Privacy policy

This translation is for information only. The Swedish version applies. Read the Swedish version

Last updated: 2026-10-28

Privacy policy

It is important to us that you feel safe when you use our services, including Högre. That is why this privacy policy explains how we use your personal data. This information applies to all of Leija’s services, including but not limited to www.leija.se and www.hogre.se (together, the “Services”).

1. Who is responsible for your personal data?

Leija Software AB, registered with the Swedish Companies Registration Office (Bolagsverket) under company registration number 559317-2801, with its registered address at Linfrögatan 2A, 702 50 Örebro, Sweden, which also operates through its businesses (“Leija”, “Högre”, “we”, “our” or “us”), is the data controller under the General Data Protection Regulation (EU) 2016/679 (“GDPR”). If you have questions about how we handle your personal data, you can contact our data protection team by email at privacy@leija.se.

2. The purpose of this document

This document contains information about how we collect, use and process your personal data, which parties we may share your personal data with, and what rights you have in relation to your personal data. When you use the Services, we may process your personal data for several different purposes, including to:

provide area and housing recommendations,
provide premium statistics and related analyses,
improve and develop the Services.

All processing of personal data must have a legal basis. Leija bases its processing on one of the following legal bases:

explicit consent (Article 6(1)(a) GDPR);
performance of a contract (Article 6(1)(b) GDPR).

3. What personal data do we collect?

We collect and use the following types of personal data to provide and develop the Services. The main legal basis is given for each category.

Contact details, e.g. email address (performance of a contract / explicit consent);
Mobile number. If you set up housing alerts with us, you can choose to give your mobile number, which you confirm with a code sent by text message. The number is then shown to Högre and to landlords looking for tenants through Högre, so that we or a landlord can call you when a home that suits you becomes available. The number is deleted when you end the alert or reply that you are no longer looking for a home. If you give your mobile number when you apply for a specific home, we send you a link by text message so that you can complete your application, and the number is shared with the landlord renting out the home (explicit consent);
Information about your housing and area preferences, e.g. preferred area, type of housing, price level, size, time frame and other information about your housing needs that you provide when you use the Services (performance of a contract / explicit consent);
Identity information when you verify yourself with BankID or apply without BankID, e.g. name, Swedish personal identity number (personnummer) or coordination number (samordningsnummer) and date of birth. Personal identity numbers are stored encrypted and are never shown in full to the landlord you are applying to (performance of a contract / explicit consent);
Information about your finances and your housing that you provide yourself in your applicant profile, e.g. sources and amounts of income, documents you upload and contact details for your current landlord (explicit consent);
Automated review of documents. Documents you upload, for example payslips or employment certificates, may be reviewed with the help of AI to assess whether the document is readable, is of the right type and matches the information you have provided. The review supports the handling of your application: a document assessed as uncertain or rejected is always passed on to a person at the landlord, and no decision on your housing application is made solely by automated means. You can always ask for a person to review your document (the landlord’s legitimate interest);
Credit check and sanctions screening. When you apply for a home with a landlord that requires it, we obtain a credit report on you from our provider on the landlord’s behalf. The landlord has a legitimate need for the report under the Swedish Credit Information Act (kreditupplysningslagen), since it forms the basis for the decision on a tenancy agreement with you. Depending on the landlord’s settings, this happens when you apply, when you are offered a place at a viewing, or only when the landlord selects you as a candidate. You receive a copy of the credit report (omfrågekopia) under the Credit Information Act. If the landlord requires it, a check against sanctions and PEP lists is also made. We store the result of the report, e.g. risk class and whether you meet the landlord’s requirements, and may reuse a recent report if you apply for more homes with the same landlord within 30 days (the landlord’s legitimate interest);
Information about co-applicants that you give in your application, e.g. name and email address, so that we can invite them to register themselves. Co-applicants’ own information is processed in the same way as yours (performance of a contract / legitimate interest);
Technical information, e.g. IP address, unique device identifier, device name, information about network and performance, browser type, language and information about operating system and platform (performance of a contract).

Please note that we cannot provide certain parts of the Services without processing the personal data listed above, for example when we produce housing recommendations or premium statistics based on your preferences. When you use the Services, we also collect certain information automatically. This may include:

information about how you use the Services, such as which features you use and how often (explicit consent/legitimate interest);
information you provide when you contact our customer service (explicit consent);
information that you share, upload or otherwise contribute within the Services, for example through forms or requests (explicit consent).

