Terms of Service and Privacy Policy

Last updated: 4 September 2026

PART I — TERMS OF SERVICE 1. The Service and the agreement Diggit (mydiggit.com) is provided by Dugga AB, reg. no. 559006-5198, Norr Mälarstrand 6 A, 112 20 Stockholm, Sweden ("Dugga", "we"). Diggit is a web-based service for interactive live activities: quizzes, polls, word clouds, evaluations, icebreakers and anonymous questions in real time (the "Service"). These terms apply between Dugga and you as the holder of an account (the "User"). The agreement is entered into when you register an account and actively accept these terms. You must be at least 18 years old, or enter into the agreement on behalf of an organisation you are authorised to represent. Session participants do not need an account and enter into no agreement; section 8 and Parts II and III apply to them. Together with Part II (privacy policy), Part III (data processing agreement) and, where applicable, a separate organisation agreement under section 9, these terms constitute the entire agreement between the parties concerning the Service. 2. Plans and pricing The Service is offered in two tiers. FREE is free of charge and includes up to 20 saved activities, 10 sessions per calendar month and 40 participants per session. PRO costs €12.99 per month including VAT and provides unlimited activities and sessions and up to 200 participants per session. Current prices and limits are always shown in the Service before a purchase is completed. Prices are stated in euro and include applicable VAT for consumers. At checkout the amount may be shown converted into your local currency. Business customers who provide a valid VAT number are charged without VAT under the reverse charge rules. 3. Payment and automatic renewal PRO is purchased in the Service and paid monthly in advance by card or another payment method offered at checkout. The payment is processed by our payment provider Stripe, which acts as seller of record for the payment: Stripe receives the amount, calculates and withholds applicable VAT or equivalent tax, and remits it to the relevant authority. The receipt and the invoice are therefore issued by Stripe, under the Link brand, and the payment may appear as LINK.COM on your bank statement. Dugga remains the provider of the Service and your counterparty under these terms. Your card details are handled exclusively by the payment provider and are never stored by Dugga. The subscription renews automatically one month at a time until cancelled in accordance with section 5. If a charge fails, PRO features cease immediately; your saved activities are then treated as described in section 5. The payment provider may refund a purchase within 60 days of payment, including on its own initiative in the event of a payment dispute. 4. Right of withdrawal If you are a consumer, you have the right to withdraw from the agreement within 14 days of the purchase without giving any reason, under the Swedish Distance and Off-Premises Contracts Act (2005:59). The Service is a digital service delivered immediately: during checkout you are therefore specifically asked to consent to delivery beginning at once and to your right of withdrawal ceasing once the service has been fully performed. If you exercise the right of withdrawal after giving such consent but before the subscription period has ended, you pay a proportionate amount for the time elapsed. The right of withdrawal is exercised by giving clear notice to support@mydiggit.com. You may also use the EU model withdrawal form (provided by the consumer authority in your country). The payment provider may in addition apply its own refund rules for a period after the purchase. Such rules supplement and do not limit your statutory right of withdrawal. The right of withdrawal applies only to consumers — not to organisations, schools or other legal persons. 5. Cancellation and downgrade You may cancel PRO at any time via Subscription in the Service, which takes you to the payment portal. Cancellation can also be made directly with the payment provider. Either way, the cancellation takes effect at the end of the current billing period, and you retain PRO features until then. Where you cancel the subscription yourself, all saved activities except the 20 most recently created are permanently deleted, including their questions and saved results, at the moment the billing period ends. This is displayed and must be confirmed in the Service before the cancellation is completed. Where the subscription ends without you choosing it — for example following non-payment, a payment dispute or a refund issued by the payment provider — the account changes to FREE immediately and PRO features cease, but your saved activities are kept for 30 days. Only then are all but the 20 most recently created deleted. The date is shown in the Service, and if you subscribe to PRO again within those 30 days the deletion is cancelled entirely. If you delete your entire account, any active PRO subscription is cancelled automatically at the same time, and your account and associated data are removed as described in Part II, section 6. Dugga may suspend or terminate accounts that materially breach these terms and fail to remedy the breach within 30 days of written notice. Correspondingly, you may terminate the agreement with immediate effect if Dugga commits a material breach that is not remedied within 30 days of written notice. Accounts whose email address is not verified are deleted automatically after 24 hours. 6. Price changes Dugga may change its prices. Price changes are announced at least 30 days before they take effect, by email or in the Service, and apply at the earliest from the next billing period after the notice period has ended. If you do not accept a price increase, you have the right to cancel the subscription with effect before the increase takes effect, at no cost. 7. Use, content and intellectual property You are responsible for the content you create in the Service, for holding the necessary rights to material you add, and for ensuring that your use complies with the law and these terms. The Service may not be used for unlawful or offensive content, spam, distribution of malicious code or attempts at unauthorised access. You are responsible for keeping your login credentials secure. All intellectual property rights in the Service, including software, design and the Diggit trademark, belong to Dugga. The agreement grants you a limited, non-exclusive and non-transferable right to use the Service for the duration of the agreement. You retain ownership of content you create and grant Dugga a licence to store, process, back up and display it to the extent required to provide the Service. 