Privacy Policy

Last updated May 19, 2026

This Privacy Notice for krawl ("we", "us", or "our") explains how and why we collect, use, store and share ("process") your personal information when you interact with our services ("Services"), including when you:

  • Visit https://krawl.dk/ or any site linking to this notice
  • Download and use krawl, or any other app that links here. krawl is a student-driven mobile application, that helps Danish university students socialize and explore their campus; particularly its Friday bars.
  • Participate in marketing, events, or other activities with us

krawl is operated as an independent voluntary association (da: Frivillig forening), which acts as the data controller for the personal information processed through the Services.

If you have questions or concerns, this notice outlines your rights and our responsibilities. Do not use the Services if you disagree with our practices. For further inquiries, contact us at hello@krawl.dk_.

Summary of Key Points

Below are highlights from our Privacy Notice. For full details, consult the table of contents.

  • What personal information do we process?
    We process data depending on how you use our Services, the choices you make, and the features you employ.

  • Do we collect precise location data?
    Yes, if you opt in. We may store your location to provide map features, your night overview, and to show your location to friends in the same krawl who have the krawl code.

  • Do we process sensitive personal information?
    No, we do not handle sensitive data.

  • Do we collect information from third parties?
    We may obtain data from public records, marketing partners, and social platforms.

  • How do we process your information?
    We use data to deliver, improve and administer Services, communicate with you, enhance security, and comply with law. Additional uses require your consent.

  • When and with whom do we share your information?
    Data sharing occurs only in specific situations with defined third parties.

  • How do we keep your information safe?
    We maintain appropriate safeguards, though no system is infallible.

  • What are your rights?
    Depending on your location, privacy laws may grant you certain rights over your personal information.

  • How do you exercise your rights?
    Use the profile page in the app or on the website, or send an email to us at gdpr@krawl.dk, and we will handle your request in accordance with applicable laws.

  • Do we honor the right to be forgotten?
    Yes. Where GDPR or equivalent law applies, you may request erasure of your personal data under Article 17, subject to legal exceptions.

Table of Contents

  1. What information do we collect?
  2. How do we process your information?
  3. What legal bases do we rely on to process your personal information?
  4. When and with whom do we share your personal information?
  5. What is our stance on third-party websites?
  6. Do we use cookies and other tracking technologies
  7. How do we handle your social logins?
  8. How long do we keep your information?
  9. How do we keep your information safe?
  10. Do we collect information from minors?
  11. What are your privacy rights?
  12. Right to Erasure (Right to be Forgotten)
  13. Do we make updates to this notice?
  14. How can you contact us about this notice?
  15. How can you review, update, or delete the data we collect from you?

1. What information do we collect?

Personal information you disclose to us

In Short: We collect the information you voluntarily provide.

We gather personal information when you register, request information, use our Services, or contact us.

Personal information provided by you. The data we may collect includes:

  • names
  • email addresses
  • usernames
  • passwords
  • contact or authentication data

Sensitive information. We do not process sensitive data.

Social media login data. If you sign up via a social account (e.g. Facebook, Apple, Google), we receive whatever profile data you permit, described further in Section 7.

Application data. If you use our apps and grant permissions, we may collect:

  • Geolocation. With your consent we may collect and store your location while the app is in use (and, if enabled, in the background). We use this data to provide map features, your night overview, and to show your location to friends who are in the same krawl and have the krawl code. You can revoke access in your device settings.
  • Device features. We may request access to your camera, reminders, and similar features, to create app events or similar. You can change these permissions anytime.
  • Push notifications. Opt out via your device settings.

This data helps us secure and maintain our apps, troubleshoot issues, and support analytics. In particular, it allows us to provide location-based features, send relevant notifications, and improve user experience.

All personal information you provide must be accurate and updated when necessary.

Information automatically collected

In Short: We collect certain technical and usage data automatically.

When you access our Services, we log details such as your IP address, device and browser characteristics, operating system, language, referring URLs, location (based on IP), and interaction timestamps. This information is used for security, operations, and analytics.

We also use cookies and similar technologies.