4. Storage of personal data

As a general rule, we store your personal data only for as long as necessary to provide the Services, including giving you housing recommendations and premium statistics.

Personal data linked to your use of the Services is stored for no longer than 180 days after you last used the Services or we last processed your data for this purpose, unless longer storage is required as set out below.
Contact details used for marketing and mailings are stored for as long as you consent to receiving such communication, and are deleted when you unsubscribe from our mailings, provided that the data is no longer needed to provide the Services.
Personal data used to develop and improve the Services is anonymised as soon as possible, and no later than six months after it was collected or created.
Personal data used in individual cases to enforce the terms of use or to protect our rights is stored for the time needed to handle the matter and after that in accordance with the applicable limitation rules (three years for consumer claims and ten years in other cases).
Your personal data may be stored for longer when the information is of legal significance, for example in an investigation by a public authority or an investigation of suspected breaches of our terms or policies, or when storage is required to prevent harm.

5. Who has access to your data?

We may share your personal data if we consider it necessary to perform a contract, develop the Services or otherwise improve our processes. The following categories of recipients may have access to your personal data:

Suppliers and others working for Leija

We use trusted third parties to provide, improve, protect and market the Services. This means that these parties, both inside and outside the EU/EEA, may also need certain information about you as a user.These suppliers include our service for identification with BankID (TIC), our providers of credit reports and sanctions screening (TIC and Creditsafe), our service for electronic signing of contracts (Zigned), our provider for sending text messages (46elks) and our provider for sending email. Credit reports are obtained only on behalf of the landlord you are applying to, when the landlord has a legitimate need under the Credit Information Act.For the automated review of documents, we use Anthropic, PBC (USA) as a data processor. The document and the information needed to assess it are sent to the provider only for the review, are not used to train the provider’s models and are processed under a data processing agreement. The transfer to the USA is based on the European Commission’s standard contractual clauses and supplementary safeguards. Our aim is to move the processing to a provider within the EU/EEA, and this text will be updated when that happens.These third parties may not use your personal data for any purposes other than those we have expressly agreed with them. For partners outside the EU/EEA, we take relevant safeguards, such as standard contractual clauses, to ensure that your personal data is handled securely.

Authorities, laws and regulations

We are obliged, in accordance with applicable law and decisions by public authorities, to disclose personal data that is requested, for example to the police or other competent authorities. We may also disclose information to third parties if we consider it necessary to:

comply with laws and regulations,
protect individuals from danger to life or serious personal injury, or
prevent fraud or misuse of the Services.

This may include legal requests from jurisdictions outside the EU/EEA, when we believe in good faith that the response is required by law in that jurisdiction, concerns users in that jurisdiction and is consistent with international standards.

Business customers and partners

In addition to the above, we may compile and sell or otherwise commercially use statistics and analyses based on the data processed within the Services, for example to companies, property companies and landlords; such information is then provided in aggregated and anonymised form and cannot be linked to you as an individual. If you have expressly consented to this, for example through the newsletter where you state that you want to be contacted by partners, we may also disclose your personal data (such as but not limited to contact details and relevant housing preferences) to selected companies, property companies and landlords so that they can contact you with offers or information, or handle your housing application, and you can withdraw such consent at any time.

Landlords you apply to

When you apply for a home, we share your application with the landlord renting out the home, so that the landlord can process it. This includes your contact details, what you write in your application, whether your identity is verified with BankID, the result of any credit check and sanctions screening, whether your income meets the landlord’s requirements, and documents you have chosen to upload. Your full personal identity number is never shown to the landlord. If the landlord uses a property management system (e.g. Vitec or Momentum) and you are selected as the tenant, we transfer the information needed to draw up the tenancy agreement to that system. The legal basis is performance of a contract and the landlord’s legitimate interest in processing your application.

Reference request to your current landlord

If you have given contact details for your current landlord or property manager in your applicant profile, we may use them to send a reference request by email. This happens when you have applied for a home and the landlord you are applying to has chosen to take references as part of its letting process. The legal basis is our and the landlord’s legitimate interest in assessing the tenancy.Such a request means that the recipient learns your name and that you have applied for a home with the landlord in question. The request never contains your personal identity number. The reply goes to the landlord you have applied to. You decide yourself whether to give contact details for your current landlord in your profile, and you can remove them at any time to prevent future requests.

Other recipients with your consent

With your consent, we may in cases other than those listed above share your personal data with companies, organisations or individuals outside Leija. Such sharing may only take place if you have expressly requested or approved it. You can request further information by contacting us at privacy@leija.se.

