controls the data
Black Pear AB operates My Doc Buddy and is responsible for account, billing, security, and service-operation data. For employee, customer, project, and journal information entered by a customer company, that company normally decides why the information is used and acts as the data controller. Black Pear AB processes that information to provide My Doc Buddy.
2. Information we process
- Account details such as name, email address, role, and company.
- Project addresses, contacts, folders, documents, photos, and journals.
- Voice recordings and transcripts when journal recording is used.
- Location information when needed for nearby projects, map features, or photo documentation and only according to iPhone permission settings.
- Device identifiers, invite links, access assignments, and sync status.
- Subscription status and Apple transaction identifiers. We do not receive your full payment-card details from Apple.
- Technical logs needed to secure, diagnose, and operate the service.
3. How information is used
We use information to authenticate users, isolate company workspaces, synchronize files and journals, apply access permissions, transcribe recordings when requested, process subscription status, provide support, prevent abuse, and improve reliability. We do not sell personal data.
4. Company access
Authorized company owners and administrators can view and manage information in their company workspace, including employee work journals, project files, recordings, transcripts, and recent locations used by operational features. Workers see only the projects and folders assigned to them under the company's access settings.
5. Service providers
My Doc Buddy uses service providers to run the product, including Google Firebase for authentication, database, and storage; Cloudflare for hosting and service endpoints; Apple for iPhone distribution and subscriptions; and ElevenLabs when journal audio is submitted for transcription. These providers process only the information needed for their function and may process data outside Sweden under their applicable safeguards.
6. Legal bases
Depending on the context, processing is necessary to perform the My Doc Buddy service contract, meet legal obligations, protect legitimate interests such as security and reliability, or follow consent and device permissions for features such as microphone and location access.
7. Retention and deletion
Information is retained while a company account is active and as needed for security, recovery, disputes, and legal obligations. Company administrators can delete operational records through My Doc Buddy where available and can request company-account deletion. Backup copies may remain for a limited period before routine deletion.
8. Security
We use authenticated access, company identifiers, role and assignment rules, encrypted transport, and managed cloud infrastructure. No system can promise absolute security, so users must also protect account credentials and linked devices.
9. Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability, or an objection to processing. Employees should first contact their company administrator for company-controlled data. You may also contact the Swedish Authority for Privacy Protection or another competent supervisory authority.
10. Contact and updates
Privacy requests can be sent to [email protected]. We may update this policy as My Doc Buddy changes. Material updates will be posted here with a revised effective date. The Terms of Use contain the related service terms.