Privacy Policy
This Privacy Policy explains how Reshape ApS processes personal data when you use the Reshape Colony Counter App.
1. Data controller
2. Information we process
- Account information, including email address, user ID, account-creation details, and how you heard about the service.
- Plate information, including captured or uploaded images, barcodes, identifiers, diameter, notes, analysis results, and associated timestamps.
- Technical information required to operate and secure the service, such as app version, device and network information, request timestamps, and diagnostic logs.
- Communications, feedback, and support requests you send to us.Plate information may constitute personal data where it is linked to your account, organization, or other identifiable information.
3. How we use information
- Create, authenticate, administer, and secure your account.
- Upload, analyze, store, synchronize, and display plate information and analysis results.
- Send account verification, security, and service-related messages.
- Provide support, investigate errors, and maintain service reliability.
- Prevent abuse, fraud, unauthorized access, and security incidents.
- Comply with legal obligations and enforce applicable agreements.
We do not use plate images or analysis results to train or improve AI models unless you separately and explicitly agree to that use.
4. Legal bases
Depending on the processing activity, we rely on performance of our agreement with you to provide Colony Counter; our legitimate interests in securing, maintaining, supporting, and improving service reliability; compliance with legal obligations; and consent where consent is specifically requested and required.
5. Service providers and recipients
We use service providers to operate Colony Counter. Current production providers may include:
- Supabase for authentication, database, and storage services.
- Resend for account verification and service-related email delivery.
- Modal for cloud-hosted image analysis infrastructure.
- Other professional advisers, authorities, or service providers where necessary for support, security, legal compliance, or corporate administration.
Service providers may process information only for the relevant service purposes and under applicable contractual and legal protections. We may disclose information where required by law or necessary to establish, exercise, or defend legal claims.
6. International transfers
Some providers may process information outside Denmark or the European Economic Area. Where required, we use appropriate transfer mechanisms and safeguards, such as European Commission standard contractual clauses and supplementary measures.
7. Retention
We retain account information, plate images, plate information, and analysis results while your account remains active and for only as long as necessary to provide the service. This includes scientific records for plates that you remove from your active plate list.
When you delete your account, we delete the account and its associated scientific records from our active systems. Limited copies may remain temporarily in protected backups or service-provider operational logs until their applicable retention periods expire, or where retention is required by law, necessary to investigate a security incident, or needed to establish, exercise, or defend legal claims.
8. Your rights
Subject to applicable law, you may have the right to access, correct, delete, restrict, or object to processing of your personal data; receive a portable copy of information you provided; and withdraw consent where processing relies on consent. You may also lodge a complaint with the Danish Data Protection Agency or another competent supervisory authority.
To exercise your rights, contact support@reshapebiotech.com. We may need to verify your identity before completing a request.
9. Account deletion
You can delete your account through Account > Delete account in the app. This removes your account and associated plate images, plate information, and analysis results from our active systems. It also removes copies stored by the app on the device where deletion is initiated.
Deleting the app from your device does not delete your account or server-stored information. Limited copies may remain temporarily in protected backups or service-provider logs until their applicable retention periods expire, or where retention is required by law. See Section 7 for further information about retention.
10. Security
We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, or loss. However, no internet-based service can guarantee absolute security.
11. Children
Colony Counter is intended for professional and research users and is not directed to children. We do not knowingly collect personal data from children without appropriate authorization.
12. Changes to this policy
We may update this policy. Material changes will be communicated through the app or another appropriate channel. The effective date at the beginning identifies the current version.
13. Contact
Privacy questions and requests may be sent to support@reshapebiotech.com or by post to Reshape ApS, Østbanegade 55, 1. th, 2100 København Ø, Denmark.
Updated July 21st 2026