Examples of automatically collected data include:

  • Log and usage data. Server logs record diagnostic, usage, and performance metrics, including page views, search terms, error reports, and other activity.
  • Location data. Depending on your device settings, we may collect precise or imprecise location via GPS, WiFi, or cell towers. You may disable this in your device settings.

Google and Apple Maps. Our use of information from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. We use Google Maps Platform APIs and Apple Maps to display maps and enable location-based features, which may involve processing location data to provide those features.

Information collected from other sources

In Short: We may supplement our records with data from public and third-party sources.

To improve marketing, offers, and service delivery, we may obtain data from social platforms, and other vendors. This may include mailing addresses, email addresses, IP addresses, social profiles, and custom audience information.

If you interact with us via a social platform, we may receive profile data such as your name, email and gender, subject to your privacy settings. We do not control the provider's handling of your information; check their privacy policy for details.

2. How do we process your information?

In Short: We process information to operate the Services, communicate, secure the system, and comply with the law. We may also process data with your consent for other purposes.

We use your data to:

  • enable account creation, authentication, and management;
  • deliver requested services;
  • respond to inquiries and provide support;
  • send administrative messages about products, services, and policy changes;
  • facilitate user-to-user communications;
  • obtain feedback;
  • send marketing and promotional communications (per your preferences);
  • protect our Services through fraud monitoring and security measures;
  • analyze usage trends to improve our offerings;
  • evaluate the effectiveness of marketing campaigns;
  • safeguard vital interests in emergency situations.

3. What legal bases do we rely on to process your personal information?

In Short: We only process your information when we have a valid legal basis, such as consent, contractual necessity, legitimate interests, legal obligations, or vital interests.

Under GDPR and UK GDPR, we may rely on:

  • Consent. You have given permission for a specific purpose. You may withdraw consent at any time.
  • Performance of a contract. Processing is necessary to provide the Services or to take steps before entering a contract with you.
  • Legitimate interests. When our interests do not override your rights. Examples include sending offers, improving services, retaining users, conducting marketing, preventing fraud, and enhancing user experience.
  • Legal obligations. Compliance with laws, responding to lawful requests, or defending legal rights.
  • Vital interests. To protect someone's life or safety in an urgent situation.

4. When and with whom do we share your personal information?

In Short: We share data only in specific cases described below.

We may disclose information in connection with:

  • Business transfers. During mergers, acquisitions, or asset sales.
  • Other users in your krawl. If you opt in to location features, we may share your location with friends who are in the same krawl and have the krawl code, so they can view your night overview and see your location in the app.
  • Google Maps Platform APIs and Apple Maps. We use Google Maps Platform APIs and Apple Maps to display maps and provide location-based features. GPS accuracy is about 20 meters; Wi-Fi and cell towers may be used when GPS is weak. We cache location data on your device; you can revoke consent by contacting us. The APIs may store cookies on your device. If you are a user currently in the European Economic Area (EU countries, Iceland, Liechtenstein, and Norway) or the United Kingdom, please take a look at our Cookie Notice at https://krawl.dk/cookie-policy.
  • Affiliates. Any parent, subsidiaries, and entities under common control, all of which are bound by this notice.
  • Business partners. Third parties who help us offer products, services, or promotions.

5. What is our stance on third-party websites?

In Short: We are not responsible for the privacy practices of linked or advertising third-parties.

Our Services may link to external websites, services, or apps not operated by us. We do not endorse, and are not liable for, their content or practices. Data you provide to those sites is governed by their policies, not ours. Review their terms before sharing personal information.

6. Do we use cookies and other tracking technologies?

In Short: Yes, we use cookies and similar tools to collect and store information.

We deploy cookies to improve security, remember preferences, and support basic site functions. Third parties may also place tracking technologies for analytics and advertising to serve tailored ads or send cart reminders, as allowed by your communication preferences.

See our Cookie Notice at https://krawl.dk/cookie-policy for details on managing or refusing cookies.

7. How do we handle your social logins?

In Short: If you login with a social account, we may receive certain profile information.

You can register or sign in using accounts from third-party platforms (e.g. Facebook, Google or Apple). We only receive the data you authorize, such as name and email, and we use it solely as described here. We do not control the provider's handling of your information; check their privacy policy for details.

8. How long do we keep your information?

In Short: We retain data only as long as necessary for the purposes described, or longer if required by law.

