Legal
Privacy Policy
Last updated: August 2026
This policy explains how Provio processes personal data when you use the app. The service is Norwegian and subject to the Norwegian Personal Data Act and the EU General Data Protection Regulation (GDPR). For users in the United Kingdom, the UK GDPR also applies.
1. Data controller
Alfa Edge AS (company reg. no. 928 634 671) is the data controller for your personal data.
Contact: hei@provio.tech
2. What information we collect
At registration
- Name and email address
- Phone number (optional)
- Encrypted password (we never see your password in plain text)
- Company name and company phone number
When using the service
- Photos you take of the work
- Voice recordings you make to describe the work (see section 4)
- Descriptions, report text and job-related information you enter
- Customer data you register (name, address, email and phone)
3. Data storage
Your data — jobs, customers, documentation, reports, photos, signatures and company logo — is stored on your device and synced to our cloud service (Cloudflare, EU/EEA) when you are signed in. This gives you access to your data across multiple devices. All transfers are encrypted (TLS/HTTPS).
Audio is processed temporarily (see section 4) and is never stored permanently — neither by us nor on the device after the text has been extracted.
4. AI processing of audio and text
When you use the voice note feature, the audio recording is sent via our service (Cloudflare Worker) to OpenAI to be converted into text (Whisper). The text may then be cleaned up/structured by a language model (GPT-4o / GPT-4o-mini). Only the text is retained — the audio clip itself is not stored.
Your photos are not sent to AI. All AI processing only happens when you initiate the action yourself.
OpenAI processes data as a data processor. We have confirmed that "Sharing of model feedback" is disabled on our account — submitted content is not used for model training.
5. Third parties
We share data with the following providers to deliver the service:
All providers outside the EU/EEA are subject to Standard Contractual Clauses (SCC) in accordance with GDPR Article 46.
6. Legal basis (GDPR Art. 6)
- Contract: delivery of the service, user authentication and customer support
- Legal obligation: statutory documentation requirements
- Legitimate interest: security and troubleshooting
7. Retention
8. Your rights
Under the GDPR you have the right to:
- Access – an overview of the data we hold about you
- Rectification – to correct inaccurate data
- Erasure – to request that your data be deleted. In the app you can delete all data under Account → Danger zone.
- Data portability – to receive your data in a machine-readable format
- Objection – to object to processing based on legitimate interest
We respond to requests within 30 days. Send your request to hei@provio.tech.
9. Security
We protect your data with:
- Encrypted transfer (TLS/HTTPS) for all communication
- Passwords are never stored in plain text — only as a salted hash
- Sign-in tokens are stored securely in the device keychain
In the event of a security breach that poses a risk to your rights, we will notify the Norwegian Data Protection Authority (Datatilsynet) within 72 hours (GDPR Article 33) and affected users without undue delay.
10. Right to complain
You have the right to lodge a complaint with Datatilsynet (the Norwegian Data Protection Authority, datatilsynet.no) if you believe we process your personal data in violation of applicable law. If you live in another country, you may instead complain to the supervisory authority where you live — in the United Kingdom this is the ICO (ico.org.uk).
11. Changes
Material changes will be announced by email with at least 30 days' notice. Continued use after they take effect is considered acceptance.