Privacy policy

What STYYR Automation and the service behind it handle, why, where it is kept, who else is involved, and what you can do about it.

Last updated: 18 September 2026

STYYR Automation is a Windows application for writing service reports, logging hours and keeping project, vessel and customer records for automation service companies. This policy explains what personal data the app and the service behind it handle, why, where it is kept, who else is involved, and what you can do about it.

Who we are

STYYR Automation is made by Jonas Lorentzen, an independent developer in Norway, who publishes it in the Microsoft Store as JLorentzen. In this policy, "STYYR", "we" and "us" mean him.

Contact for anything about privacy: support@styyr.info

Your employer's data and ours

STYYR Automation is sold to companies, and the people who use it are their employees. That gives us two roles:

  • For the company's work data we are a data processor. Reports, hours, notes, photos, projects, vessels, customers and the people in them belong to the company that uses the app. That company is the data controller: it decides what goes in and who gets an account, and we process the data only to provide the service, under a data processing agreement with the company. If you are an employee and have questions about this data, ask your employer first; we will help them answer.
  • For a small set of data we are the data controller: what we need to keep accounts secure, the feedback you send us, and the business contact and billing details of our customer companies.

What we collect and why

Your account

Data Where it comes from
First and last name, email address, role in the company, and optionally job title and phone number Your employer, when they invite you. You can change your own details later.
Password You. It is stored only as a one-way hash by our sign-in provider; nobody, including us, can read it.

We use this to sign you in, to show colleagues who wrote what, and to send you the invitation and password-reset emails. You cannot use the app without an account, and the account needs a name and an email address.

Sign-in security

For every active sign-in, our sign-in provider records the IP address and the device and browser type (user agent) it came from. Our hosting provider also keeps server logs of requests to the service, which include IP addresses, for up to 7 days.

We use this only to keep accounts secure, to stop abuse and to find faults. Legal basis: our legitimate interest in running a secure service (GDPR Art. 6(1)(f)).

The company's work data (as processor)

What the company's users enter into the app:

  • service reports, hours, work descriptions, notes and to-do lists;
  • photos and files attached to reports, projects and notes;
  • projects, vessels and teams;
  • the company's customers, with their contact details;
  • the names and signatures of customer representatives who sign reports.

Photos and files are stored exactly as you attach them, including any metadata the camera put in them, such as the location where a photo was taken. If that matters, remove it before attaching the file.

We process this data only on the company's instructions, to provide the service. The company decides the legal basis for it.

Feedback you send us

Company administrators have a feedback button in the app. When you use it, we receive:

  • what you write;
  • the screen you were on;
  • any images you choose to attach;
  • the app version and platform;
  • your user ID and company.

The app never takes a screenshot by itself. We read feedback to fix problems and improve the app. Legal basis: our legitimate interest in supporting and developing the product (GDPR Art. 6(1)(f)).

Our customer companies

For each customer company we keep the contact person's name, email address and phone number, the company's details, and invoices. We use this to run the agreement and to invoice. Legal basis: the contract (GDPR Art. 6(1)(b)) and bookkeeping law (Art. 6(1)(c)).

What we don't do

  • No analytics, tracking or advertising, in the app or anywhere else.
  • No data is sold or used for any purpose other than providing the service.
  • No data is used to train AI models.
  • No automated decisions or profiling about you.
  • The app does not use your camera, microphone, location or contacts. It reads the clipboard only when you paste.

On your computer

STYYR Automation is built to work offline, so it keeps data on the computer as well as in the service.

  • A full copy of your company's data is kept in your Windows user profile, so the app works without a connection. This includes colleagues' names, email addresses and phone numbers, customers, hours and reports. It is not separately encrypted by the app. We recommend BitLocker or equivalent full-disk encryption on work computers.

  • Your sign-in session is stored encrypted with Windows' own data protection, so only your Windows account can read it.