We delete or anonymize personal information when it is no longer needed. If deletion isnt possible (e.g. backups), we securely isolate the data until it can be removed.

9. How do we keep your information safe?

In Short: We use organizational and technical measures to protect your data, but no system is completely secure.

We implement reasonable safeguards to secure your information. However, transmission of data over the internet carries inherent risks, and we cannot promise absolute security. Access our Services only from secure networks. If you suspect a security breach, contact us immediately.

10. Do we collect information from minors?

In Short: No. We do not knowingly collect data from or market to persons under 18.

By using our Services you affirm that you are at least 18 years old. If we learn of information collected from someone under 18, we will deactivate their account and promptly delete the data. Contact us if you believe we have collected such data.

11. What are your privacy rights?

In Short: In certain jurisdictions (EEA, UK, Switzerland) you have rights to access, correct, delete, or restrict processing of your personal information, among others.

Depending on local law, you may:

  • request a copy of your data;
  • ask for corrections or erasure;
  • restrict processing;
  • request data portability;
  • object to processing, including automated decisions;
  • withdraw consent (this does not affect prior lawful processing).

To exercise these rights, contact us at hello@krawl.dk. For right to be forgotten and full data deletion requests, contact gdpr@krawl.dk. We will respond in accordance with applicable laws. EEA/UK residents may also lodge a complaint with their data protection authority. Swiss residents may contact the Federal Data Protection and Information Commissioner.

Marketing opt-out. Unsubscribe using links in our emails or contact us directly. Service-related messages may still be sent.

Account management. You can update or delete your account from your profile page in the app or on the website, or by sending an email to gdpr@krawl.dk. Upon deletion requests, we will remove your data from active systems but may retain certain information to prevent fraud, resolve disputes, or comply with legal obligations.

Cookies. You can manage cookies via your browser settings; blocking cookies may limit functionality. You may also opt out of interest-based advertising.

Questions about your rights? Email us at hello@krawl.dk.

12. Right to Erasure (Right to be Forgotten)

In Short: When GDPR or similar law applies, you can ask us to delete your personal data. We assess and respond within legal timelines and explain any limitations.

Under GDPR Article 17, you may request erasure of personal data when, for example:

Send right-to-be-forgotten and full data deletion requests to gdpr@krawl.dk.

  • the data is no longer necessary for the purpose collected;
  • you withdraw consent and no other legal basis applies;
  • you object to processing and we have no overriding legitimate grounds;
  • the data was processed unlawfully; or
  • erasure is required to comply with a legal obligation.

How we handle erasure requests:

  • Verification. We may ask for reasonable proof of identity before acting.
  • Timeline. We normally respond within 1 month of receiving a valid request. If the request is complex or numerous, we may extend by up to 2 additional months and will explain why.
  • Scope. We delete data from active systems and instruct relevant processors to do the same where required. If data remains in secure backups, we isolate it and delete it in line with backup rotation.
  • Notification. We will inform you of the outcome of your request.

When we may refuse full erasure:

  • to comply with legal obligations;
  • to establish, exercise, or defend legal claims;
  • for reasons of substantial public interest or other lawful exemptions.

If we cannot erase certain data, we will explain the reason and inform you of your right to complain to a supervisory authority.

13. Do we make updates to this notice?

In Short: Yes, we will update this notice as needed to comply with laws.

We may revise this Privacy Notice periodically. The Last updated date at the top will reflect changes. If material changes occur, we may provide a prominent notice or direct communication. Please review this notice regularly.

14. How can you contact us about this notice?

The data controllers for our Services are the current board of krawl. Our board is responsible for ensuring that your personal information is handled in accordance with this notice and applicable laws.

For any questions, requests to exercise your rights, or comments regarding this notice, please contact us at hello@krawl.dk, or at:

krawl (CVR-nr. 46329236)
Institut for Datalogi
Åbogade 34
8200 Aarhus N

15. How can you review, update, or delete the data we collect from you?

You have the right to request access to, correction of, or deletion of any personal information krawl holds. You may also withdraw consent where processing depends on it. These rights may be limited by law. To submit a request, use the profile page in the app or on the website, or send an email to gdpr@krawl.dk.