Personvernerklæring

Last updated: 6 May 2026

This policy explains how Auk collects, uses, and protects personal data across our two main touchpoints: the auk.com website (where you browse, shop, and sign up for our newsletter) and the Auk mobile app and Auk device (which you use to control your grow light).

The two are quite different. The website is a Shopify-based webshop and uses cookies, marketing tools, and standard order processing. The app and device collect minimal, pseudonymous usage data so we can fix bugs and improve the product. Because they collect different data for different reasons, this policy is split into two parts. Skip to the one that applies to you, or read both.

  • Part 1: Website (auk.com, auk.eco and other geographies)

  • Part 2: Auk app and Auk device

Who we are

Auk Eco AS (org. nr. 921 415 907), Torggata 33, 0183 Oslo, Norway, is the data controller for the processing described in this policy.

For all privacy questions, contact us at hello@auk.eco.

Your rights (applies to both parts)

Under GDPR you have the right to access, rectify, erase, restrict, or port your data, and to object to processing — including a right to object at any time to direct marketing and related profiling. Where processing is based on consent, you may withdraw consent at any time (this does not affect prior lawful processing).

You also have the right to lodge a complaint with your local data protection authority. In Norway this is Datatilsynet, https://www.datatilsynet.no.

Children

Our website and app are not directed at children under 13. For EU users between 13 and 16, parental or guardian consent may be required for processing based on consent, depending on national law.

Changes to this policy

We may update this policy to reflect changes in our practices or legal requirements. The "last updated" date at the top will always reflect the most recent version. For material changes affecting the app, we'll also surface the change inside the app.

 

 

Part 1: Website (auk.com)

This part covers your use of www.auk.com, including browsing, purchasing, and newsletter signup.

What data we collect

Device & usage data (via our site): IP address, time zone, browser/device info, pages viewed, referral URLs, and identifiers set by cookies or similar technologies.

Order & customer data (when you buy or try to buy): name, email, phone, billing and shipping address, items ordered, order IDs, delivery status, support history.

Payment data: processed securely by our payment providers.

Marketing data: your newsletter preferences and ad & conversion events we receive from ad platforms (e.g., page views, cart events, purchases).

Support data: content of messages you send us (e.g., email, contact forms) and any files you provide.

Why we process your data & legal bases (GDPR)

To sell and deliver products (manage orders, payments, shipping, customer service) Legal bases: Art. 6(1)(b) contract; Art. 6(1)(c) legal obligations (e.g., tax/bookkeeping).

Security and fraud prevention (IP checks, chargeback investigation, abuse prevention) Legal basis: Art. 6(1)(f) legitimate interests (we balance against your rights).

Email marketing via Omnisend (newsletters, product updates, campaigns) Legal basis: Art. 6(1)(a) consent (or "soft opt-in" for similar own products to existing customers where local law allows). You can opt out anytime.

Advertising with Google Ads and Meta (Facebook/Instagram) We use these only if you consent to marketing cookies in our banner. This may include conversion measurement and showing ads tailored to your interests. Legal basis: Art. 6(1)(a) consent. You can withdraw consent at any time (see Cookie banner/Settings). Note: For certain limited stages of data collection using Meta's tools, we and Meta may act as joint controllers; Meta is an independent controller for use on its platforms afterwards.

Analytics We do not use Google Analytics. We may run strictly necessary technical analytics to operate the site. Any non-essential analytics would rely on your consent (if introduced later).

Cookies & similar technologies (ePrivacy)

We only set non-essential cookies (e.g., marketing) after you consent via our cookie banner.

  • Strictly necessary cookies: always active (checkout, security).

  • Marketing cookies (Google Ads, Meta): only with your consent.

For details (cookie names, providers, purposes, lifetimes), see our cookie banner.

Who we share data with (recipients)

  • E-commerce/hosting: Shopify, Shop Pay, Cloudflare, Google Cloud, Stamped.io, Trustpilot, Intercom, OptiMonk.

  • Payment processors: Stripe, Vipps, Shopify Payments, Klarna.

  • Shipping/logistics: Posten, Bring, DHL, Helt Hjem and associated warehouses.

  • Email service: Omnisend.

  • Advertising partners: Google Ads, Meta, PostHog, Converge, Hotjar.

  • Authorities/Legal: Where required by law or necessary to protect our rights.

We sign data processing terms with processors as required by GDPR and instruct them to process data only on our behalf.

International transfers

Some partners are located outside the EEA/UK (e.g., the United States). Where we transfer personal data internationally, we rely on:

  • an adequacy decision (where available), or

  • the EU's Standard Contractual Clauses (SCCs) with supplementary measures, and/or

  • participation in the EU–US Data Privacy Framework (DPF) where applicable.

How long we keep data (retention)

  • Orders & customer service records: kept as long as needed for your purchase and support, and thereafter as required by accounting/tax laws (typically 5–10 years, depending on jurisdiction).

  • Email marketing data: kept until you unsubscribe or withdraw consent, or after 36 months of inactivity.

  • Cookies/marketing events: kept according to each cookie/tool's lifetime.

We delete or anonymize data when we no longer need it for the stated purposes.

 

 

Part 2: Auk app and Auk device

This part covers only the Auk mobile app (iOS and Android) and the Auk device when paired with the app. We've kept it short on purpose.

What we collect

A random app ID. When you first open the app, after accepting the privacy policy, we generate a random identifier on your device. It is not derived from your phone, your hardware, or anything about you, and it resets if you reinstall the app. We use it only to group events from the same installation so the numbers add up correctly.

App usage events. We record interactions with the app — for example, when the app is opened, when a device is paired, when you adjust the light or change a schedule, when you switch tabs, and when modes change. Each event is stored with the random app ID and the date (no exact time of day). We do this to understand which features are useful to our users and to improve the overall product experience.

Device diagnostics. If you pair an Auk device, the device reports basic operational counters and error flags — for example, button presses, connection events, software update results, uptime, and component status. These are stored with the random app ID created at pairing. We use them to confirm the device is working correctly and to fix issues.

Microphone (only when you contact support). If you choose to start a call with our support team from inside the app, your phone will ask for microphone access so the call can go through. The audio is used only for the live conversation through our support tool (Intercom) — it isn't recorded by us or stored on our servers. The microphone is never accessed at any other time.

What we don't collect. We don't collect your name, email, phone number, location, contacts, advertising ID, or any account credentials. We don't use cookies, third-party advertising trackers, or cross-app tracking.

You can manage data collection in Settings → Privacy.

Legal basis

We rely on our legitimate interest (GDPR Article 6(1)(f)) in maintaining and improving the app and device. We've designed the data we collect to be the minimum needed for that purpose. We do not sell data, share it for advertising, or use it to profile you.

How long we keep it

Raw events are kept for up to 24 months and then deleted. Aggregated statistics, which contain no identifiers, are kept indefinitely.

Who sees it

Auk staff working on the product and on customer support. App and device data is stored in Google BigQuery (Google Cloud) as our processor under a data processing agreement, in an EU region. We analyze it ourselves; we don't share it with a third-party analytics service. Support conversations (chat and calls) are handled through Intercom, also as our processor.

Deletion requests

Because the random app ID isn't linked to your identity, we usually can't find "your" data in our systems on our own. If you want your data deleted, the simplest method is to uninstall the app, which detaches the random ID from any new events. If you want us to delete events tied to a specific app ID, contact us at hello@auk.eco with that ID (you can find it under Settings → About).