6. Your rights

You have the right to object at any time to our processing of your personal data for direct marketing purposes. You also have the right to withdraw any consent you have given at any time. Withdrawing consent does not affect the lawfulness of processing based on your consent before it was withdrawn, and we may continue to process your data on other legal bases, except for direct marketing.You have the right to request access to and more information about our processing of your personal data, and to request rectification, completion, erasure or restriction of the processing. You have the right to receive, free of charge, a copy of the personal data we process about you (registerutdrag) once (1) per calendar year. For further requests, we may charge a reasonable fee based on administrative costs.If the processing is based on our legitimate interest or on public interest, you have the right to object to the processing. If you object, we will stop the processing, unless we can show that our legitimate grounds outweigh your interests, rights and freedoms, or that the processing is necessary to establish, exercise or defend legal claims.If the processing is based on consent or contract, you have the right to data portability. Data portability means that you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and to transfer this data to another data controller.To exercise your rights above, or if you have questions about our processing of your personal data or your rights under EU law, or if you want to request erasure, you can contact us at: privacy@leija.seor by post:Leija Software ABC/O Pontus TengrothLinfrögatan 2A702 50 ÖrebroSwedenSo that we can handle your request promptly, please give your full name and, where applicable, your address and the email address you used when contacting us. We may ask you to verify your identity before your request is processed.If you have a complaint about our processing of your personal data, you have the right to lodge a complaint with the competent data protection supervisory authority. More information about national supervisory authorities is available on each authority’s website.

7. Cookies, beacons and other technologies

We collect information using various technologies, including but not limited to cookies, beacons, pixels and local storage (e.g. in your browser or on your device). For more information about our use of these technologies and analytics tools, including how you can limit or block the use of cookies, please see our cookie policy or contact us at privacy@leija.se.

8. The Högre app for landlords

The Högre app for landlords is a work tool for staff at landlords that use Högre. The account is created by your organisation in Högre’s web portal. Here we describe what information the app processes about you as a user. The app processes the following personal data:

Email address, so that you can log in with a code that we email to you (performance of a contract);
Device name, platform (iOS or Android) and app version, which are saved when you log in so that logged-in devices can be listed and blocked, and so that we can ask you to update a version that is no longer supported (performance of a contract);
Push token, platform and language, if you turn on notifications, so that we can send notifications to your phone. Notifications are delivered via Expo (650 Industries, USA) and via Apple and Google, and show address and time, never applicants’ names. You can turn them off in the app or in your phone’s settings (performance of a contract);
Operating system, app version and a random installation ID when the app checks for updates. Updates are delivered via Expo, and the information is not linked to you or your account (legitimate interest in fixing errors in the app quickly);
The actions you perform in the app yourself, e.g. attendance markings, decisions about applicants and internal notes. They are saved in Högre together with who performed them, in the same way as in the web portal (performance of a contract);
Pseudonymous usage statistics, e.g. which screens are shown, login, steps in the introduction and whether a notification is opened. The statistics are processed by our analytics provider PostHog within the EU and linked to a pseudonymous ID, never to your email address or your name. The IP address is not used to determine where you are (legitimate interest in improving the Services).

The app does not collect location, contacts, photos, camera, microphone or advertising ID. It does not track you in other companies’ apps or on other websites, and no information from the app is sold or shared for advertising. For the transfer to Expo in the USA, we take appropriate safeguards, such as the European Commission’s standard contractual clauses.

Security on your phone

Candidate details and notes are never stored on the phone. Lists of viewings, suggested times and candidates are cached on the phone so that the app can be used with poor coverage, and attendance markings made without coverage are stored there until they have been sent. All of this is deleted when you log out. The login (session token) is stored in the phone’s secure storage, Keychain on iOS and Keystore on Android, and you can lock the app with Face ID or fingerprint. All communication between the app and Högre is encrypted over HTTPS.

Applicants’ information in the app

The app shows information about applicants, e.g. name, contact details, income and credit level, for the lettings your organisation has in Högre. We process this information on behalf of the landlord: the landlord is the data controller and Leija is the data processor. How we process information about you as an applicant is described in sections 3 and 5.

Deletion

Your account in the app belongs to your organisation. If you want the account and your data deleted, you can contact your organisation’s administrator, who can remove you as a user in the web portal, or email us at support@hogre.se. When you log out of the app, the login for that phone is blocked. Your other rights are described in section 6.

9. Updates to this privacy policy

Leija may update this privacy policy. The latest version is always available on our website.Last updated: 2026-10-28