8. Participants Participants join sessions anonymously using a session code, QR code or shared link, without an account or registration. As the host of a session, you are responsible for how the session is used and for not asking participants to submit sensitive personal data in answers or questions. 9. Organisations and schools A school, education provider or other organisation may obtain the Service for its teachers or staff through a separate written agreement with Dugga (an order confirmation or equivalent). In that case the organisation — not the individual user of the account — is the contracting party and financially responsible towards Dugga, and these terms apply to the use of the Service in applicable parts. In the event of any conflict between the separate agreement and these terms, the separate agreement prevails, for example regarding price, payment and term. The right of withdrawal under section 4 does not apply to organisations or other legal persons. Where an organisation processes personal data in the Service, Part III applies as the data processing agreement, unless otherwise agreed in writing. Contact support@mydiggit.com for organisation orders. 10. Confidentiality Neither party may disclose confidential information about the other party received under the agreement — such as non-public information about the other party's business or the terms of a separate organisation agreement — without the other party's consent, unless disclosure is required by law. This obligation survives the termination of the agreement. How Dugga handles personal data is described in Parts II and III. 11. Availability, support and liability Dugga aims to keep the Service available around the clock but provides no service level guarantee; errors and interruptions may occur. Planned maintenance is carried out outside normal office hours where possible and announced in advance when feasible. Dugga does not guarantee that the Service will meet your particular requirements or expectations. Support is provided in Swedish and English via support@mydiggit.com during office hours on weekdays. Matters concerning payment, receipts, invoices, refunds or payment disputes are handled by the payment provider, which may decide on a refund without Dugga's approval. To the extent permitted by applicable law, Dugga's liability is limited to the amount you have paid for the Service during the twelve months preceding the event giving rise to the claim, and does not cover indirect damages. This limitation does not apply in cases of intent or gross negligence and does not limit your rights under mandatory consumer law. 12. Changes to these terms Dugga may amend these terms. Material changes to your disadvantage will be announced at least 30 days before they take effect, by email or in the Service. If you do not accept such a change, you have the right to terminate the agreement with effect from when the change takes effect. 13. Assignment Dugga may assign its rights and obligations under the agreement, provided this does not materially impair your ability to use the Service. Such an assignment will be notified to you in advance. You may not transfer your account without Dugga's written consent, which will not be withheld without reasonable grounds. 14. Notices Notices under these terms are given by email to the address linked to your account or by a message in the Service. Keep your contact details up to date under Settings. Notices to Dugga are sent to support@mydiggit.com. 15. Severability Should any provision of these terms be held invalid or unenforceable, this does not affect the validity of the remaining provisions. The provision shall instead be applied, to the extent permitted by law, in a way that most closely reflects its original intent. 16. Governing law and disputes Swedish law applies to the agreement, excluding its conflict-of-law rules. If you are a consumer, disputes may be reviewed by the Swedish National Board for Consumer Disputes (ARN) or by a general court at your place of residence; this does not limit your rights under mandatory consumer law. For businesses, disputes are settled by Stockholm District Court as the court of first instance. 17. Language versions These terms are provided in several languages. In the event of discrepancies between language versions, the Swedish version prevails. PART II — PRIVACY POLICY 1. Data controller Dugga AB, reg. no. 559006-5198, Norr Mälarstrand 6 A, 112 20 Stockholm, Sweden, is the data controller for the processing described in this part. Contact: support@mydiggit.com. 2. Account holder data When you create an account we process: your name and email address; your password (stored only as a cryptographic hash); your MFA secret if you enable two-factor authentication (stored encrypted); your plan, your payment status, a customer reference with the payment provider and, following a downgrade you did not choose, the date on which older activities will be deleted (card details are handled exclusively by the payment provider and never reach Dugga); the content you create in the Service; support requests you submit; technical error logs; and short-lived IP-based counters for abuse protection. Visitor statistics are cookieless and aggregated and cannot be linked to individuals. 3. Session participants Participation does not require an account, and a participant who has one remains anonymous in the session. For sessions linked to a class, the sign-in is used only to verify eligibility when joining. The nickname a participant chooses, together with answers, words, votes and questions, is processed without any link to the participant's identity or account, and temporary participant data is deleted automatically shortly after the session ends. Do not include sensitive personal data in answers or questions. 4. Purposes and legal basis We process the data to provide the Service and perform our agreement with you (account, payment, operation), on the basis of our legitimate interest in keeping the Service secure and reliable (abuse protection, troubleshooting, aggregated statistics), and to comply with legal obligations (e.g. bookkeeping). 5. Recipients and sub-processors We use the following sub-processors to operate the Service: Vercel (hosting, Frankfurt), Neon (database, EU), Upstash (cache and abuse protection, EU), Ably (real-time communication), Resend (email delivery, EU), Stripe (payments; acts as seller of record for the payment and is therefore an independent controller of the data you provide at checkout), Sentry (error reporting) and Cloudflare (encrypted backups, EU). Data is stored within the EU/EEA. Some providers are US companies; to the extent any third-country transfer occurs, it is safeguarded by the European Commission's Standard Contractual Clauses and/or the EU-US Data Privacy Framework. 