Privacy policy

Data controller

Mursten is a housing app and a website (mursten.app) where users can find homes, save searches, communicate with landlords and create home listings.

The data controller responsible for processing your personal data is Kara Technologies, company reg. no. (CVR) 45298523. Mursten is a service from Kara Technologies.

Contact regarding privacy and personal data: support@mursten.app

Data we process

Account information: name, email, chosen login method, an internal account ID, phone number, date of birth, postal code, profile picture and, where relevant, company name/CVR/logo.

Housing data: listings, addresses, images, floor plans, descriptions, prices, available viewing times and listing drafts.

Communication: messages, attachments, images, videos, audio, calendar invitations, reports and blocked users.

Usage data: saved homes, saved searches, filters, read status, notification settings, a device ID for delivering notifications and local app settings.

Location: only when you give permission, in order to show nearby homes and help place addresses on the map.

Legal basis for processing

Performance of a contract (GDPR Art. 6(1)(b)): to create and operate your account, show homes, and provide chat, saved searches, viewings and listings.

Consent (Art. 6(1)(a)): location, notifications and access to camera, microphone and photos. You can withdraw consent at any time in iOS Settings or in your browser settings.

Legitimate interest (Art. 6(1)(f)): security, prevention of misuse and fraud, and handling of reports and blocks.

Data processors and transfer to the USA

We use recognised, professional service providers to run the service securely — including accounts and login, data storage, file storage, notifications and abuse protection. They process information only on our behalf and on our instructions.

Sign in with Google and Sign in with Apple are only used if you choose them.

System services such as Photos, Camera, Microphone, Location, Calendar and Notifications are only used when the feature requires it, and iOS shows the relevant permissions.

Transfer to the USA: some of our service providers may process and store information on servers in the USA. The transfer takes place on the basis of the European Commission's Standard Contractual Clauses (SCC) and the EU-US Data Privacy Framework. You can obtain details of our specific data processors and the basis for transfer by contacting us.

Sharing and visibility

Profile name, company information and listing content may be shown to other users where necessary for the app to function.

Chat messages and attachments are shared with the participants in the conversation.

We do not sell personal data and do not use data for tracking across apps or websites.

Retention and deletion

We keep your information for as long as you have an account. If you delete your account (in the app under Profile > Account > Delete account, or on mursten.app under My profile > Delete your account), your account, listings, saved searches, conversations and files are deleted wherever technically possible.

Backups and log files are deleted automatically after a short, rolling period.

Local caches on the device are removed when you log out or delete the app. On the website, local data stays in the browser until you clear site data.

The website mursten.app

The website uses the same account and the same data as the app, and the rest of this policy applies here too. In addition, the following applies to the website:

No tracking: we use no cookies or other technologies for analytics, advertising or tracking.

Local storage in the browser: your browser stores your login session (Firebase Authentication), your choice of theme and language, which messages you have read, and drafts you have not sent yet, in local storage, session storage and IndexedDB. This is needed for the site to work. You can remove it by clearing site data for mursten.app in your browser. See also the cookie policy.

Google reCAPTCHA: when you sign in with an SMS code, we use Google reCAPTCHA to prevent abuse. reCAPTCHA sets cookies and sends information about your browser and device to Google, which processes it under Google's privacy policy. It is only used for SMS sign-in.

Maps: maps are shown with Apple MapKit JS. Your browser loads the map directly from Apple, which therefore receives your IP address and the map area you are viewing.

Address lookup: when you create a listing, the address is looked up in the Danish Addresses Web API (DAWA) from the public Dataforsyningen service. What you type in the address field is sent there.

Hosting: the website, login and database are run on Firebase (Google).

Your rights

You have the right to access, rectification, erasure, restriction, data portability and to object to processing based on legitimate interest.

You can correct information in the app or on the website, or contact support@mursten.app. We generally reply within one month.

If you believe we process your information in breach of the law, you can complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, www.datatilsynet.dk.