Last updated 3 October 2026.
Nōch is a custom bachelor and bachelorette party app service, operated by Alfred Lindgren AB (org. nr 559556-4609), Algatan 14, 169 32 Solna, Sweden. Alfred Lindgren AB is the controller of the personal data described here. You can contact us at hello@nochtravel.com.
When you place an order, we collect your name, email address, the bachelor or bachelorette’s name, trip destination, dates, group size, venue preferences, and any photos you upload for the app. If you give them, we also collect the first names of the friends coming and of the people directing the weekend, so each friend can find their own name on the invitation and the end credits can name the directors. We also keep a record that you accepted the Terms and asked us to start work straight away.
When you send a request to the Desk, we collect the same kind of details: your name, email address and, if you give it, your phone number, with the destination, dates, group size, what you would like the Desk to handle, a budget if you share one, and anything else you write. We use them to answer your request. The request reaches us through Netlify, our host.
When you visit the website, we run no analytics. Our host, Netlify, receives your IP address and the details of each request, as any web host must, to serve the pages and keep them secure.
Our typefaces are served from our own servers, on this site and on the trip websites. Loading them sends nothing to Google.
If you run a place and write to us through the partner enquiry on Work with Nōch, we collect your name and email address, with your business details: the venue’s name, city and website, and anything you tell us about it. We use them to answer your enquiry and, if we work together, to run the partnership. Nothing else.
We use your information to build your custom app, communicate about your order, and process payments via Stripe. We do not sell your data. We share it only with the providers that run the service for us:
Netlify hosts the website and receives its forms — the order form, with your brief and any portrait you upload, the Desk request, and the partner enquiry. Stripe takes payment. Google Firebase runs the Nōch app and the trip websites. Google Workspace carries our email.
Frankfurter (frankfurter.dev), a free public service, supplies the exchange rates in the app’s budget. The app asks it for two currencies and nothing else: no name, crew or trip details. Like any web request, it sees your IP address.
The law lets us use your information only with a reason. Ours:
· To take and deliver your order, and to answer a Desk request or a partner enquiry: the contract, or the steps before one (GDPR art. 6(1)(b)).
· To run the app and trip website for everyone on the trip: the app’s terms, which you accept when you join (art. 6(1)(b)). Where a photo or comment shows someone other than the person who added it, we rely on our legitimate interest, and the group’s, in a shared record of the trip (art. 6(1)(f)). You can object to this, or report it, at any time.
· To keep the receipts and accounts the law requires: a legal obligation (art. 6(1)(c), the Swedish Bookkeeping Act).
· To review reports, keep the service secure and deal with legal claims: our legitimate interest (art. 6(1)(f)), and the EU Digital Services Act where it applies.
Without a name and an email we cannot take an order, and without a name you cannot join a crew. We make no automated decisions about you.
When the Desk books for you, we give the place the name the booking is under, the group size, the date and, if the place asks, a phone number. Partners never receive your details for marketing, and we never sell them.
The free Nōch app for iPhone and each private trip website share the same trip. When you join with your invitation code, we store only what you choose to add.
Your crew card. Your name. If you add them, a portrait and a Revolut handle or Swish number, so the group can settle up.
Photos. The pictures you add to the shared album, with your name, the time you added them, the time they were taken (read from the photo itself) and who liked them.
Comments and captions. What you write under a photo in the album, with your name and the time. Your crew sees it.
Expenses. What was bought, the amount, who paid and how it is split.
Paying each other. When you tap Pay, Nōch opens Revolut or Swish with the amount and a short note already filled in. Nōch never sees or handles the payment; what happens in Revolut or Swish is between you and them.
A line for the guest of honour. The line you write for the person the trip is for, and the photo you choose for it. No one on the trip can read it before the lines are opened at the last dinner, you included.
A device identifier. A random, anonymous sign-in id that Google Firebase creates the first time the app or the trip website opens. It lets the trip recognise your phone. It is not linked to your email or phone number, and no account is created. The invitation page uses a throwaway id only to read the invitation, keeps it in memory and deletes it straight away.
Reports. If you report a photo, a comment or a crew member, we keep the report and who sent it, and we are alerted by email so we can act on it.
The organiser gives us the name, and often a portrait, of the person the trip is for, and may add the crew’s names. Friends on the trip may add photos you appear in. We use them only for that trip. Everything in this policy applies to you too, and you can ask us to change or remove them at any time, or report a photo in the app.
Your trip (crew cards, comments, the budget, and the album’s captions and likes) is stored with Google Firebase in Belgium, which processes it for us. The photo files, portraits included, are stored with Google in Belgium too. Firebase’s sign-in service, which holds only the random device id, runs on Google servers in the United States (see Where it goes).
Only people who have joined your trip with its invitation code can see it. The crew list, the album and the budget are shared with them, and with no one else. We look at trip data only to run the service, answer your questions and review reports.
The app and the trip websites have no advertising, no analytics and no tracking. We do not sell or share trip data.
Some of our providers are American companies or use servers outside the EU: Google (Firebase sign-in, Workspace email), Netlify (the website and its forms) and Stripe (payment). Where your information goes to the United States, it is protected by the EU–US Data Privacy Framework (GDPR art. 45), with the European Commission’s standard contractual clauses as a fallback (art. 46). You can ask us for a copy.
In the app, open Crew and choose Delete my data. It removes your crew card, the photos, comments and likes you added from this phone, and the line you wrote for the guest of honour, then signs this phone out, straight away. Anything you added from another phone or on the trip website is not included; for that, email us, as below. Expenses you paid for or shared stay in the budget, so the group’s totals still add up; they show you as a former member.
On a trip website, remove yourself from the crew. Or email hello@nochtravel.com and we will delete everything linked to you within one month, except the records the law requires us to keep.
Anyone on a trip can report a photo, a comment or a crew member from the app, and anyone else can write to hello@nochtravel.com. Reports come to us, not to the group. A person reviews every report within 24 hours, and we remove content, and people, that break our terms.
Receipts and payment records. Until the end of the seventh year after the financial year they belong to, as the Swedish Bookkeeping Act requires.
The rest of your order brief. Three years after the trip, to answer questions and claims about it. Portraits sent with the order are deleted with the trip content.
Trip content. The schedule, venues, crew cards, photos, comments, expenses, the lines for the guest of honour, and reports: deleted 12 months after the trip ends, or sooner if the organiser asks.
Requests and enquiries. A Desk request that does not become a booking, and a partner enquiry that does not become a partnership: 12 months after the last contact.
Form submissions leave our host’s inbox within 30 days, once they are in our own records.
No analytics, and no advertising or tracking cookies. The site and the app keep a few small notes on your device so they work as you asked: that you have read the storage notice or dismissed the install prompt, the order form while you fill it in, your order reference and email until the confirmation page has shown them, or for a day if you leave before paying, the places you save to your trip, and the anonymous sign-in id described above. Because they are strictly necessary, we do not ask for consent. Clearing your browser data removes them.
When you pay, Stripe sets the cookies its checkout needs to work and to prevent fraud, on its own pages, under its own privacy policy.
All payments are processed securely by Stripe. Nōch never sees or stores your card details.
You can ask for a copy of your information, have it corrected or deleted, have its use restricted, take it with you in a common format, and object to any use that rests on our legitimate interest. Write to hello@nochtravel.com and we answer within one month.
If you think we have got something wrong, you can complain to the Swedish Authority for Privacy Protection (IMY, imy.se) or to the data protection authority where you live.
We tell you about significant changes in the app and on this page, and by email if we have your address.
Questions? hello@nochtravel.com