6. Retention Account data is kept until you delete your account, which you can do yourself under Settings. Payment history and records held by the payment provider remain with the provider even after account deletion, under its own legal obligations as an independent controller (see section 5). Accounts with an unverified email address are deleted automatically after 24 hours. Reset and one-time codes are purged continuously. On downgrade from PRO, older activities are deleted as described in Part I, section 5 — immediately where you cancelled yourself, and after 30 days where the downgrade was not your choice. Backups are kept for a maximum of 30 days, which means deleted data may remain in backups for at most that period. Data required under bookkeeping legislation is kept for as long as the law requires. 7. Your rights You have the right to request access to your data, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest. Contact support@mydiggit.com. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY). 8. Cookies The Service uses only strictly necessary cookies: for signing in, participating in sessions and remembering your theme choice. No marketing or tracking cookies are used, which is why no cookie banner is shown. 9. Personal data in your content and sessions If you as a User include personal data in your activities (for example a name in a question), or if participants submit personal data in free-text answers or questions in a session you host, you — or the organisation you represent — are the data controller for that processing and Dugga is the data processor. Such processing is governed by the data processing agreement in Part III. PART III — DATA PROCESSING AGREEMENT 1. Background and roles This part constitutes a data processing agreement under Article 28 of the General Data Protection Regulation (GDPR) between you as a User, or the organisation you represent, (the "controller") and Dugga (the "processor"). It governs the processing for which you or your organisation is the data controller: personal data you add to activities and sessions, and personal data submitted by participants in your sessions. Data for which Dugga is the controller, such as your account data, is instead governed by Part II. In the event of any conflict between this part and Part I, this part prevails in matters concerning the processing of personal data. 2. Subject matter and instructions The subject matter of the processing is the provision of the Service: creating and running quizzes, polls, word clouds, evaluations, icebreakers and Q&A sessions, together with support, technical operation, troubleshooting and backups. Categories of data subjects: persons appearing in content created by the controller, and participants in the controller's sessions. Categories of personal data: data the controller enters into its content (for example a name in a question), the nickname a participant chooses, and participants' answers, words, votes and questions. Participation does not require an account and remains anonymous in the session even for signed-in participants, and the Service requests neither national identity numbers nor sensitive personal data. Temporary session data — audience questions, votes and answers that are not saved — is deleted automatically no later than a few hours after the session; results are stored durably only where the controller has actively chosen to save them. The processing continues for as long as the agreement is in force. This part constitutes the controller's complete and documented instructions to the processor. 3. Processor obligations Dugga processes the personal data only in accordance with the instructions above and not for its own purposes, ensures that persons with access to the data are bound by confidentiality, and informs the controller if Dugga considers an instruction to infringe the GDPR. 4. Security measures Dugga implements appropriate technical and organisational measures in accordance with Article 32 GDPR, including encryption of data in transit and at rest, passwords stored as cryptographic hashes, encrypted backups, access restrictions and abuse protection. The measures are reviewed on an ongoing basis. 5. Sub-processors The controller hereby approves the sub-processors listed in Part II, section 5. Dugga may replace or add sub-processors and will give prior notice, by email or in the Service, so that the controller may object. In the event of an objection, the controller may terminate the agreement and delete its account before the change takes effect. Dugga is liable for its sub-processors' processing as for its own. 6. Third-country transfers Data is stored within the EU/EEA. To the extent any third-country transfer occurs, it is safeguarded by the European Commission's Standard Contractual Clauses and/or the EU-US Data Privacy Framework. 7. Assistance and data subject rights Taking into account the nature of the processing, Dugga assists the controller in fulfilling data subjects' rights under the GDPR and the obligations under Articles 32–36. Upon written request, Dugga rectifies, provides or erases personal data covered by this part without undue delay, and at the latest within 90 days. 8. Personal data breaches Dugga notifies the controller without undue delay after becoming aware of a personal data breach concerning data covered by this part, and provides the information reasonably required for the controller to fulfil its notification obligations. 9. Audits Dugga makes available to the controller the information necessary to demonstrate compliance with this part, and allows for and contributes to audits in accordance with Article 28(3)(h) GDPR. Audits are conducted primarily through written documentation. 10. Deletion upon termination When the agreement ends — for example when you delete your account — the personal data covered by this part is deleted together with the account, unless continued storage is required by law. Backups are purged automatically within 30 days. If the controller wishes to receive a copy of the data before deletion, this must be requested before the account is deleted. 11. Liability and disputes The limitation of liability in Part I, section 11 applies to the processor's liability under this part. Disputes are resolved in accordance with Part I, section 16.