Privacy Policy

Who is responsible

Engage Studios AB (company registration number 556732-3059), Lindholmspiren 3A, 417 56 Göteborg, Sweden, is the controller of the personal data described here. Contact us about privacy at oscar.blegen@engagestudios.com.

What data we process

Accounts are created by Hugo administrators for people at the organisations that use Hugo robots. There is no public sign-up. An email address and password are required to have an account; without them you cannot use Hugo.

• Account data: your email address, password, user ID, role, the organisation your account belongs to, when the account was created and when you last signed in. Passwords are handled by our authentication provider and are not stored in readable form.
• Robot data: the robots your organisation has access to, their name, status, last active time, the robot’s most recently recorded location and its latest reported availability, battery level and task status.
• Live robot data: while you view or drive a robot, its status, battery, sensor readings, map, routes and the robot’s position are sent from the robot to your device in real time. Apart from the latest status listed above, this live data is not stored on our servers.
• Live video: for robots with a camera, the app shows live video from the robot. The video is transmitted live only and is not recorded or stored. Your iPhone’s camera and microphone are not used.
• Driving: when you take manual control of a robot, your email address (or user ID) is included in a short-lived credential sent to the robot, so it knows who is in control.
• Technical data: your IP address and basic device or browser information are processed when you connect, by us and the service providers listed below. To set up a live connection, network addresses are exchanged between your device and the robot.

We do not collect your phone’s location. Locations shown in Hugo are the robots’ positions, not yours. We do not use analytics, advertising or tracking, and we do not sell personal data.

Why we process it and on what legal basis

• To provide Hugo — sign-in, showing the robots you have access to, live viewing and driving. Where we have a contract with you, the legal basis is that contract. Where the contract is with your organisation, the legal basis is our and your organisation’s legitimate interest in providing the service it has ordered.
• To keep Hugo secure and working — access control, preventing misuse and troubleshooting. The legal basis is our legitimate interest in operating a safe and reliable service for controlling physical robots.

We do not make decisions about you based solely on automated processing.

Who receives the data

Hugo administrators can see accounts and robots. People in your organisation who use Hugo can see your organisation’s robots. We use the service providers below. Providers that process data on our behalf may use it only to provide their service to us and must protect it at least as well as this policy describes. Apple, Google and CARTO also process the data they receive under their own privacy policies.

• Supabase — sign-in, the account and robot database, and server functions that issue robot access for the app. The database is hosted in Stockholm, Sweden.
• Vercel — hosting of the Hugo Dashboard. Requests to the dashboard are processed on servers in the United States.
• Cloudflare — secure connections to robots, and relaying live connections from the dashboard when a direct connection is not possible.
• Google — a network service (STUN) that tells your device its public IP address so it can connect directly to a robot.
• CARTO — map backgrounds in the dashboard. Your browser requests map images for the area you view.
• Apple — app distribution through TestFlight and the App Store, and map backgrounds in the iOS app.

Transfers outside the EU/EEA

Some providers, including Vercel, process personal data in the United States or other countries outside the EU/EEA. Such transfers rely on the safeguards in the providers’ data processing terms, such as the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. Contact us for more information about these safeguards.

How long we keep data

• Account data is kept while your account exists. It is deleted when your account is closed, for example when your organisation’s agreement ends or when you ask us to delete it.
• Only a robot’s most recent location and status are stored; each update replaces the previous one.
• Other live robot data is not stored on our servers. Live video is not stored.
• Our service providers keep technical logs, and may keep deleted data in backups, for limited periods to operate and secure their services.

Cookies and storage on your device

• Dashboard: sign-in cookies that keep you logged in, and a setting in your browser’s local storage that remembers light or dark mode. Both are necessary for the dashboard to work. This page sets no cookies.
• iOS app: your sign-in session in the device’s secure storage, and your selected robot and display preferences in the app’s settings. Signing out removes your session from the device.

Live Activities, if you use them, show robot and route progress on your device only. The app contains support for push notifications that is not enabled. We will update this policy before it is.

Security

Connections to Hugo’s services and live connections to robots are encrypted. Access to accounts and robots is limited by role and organisation. Credentials that give access to a robot are issued only after your account’s access has been checked, and driving a robot requires a short-lived credential.

Your rights

You have the right to access your personal data and to have it corrected or deleted. You can also ask us to restrict processing, object to processing based on legitimate interest, and receive your data in a portable format. To use these rights, or to delete your account, email oscar.blegen@engagestudios.com. We respond within one month.

If you think we process your data incorrectly, you can complain to the Swedish Authority for Privacy Protection (IMY) at imy.se.

Changes to this policy

When we change this policy we update the date at the top of this page. If a change materially affects how we process your data, we will inform you before it takes effect.