Privacy Policy

About your account: name, email address, phone number, personal identity number, language choice and a record of which terms you have accepted. If you have a professional role, we also process your title, veterinary number and DHP number. If you upload a profile picture, it is stored.

For invoicing: billing address, invoice email, company name, corporate ID and VAT number. If you invoice through Equikura, the payment details you have entered yourself - such as bankgiro, plusgiro, IBAN or Swish - are also stored.

If you sign in with BankID, your personal identity number is stored in encrypted form (as a hash value), not in clear text.

About your horses: information about the horse together with journal entries, images, measurements and other care data. By law, journal entries include the identity of the animal keeper and of the person who performed the measure.

Technical information: timestamps of actions, and your IP address when you sign agreements in the Service.

We use no tracking tools. Equikura contains no web analytics, no advertising tools and no third-party cookies. We only store your login and language choice locally in your browser or app, which is required for the Service to work.

To provide the Service and perform our agreement with you: the account, horse data, record-keeping and communication.

To comply with legal obligations: record-keeping under the Swedish Board of Agriculture's regulations, reporting of antimicrobial use to the Swedish Board of Agriculture, and bookkeeping under the Swedish Bookkeeping Act.

For our legitimate interests: support, troubleshooting, security and protection against misuse.

To inform you as a user: based on our legitimate interest we send e-mails about news and changes in Equikura and research-based knowledge on equine health to the address linked to your account (Swedish marketing law permits such e-mails to existing customers about our own similar services). You can object at any time by replying to a mailing or e-mailing info@equikura.se – the mailings then stop. Messages required for the Service, such as operational information, changes to the terms and invoices, are sent regardless. Your e-mail address is never passed to others for marketing.

Equikura uses AI to read photos - for example horse passports and vaccination certificates - and to interpret journal text. For this purpose the material is sent to Anthropic PBC, which processes it on our behalf and under contract. The material may contain your name and contact details if they appear in the documents you photograph.

The data included in the individual request is processed in the United States. The transfer is based on standard contractual clauses under Article 46(2)(c) of the GDPR. Anthropic retains the data for 30 days and then deletes it. It is not used to train models.

The AI always provides suggestions that a human reviews and confirms before anything is saved. No automated decisions are made about you.

Data is otherwise disclosed to clinics and stables you have connected your horse to, and to the Swedish Board of Agriculture when antimicrobial use is reported.

Hosting and storage take place at Oderland Webbhotell AB in Sweden. The chat feature on our websites is operated by Vercel Inc. and Supabase, both with processing in Stockholm; that feature processes no journal or customer data.

When registering, you may voluntarily consent to anonymised hoof images from your horse being used to improve our analysis tools. The consent is voluntary, does not affect your use of the Service and can be withdrawn at any time under Profile.

Journal entries and underlying documents are retained for at least five years in accordance with Chapter 3 of the Swedish Board of Agriculture's regulations and general guidelines (SJVFS 2023:19) on animal healthcare personnel.

Records supporting the reporting of antimicrobial use to the Swedish Board of Agriculture are retained as part of the journal documentation under the preceding paragraph.

Accounting records are retained in accordance with the Swedish Bookkeeping Act (1999:1078). Account data is kept for as long as you have an active account.

When data is to be erased, it is removed from the production environment within 30 days and from backups as the backup rotation proceeds, at the latest within 90 days.

When you close your account, your account data is removed: name, email address, personal identity number, phone number and billing and payment details. Your login stops working.

Journal entries and the care documentation established by a clinic or a stable are, however, not deleted. Such documentation must be retained by law, and the business must be able to see who the data concerns. Your name and personal identity number therefore remain in the business's customer register even after you have closed the account.

This is not something we can opt out of, as it follows from the record-keeping legislation.

You have the right to know what data we process about you and to receive a copy of it. You have the right to have incorrect data corrected, in certain cases to have data erased or the processing restricted, to object to processing based on legitimate interest, and to receive the data you have provided in a machine-readable format.

The right to erasure does not apply to data we are required to keep by law - see sections 5 and 6.

Contact us at info@equikura.se. We respond within one month.

If you are dissatisfied with how we process your data, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten), imy.se.

All traffic between your device and our servers is encrypted. Passwords are never stored in clear text, only as cryptographic hash values. Access to data is governed by your role and the business you are connected to. When a system administrator at our company needs to access data across business boundaries, this is logged.

We may update this policy. In the case of material changes, we will inform you before they take effect.