X‑Cruise privacy policy

Last changed on 5 November 2026. This is a translation; the Swedish policy is the original.

This policy explains which personal data the X-Cruise app and the app.xcruise.se website process, why, who receives it, how long we keep it and what your rights are.

In short

• We process what the app needs to work: your account, your tickets, the chat and notifications.
• We never sell your data, show no ads and don't track you in other companies' apps or on their websites.
• Analytics and crash reports in the app start only if you say yes.
• You can delete your account in the app. Payments are kept for 7 years under Swedish bookkeeping law, without a link to the account.

Who is responsible

Ocean Dream AB, company registration number [organisationsnummer], [postal address], runs X-Cruise and is the data controller. Send questions about your data to support@xcruise.se.

What we process, why and on what legal basis

Account and sign-in

Data: name, email address (including Apple's relay address if you hide your real one), account ID, when you confirmed that you are at least 18, and how you sign in (Apple, Google, a code by email, or phone number and password). Only accounts from the old app have a phone number. We never store passwords in plain text, only as a hash. If you had a profile picture in the old app, we moved it to our storage.

Why: to create your account, sign you in and show your name to others in the chat. The sign-in code by email is sent through Resend and is valid for 10 minutes. If you have a phone account and forgot the password, a code is sent by text message through Twilio.

Legal basis: contract (Article 6(1)(b) of the General Data Protection Regulation, GDPR).

Security

Data: each sign-in (session) with its IP address, the app or browser it comes from and when it was created; how many codes and sign-in attempts were made per email address or phone number, stored as a code that can't be read back; technical logs with your account ID but without your name, email address or phone number.

Why: to protect your account, stop break-ins, spam and SMS fraud, and find faults. We never use the IP address to find out where you are.

Legal basis: legitimate interest (Article 6(1)(f)): keeping the service and the accounts secure.

Tickets and payments

Data: your tickets and the events they are for, and when a guard scanned a ticket. For each purchase: what you bought, the quantity, price, VAT, time, the payment's status and Stripe's payment ID. You type card details into Stripe's payment sheet, or pay with Apple Pay, Google Pay or Klarna. Those details go straight to Stripe and the payment provider, and we never see them. We send Stripe only the amount and our own payment ID.

Why: to sell and deliver tickets, show the ticket's QR code even without signal, let you in and keep the books.

Legal basis: contract; legal obligation (Article 6(1)(c)) for keeping payments under the Swedish Bookkeeping Act.

Chat, friends and groups

Data: what you write in the global chat, in groups and in private messages, with your name and the time; groups and their members; friends, friend codes and whom you have blocked; what you have read.

Why: to deliver the chat and show it even without signal.

Legal basis: contract.

Chat moderation

Before you first write in the global chat, the app asks whether you agree that your posts are checked automatically. Without your yes, you can read but not write there. Every post in the global chat is then checked by OpenAI's moderation model, which runs in the EU. If it flags a post, or someone reports it, the AI model Claude assesses it through Amazon Bedrock in the EU, together with a few of the posts just before it in the chat. If the post breaks the chat rules it is hidden, and you are told why. A person at X-Cruise always reviews the case. Only people decide to ban someone from the chat. Neither OpenAI nor Amazon keeps the texts or uses them to train their models.

Private messages and groups are never checked automatically. If someone reports such a message, a person at X-Cruise reads it.

Data: reports (who reported, which message and why), moderation cases, the automatic check's assessment, and the decisions about you with their reasons.

Legal basis: legitimate interest: keeping the chat safe and free of illegal content; legal obligation under the EU Digital Services Act (DSA) to receive reports and give reasons for decisions.

Notifications

Data: your phone's push token, linked to the sign-in; whether you want offers and news (off until you turn it on yourself); the notifications in your inbox and whether you have read them. Schedule reminders are created only on your phone. A push notification never contains the text of a chat message.

Legal basis: contract for notifications about your ticket, the chat and the cruise; consent (Article 6(1)(a)) for offers and news.

Analytics and crash reports

If you say yes in the app, PostHog (EU) collects how the app is used, such as which screens are opened, and Sentry (EU) receives reports when the app crashes. Neither starts before you have said yes, and you can change your mind at any time. Our servers report technical errors to Sentry with your account ID, but without your name, email address or phone number.

Legal basis: consent for analytics and crash reports in the app; legitimate interest for error reports from the servers.

Support

If you email us, we process your email address and what you write in order to answer you.