  • A visible data folder, by default Documents\STYYR Automation\, holds:

    • a daily backup: a full copy of the company's data as a JSON file;
    • copies of the photos and files you have added or opened.

    Backups are kept until you delete them. You can move the folder. If you move it into OneDrive, Dropbox or a similar service, that service's terms and your company's policies apply to it.

  • An application log on the computer records the app's technical events and errors. When saving a record fails, the log can include that record's identifier and part of its content. The log stays on your computer; we see it only if you send it to us.

  • Signing out ends your sign-in on all your devices and removes the local copy of the database. The data folder and the log stay. The data folder is also not removed when you uninstall the app; delete it yourself if you no longer need it.

Who else sees the data

People in your company. Everyone in your company who uses the app can see the company's data, including colleagues' names, email addresses and phone numbers. Roles decide what each person may change. People in other companies cannot see anything: every record carries the company it belongs to, and the database only gives it to that company's users.

Service providers (sub-processors) that run parts of the service for us:

Provider What they do Where the data is
Supabase (Supabase Pte. Ltd., Singapore) Database, file storage, sign-in and the sign-in emails Stockholm, Sweden (Amazon Web Services, eu-north-1)
PowerSync (Journey Mobile, Inc., USA) Synchronisation between the database and each computer EU region

Microsoft distributes the app through the Microsoft Store and installs its updates. Microsoft collects data about Store downloads, installs and updates under the Microsoft Privacy Statement, as an independent controller. We receive only aggregated download figures, and crash reports if Windows reports a crash of the app. We use those only to fix faults.

Test builds only. Test builds distributed outside the Microsoft Store download their updates from GitHub, under GitHub's privacy statement. The Microsoft Store version never contacts GitHub.

We do not disclose personal data to anyone else unless the law requires us to.

Transfers outside the EEA

The data is stored in the EU. Supabase and PowerSync are companies outside the EEA, and they and their own sub-processors may access data from outside the EEA to operate and support their services. These transfers are covered by the European Commission's Standard Contractual Clauses in our data processing agreements with them. Contact us for a copy.

How long we keep it

Data How long
The company's work data As long as the company uses the service. It is deleted from the database and file storage within 30 days after the agreement ends, and the company gets an export on request. The provider's daily backups roll off 7 days later.
Your account Until your company removes you or the company's agreement ends. Your name stays on the reports and records you wrote, since those are the company's records.
IP address and device type of a sign-in Until that sign-in ends (you sign out, or your account is removed).
Server logs Up to 7 days.
Feedback Until it has been dealt with and is no longer needed, and no later than when the company's data is deleted.
Customer company contact and billing details For the agreement, then as long as Norwegian bookkeeping law requires.
Copies on your computer Until you sign out (local database) or delete them (data folder).

Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;
  • have it corrected;
  • have it deleted;
  • restrict or object to its use;
  • receive it in a portable format.

You can correct your own name, job title and phone number on the app's Team page; your email address is your account, so your company changes it. For anything in your company's work data, including having your account removed, ask your company's administrator: the company is the controller of that data, and we act on its instructions. For data we control, or if you cannot resolve something with your employer, contact us at support@styyr.info. We answer within one month.

If you think we handle your data unlawfully, you can complain to Datatilsynet, the Norwegian Data Protection Authority (datatilsynet.no), or to the data protection authority where you live or work.

Security

  • All traffic between the app and the service is encrypted (TLS).
  • The hosting provider encrypts stored data.
  • The database keeps each company's data apart.
  • A report marked finished is locked against changes.
  • Your sign-in session on the computer is encrypted.
  • Administrative access to the database is limited to the developer. It is used to operate the service, not to read customer data.

Children

STYYR Automation is a work tool for adults. It is not directed at children, and we do not knowingly collect their data.

Changes to this policy

When the app starts handling personal data differently, we update this page and the date at the top. If the change is significant, we tell customer companies before it takes effect.