HúsóPrivacy policy
Last updated: 27.10.2026
Húsó is an app for housing associations (húsfélög) in apartment buildings. This page explains in plain words what personal data we handle, why, who can see it and what your rights are. We follow the Icelandic Data Protection Act no. 90/2018 and the EU General Data Protection Regulation (GDPR). If the Icelandic and English versions differ, the Icelandic version applies.
1. Who is responsible
Responsibility is split in two:
- Your housing association is the controller of the data created inside your building in Húsó: the resident directory, news posts, comments, issue reports, photos and videos, house rules, calendar and chores, and later meeting minutes. Markússon Studios stores this data for the association as its processor and does not use it for its own purposes.
- Markússon Studios ehf., ID no. 661026-0140, Drekavellir 36, 221 Hafnarfjörður, Iceland, is the controller of your account (name, email, password, language and acceptance of the terms), messages to us, crash reports, and the list of buildings using Húsó: the address, the association's ID number, and the name, email and phone of one board member who is the building's contact with us, among other things for billing.
Questions about your building's content are answered by the association's board, and we help them. You can reach us at support@husoapp.is.
2. The data we handle
- Account: name, email, password, language and when you accepted the terms. Your password is only stored as a one-way code; we can never see it.
- Profile: phone number and profile photo if you add them, and whether neighbours may see your phone and email.
- Membership: which building and apartment you belong to, whether you are an owner or a renter, your role (resident or board) and the status of your join request.
- What you post: news posts, comments, likes, issue reports with photos and videos, house rule suggestions, events, and marking a chore week as done.
- Safety and moderation: content reports, people you have blocked, and a log of board actions, for example approving a new resident or changing the status of an issue.
- Messages to us: what you send through "Contact Húsó" or "Report a problem", with the app version and phone type (iPhone or Android), and emails you send us.
- Technical data: your phone's push notification token, so we can send you notifications, and crash reports when the app crashes. Crash reports do not include your name, email or anything you write.
- Building details: name, address, the association's ID number, the apartment list, service providers and which board member is the building's contact with us, entered by the board.
We do not ask for your personal ID number (kennitala). We show no ads, sell no data and do not track you across other apps or websites. The app uses the camera and microphone only when you take a photo or video or scan a QR code, and your photo library only when you pick a photo.
If the board excuses an apartment from chores, it can write a short reason that only the board sees. Health information must not be written there.
3. Who sees what
People in other buildings never see anything from your building. Inside your building:
| Data | Who sees it |
|---|---|
| Name, profile photo, apartment and role | Approved residents of the same building |
| Phone number and email | The building's board always; neighbours only if you allow it |
| News posts, comments and photos in posts | Approved residents of the same building |
| Issue reports, with photos and videos | You and the building's board |
| Content reports and the board action log | The building's board (and whoever made the report) |
| Messages to Húsó | Only Húsó, not your neighbours or the board |
Markússon Studios staff look at data only when needed to run the service, answer a request from you or investigate a reported violation. These rules are enforced inside the database itself, not just by hiding buttons in the app.
4. Why we use it, and our legal basis
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Creating and running your account and letting you use Húsó with your building | Contract with you (the terms) |
| Sending login codes and service emails | Contract with you |
| Sending push notifications | Your consent, which you can withdraw in your phone's or the app's settings |
| Showing neighbours your phone and email | Your consent (switch in your profile) |
| Keeping the app safe, handling content reports and keeping the board action log | Legitimate interests: residents' safety and a record of decisions |
| Finding and fixing bugs (crash reports) | Legitimate interests: keeping the app working |
| Answering your questions | Contract or legitimate interests |
We do not use your data for automated decisions about you or to build a profile of you.
5. Who processes data for us
We use these service providers (processors), who may only use the data on our instructions:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, login and storage of photos and videos | Data centre in the EU |
| Resend | Sending login codes from no-reply@husoapp.is | EU (Ireland) |
| Expo, Apple and Google | Delivering notifications to your phone | USA and elsewhere |
| Sentry | Crash reports | EU |
| Cloudflare | The husoapp.is domain, this website and forwarding mail sent to support@husoapp.is | Worldwide |
| Google (Gmail) | Emails you send us | USA and elsewhere |
When data leaves the European Economic Area (EEA), we only allow it on a lawful basis, such as certification under the EU-US Data Privacy Framework or the EU's standard contractual clauses. Push notifications are short and never contain photos.
6. How long we keep data
- While you have an account, we keep your data.
- If you delete your account (Profile → Delete my account), we immediately delete your name, email, phone number, profile photo, building memberships, every photo and video you uploaded, your likes, your notification tokens and your messages to us. News posts, comments and issue reports you wrote stay in the building's history but are shown as "deleted user", so conversations and the building's repair history stay whole. You can delete your own posts first if you prefer.
- If you leave a building, you stop seeing its content, but posts and reports you wrote stay in the building's history.
- Database backups are kept for 7 days and then disappear.
- Crash reports are kept for 90 days.
- Building data is kept while the building is in Húsó. The board can ask us to delete the whole building.
7. Your rights
You have the right to access the data about you, to have it corrected or deleted, to restrict its use, to receive it in a machine-readable format, and to object to processing based on legitimate interests. You can withdraw consent at any time. Much of this you can do yourself in the app (edit your profile, turn off notifications, delete posts and your account). For your building's content you can also turn to the association's board, and we will help them answer. For anything else, write to support@husoapp.is and we will answer within one month.
If you think we are not handling your data correctly, you can complain to the data protection authority in the country where you live; in Iceland that is Persónuvernd.
8. Children
Húsó is meant for residents aged 16 or older. We do not knowingly handle data about younger children.
9. Security
Data is encrypted on its way between your phone and our servers. Access rules in the database make sure each person sees only what they should, and we test them automatically with every change. If a security breach affects you, we will tell you and Persónuvernd as the law requires.
10. Changes
If we change this policy in a significant way, the app will ask you to read the new version before you continue. The date of the last change is at the top.
11. Contact
Markússon Studios ehf., ID no. 661026-0140, Drekavellir 36, 221 Hafnarfjörður, Iceland. Email: support@husoapp.is.