Legal basis: legitimate interest: being able to help you.

Who receives the data

We never sell personal data. At X-Cruise, staff see what their work needs: guards see only whether a ticket is valid, and moderators see reported messages. These providers process data on our behalf, under contracts with us (processors):

• Railway (EU, the Netherlands): servers and database, and the sync to the app.
• Cloudflare R2 (EU): storage of images, moved profile pictures and encrypted backups.
• Stripe: payments.
• Twilio: text messages with codes to reset passwords.
• Resend (EU): email with sign-in codes.
• Expo: delivery of push notifications and app updates.
• OpenAI (EU): the automatic check of the global chat, only after your yes.
• Amazon Web Services, Bedrock (EU): the second assessment of posts in the global chat.
• PostHog (EU): analytics of how the app is used, only if you said yes.
• Sentry (EU): error reports.
• Better Stack: logs and monitoring of the service.
• Google Firebase: a last message to the old app asking people to update.

These are responsible for their own processing:

• Apple and Google when you sign in with them, pay with Apple Pay or Google Pay, and when they deliver push notifications to your phone.
• Stripe for its own obligations, such as preventing fraud and following payment rules. When you pay, Stripe's payment sheet collects data about the device and how the sheet is used, to prevent fraud.
• Klarna if you pay with Klarna.
• Authorities when the law requires it, such as the police when there is a suspected crime that threatens someone's life or safety, and the Swedish Tax Agency.

Transfers outside the EU and EEA

Our servers, database and backups are in the EU. Several of the providers have parent companies in the United States, and Stripe, Twilio and Expo may process data there. Even when data is stored in the EU, a provider may need to reach it from a country outside the EU, for example for support. The data is then protected by the European Commission's decision on the EU–US Data Privacy Framework, when the provider is certified under it, and otherwise by the European Commission's standard contractual clauses. For a copy of the safeguards, write to support@xcruise.se.

How long we keep data

• The account, tickets, notifications and your yes to the automatic check: until you delete the account.
• Chat messages: until you delete them or your account.
• Reports, moderation cases and decisions: 12 months after the case is closed, or until the account is deleted if that happens first.
• Payments: until the end of the seventh year after the calendar year in which the financial year ended, under the Swedish Bookkeeping Act (chapter 7, section 2). If you delete the account, they are kept without a link to it.
• Sign-ins: 60 days after they were last used, and one year at most. The push token is removed when you sign out.
• Sign-in codes: 10 minutes.
• Analytics in PostHog: 12 months. Error reports in Sentry and logs in Better Stack: 90 days.
• Backups: [number of days] days. What you delete stays in the backups until they have been replaced.
• The old app's server: when it is shut down, a last encrypted backup is kept for 12 months. Then it is deleted.

Your rights

You have the right to:

• know what data we hold about you and get a copy of it;
• correct wrong data (you change your name in the app);
• have your data deleted. You delete the account in the app under Konto, Radera konto, or by emailing us (see Delete your account). We still keep payments for as long as the Bookkeeping Act requires;
• ask us to restrict the processing of your data;
• get data that you gave us in a machine-readable format (data portability);
• object to processing based on legitimate interest, and always to direct marketing;
• withdraw consent at any time. This doesn't affect processing that has already taken place;
• ask for a person to review a decision that the automatic check made about your post.

Email support@xcruise.se. We may need to confirm that you are who you say, and we answer within one month.

If you think we process your data wrongly, you can complain to the Swedish Authority for Privacy Protection (IMY), imy.se, Box 8114, 104 20 Stockholm, Sweden, or to the authority where you live.

Cookies, analytics and tracking

The app.xcruise.se website sets no cookies and has no analytics. The app stores only what it needs to work: your sign-in in the phone's secure storage, and a local database with your tickets, the schedule and the chat, so that the app works without signal. All of that is removed from the phone when you sign out. Analytics and crash reports start only if you have said yes. The app shows no ads and doesn't track you in other companies' apps or on their websites.

Children

X-Cruise is only for people aged 18 or older, and the app asks you to confirm that. If we learn that an account belongs to someone under 18, we delete it.

Security

All traffic between the app and our servers is encrypted. Passwords are stored only as hashes, backups are encrypted, and staff accounts require two-step verification.

Changes

If we change this policy, we update the date at the top. If the change is important, we tell you in the app or by email before it takes effect.

Contact

Ocean Dream AB, [postal address]. Email: support@xcruise.se.