Privacy policy

Last updated: 5 November 2026

In short: we collect only what is needed to run your account and the apps you use. We don't sell your data, show ads, or use tracking or analytics. Everything runs on our own server in the EU. You can ask us to see, export or delete your data at any time.

Who we are

iakobin labs (iakobin.com and its subdomains) is run by iakobin, a small independent business in the Netherlands. We are the "controller" of your personal data under the EU General Data Protection Regulation (GDPR).

Contact: info@iakobin.com

What we collect and why

Data	Why	Legal basis
Account: name, email address, password (stored only as a secure hash), language, and the date you signed up	To create your iakobin account and let you log in to the apps	Contract (providing the service you asked for)
Google sign-in (only if you choose it): your Google account ID, name and email address, as shared by Google	To log you in with Google	Contract
Security data: login times, IP address and browser type of login sessions, failed login attempts	To keep accounts safe, block abuse and spam sign-ups	Legitimate interest (security)
Emails we send: your email address and the message (verification codes, password resets)	To verify your address and help you recover your account	Contract
App data: what you enter in an app, for example trees you add in Canopy or products you look up in Trace	So the app works and can show your data again	Contract

We don't ask for more than this, and we don't use your data for advertising or profiling.

Cookies

We only use cookies that are necessary to keep you logged in and to keep the login secure. We don't use tracking, advertising or analytics cookies, so there is no cookie banner.

How the apps handle data

Trace: receipt photos are read on your own device (in your browser) and are not uploaded to us. When you look up a barcode, our server asks Open Food Facts for the product; they see our server, not you.
Canopy: the map is loaded from OpenStreetMap, which sees your IP address when your browser loads map tiles.
Some apps load code libraries from jsDelivr, which also sees your IP address.
To stop floods of entries, apps briefly keep your IP address in memory to count requests. This is not stored.

Who processes data for us

Contabo GmbH (Germany) hosts our server, in a data centre in the EU (France).
Brevo (Sendinblue SAS, France) sends our emails.
Google (only if you use "Sign in with Google") handles that login under Google's privacy policy.

We have data processing agreements with our processors where the GDPR requires it. Your data is stored in the EU. Google may process sign-in data outside the EU under its own safeguards.

How long we keep data

Account and app data: as long as you have an account. When you delete your account, we delete your data within 30 days, except where the law requires us to keep it.
Security logs: up to 90 days.
Accounts that are never verified may be deleted after 30 days.
Backups: overwritten within 30 days.

Your rights

You can ask us to see your data, correct it, delete it, export it, or limit how we use it. You can also object to processing based on our legitimate interest. Email info@iakobin.com; we answer within one month. You can change your name, email and password yourself in your account settings.

If you think we handle your data wrongly, you can complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Children

iakobin is not meant for children under 16. If you are under 16, please don't create an account.

Changes

If we change this policy, we update the date at the top. For important changes, we tell account holders by email.