Who is responsible
Salau Distributions (Y-tunnus 3244824-8), Finland, is responsible for your data: the "data controller" in the GDPR. Questions about your data go to privacy@getopas.app.
Opas is an independent app. It is not run by, or connected to, Kela, Vero (the Finnish Tax Administration), Migri or any other Finnish authority.
What we collect, and why
The GDPR says we need a reason, called a legal basis, for every kind of data. We use these:
- Your account: we need it to give you the service.
- Your consent: you said yes, and you can take it back.
- Explicit consent: for health and other sensitive information in your letters (see below).
- Legitimate interest: keeping the app working, in ways you would expect.
| What | Why we need it | Legal basis |
|---|---|---|
| Name, email, password and app language. We store your password only as a scrambled hash, never as text. | To sign you in and email you codes and notices | Your account |
| The letters and photos you scan, and the text read from them | To explain them, find deadlines and keep your archive | Your account, and your explicit consent for the AI step |
| Explanations, deadlines, folders and the tasks you tick off | To show your letters and remind you what's due | Your account |
| Which version of the consent screen you agreed to, and when | To show what you agreed to | Explicit consent |
| A notification token for your phone | To tell you when a letter is ready or a deadline is close | Your account (you can turn notifications off) |
| Usage events such as “scan finished”, with your phone model, system version and app version. They are tied to a random ID, never to your name, email or letter text. | To see what works and fix what doesn't | Legitimate interest |
| Crash reports: phone model, app version and the error | To fix crashes | Legitimate interest |
How a letter is read
When you scan a letter, Opas first reads the text. Photos are read by Amazon Textract, in Frankfurt, Germany. PDFs are read on our own server.
Then Opas removes names, personal identity codes, addresses, phone numbers and bank account numbers. This happens on our own server, before any AI sees the letter. We may not catch every one, so some personal details can still be in the text.
The rest of the text goes to Claude, an AI made by Anthropic, which runs on Amazon Bedrock in Stockholm, Sweden, so your letter stays in the EU. It writes the explanation you see. Neither Anthropic nor Amazon uses your letters to train AI.
We ask your permission before the first scan. To take it back, email privacy@getopas.app and we'll stop reading new letters for your account. Letters already read stay as they are until you delete them.
Health and other sensitive information
Some letters show sensitive things. A Kela decision can mention an illness or a disability, for example. The GDPR calls this "special category" data and protects it more strictly.
Opas only processes it to explain your letter, and only with your explicit consent (GDPR Article 9(2)(a)). The consent screen before your first scan names health information, and tapping Allow and continue is that consent. We save the date and the version of the wording you agreed to. If the wording changes, we ask you again.
Opas doesn't use this information for anything else, doesn't build a profile from it, and never shares it except with the services below that process your letters for us.
Who else handles your data
Only the services we need to run Opas. Each one works on our instructions and may not use your data for anything else.
| Company | What it does for Opas | Where |
|---|---|---|
| Amazon Web Services | Runs our server, stores your files, reads text from photos (Textract), runs Claude (Bedrock) and sends our emails | EU (Sweden and Germany) |
| PostHog | Counts usage events | EU |
| Sentry | Collects crash reports | See sentry.io |
| Expo | Passes notifications on to Apple and Google. They only say “Your letter is ready”, never what the letter says. | United States |
| Apple and Google | Deliver notifications to your phone | Worldwide |
When data leaves the EU, we protect it with the European Commission's standard contract terms, or the Commission has decided that the country protects data well enough.
How long we keep it
- Letters and your account: until you delete them. Deleting a letter removes the file and its explanation.
- Deleting your account removes everything: account, letters, files, explanations, folders, tasks and notification tokens.
- Sign-in and reset codes expire by themselves.
- Usage events and crash reports hold no letter content and are deleted after 12 months.
Your rights
You can ask us to show you your data, correct it, give you a copy, or delete it. You can also object to what we do on legitimate interest, and take back your consent. Email privacy@getopas.app. We answer within one month.
You can delete your account in the app, or without the app.
If you think we've handled your data wrongly, you can complain to the Data Protection Ombudsman of Finland at tietosuoja.fi.
How we keep it safe
Everything travels encrypted (HTTPS). Your files are in private storage that only Opas can reach, and download links stop working after an hour. Your sign-in stays in your phone's secure storage.
Children
Opas is made for adults handling their own official letters. It is not meant for children under 16.
Changes to this policy
If we change this policy in a way that matters to you, we'll tell you in the app before the change applies. The date at the top shows when it last changed.