Privacy policy
Clear information about what we process, why and the choices you have.
1. Data controller
BeetleSense AB, company number 559475-3088, Sweden, is the data controller. Contact christo@beetlesense.com for privacy matters.
2. Data we process
- Local learning data: answers and selected options, progress, flagged questions, audio positions, study sessions, diagnostic preferences, optional target date, review schedule and simulation history. These remain in your browser until you delete them.
- Account data: email, user ID and synced progress if you voluntarily create an account.
- Payment data: Stripe handles card and payment information. We receive transaction and entitlement status but do not store full card numbers.
- Student verification: user ID, a one-way hash of the student email, institution, verification date and expiry. The complete student email is not stored in the verification register. We do not collect nationality or migration status.
- AI and audio: text or audio sent for translation, tutoring or pronunciation feedback is processed to provide the feature. The app does not retain audio after the response.
- Technical logs and anonymous Vercel analytics for security, operations and high-level usage patterns.
3. Purposes and legal bases
Necessary account, access and payment data are processed to perform the contract. Security logs and basic service-improvement analytics are processed on legitimate interests. Marketing and non-essential cookies require active consent. Accounting data is retained where required by law.
4. Retention
- Local progress: until you clear browser data or use the delete control.
- Account and synced progress: until you delete the account. We do not currently delete accounts automatically solely because of inactivity.
- Support messages: no more than 12 months, with automated deletion.
- Student verification: until eligibility expires and for 30 days afterwards, with automated deletion.
- Synthetic operational checks: 90 days. Other security events: no more than 24 months.
- Payment and accounting records: as required by Swedish accounting and tax law; user ID and email are removed when the account is deleted.
5. Service providers
The service may use Vercel for hosting and cookie-free anonymous analytics, Supabase for accounts and database, Stripe for payments, Resend for transactional email and OpenAI for optional AI, translation and audio features. Providers may process data only for agreed purposes. Transfers outside the EEA must use lawful safeguards such as Standard Contractual Clauses.
6. Your rights
You may request access, correction, deletion, restriction, portability and object to processing based on legitimate interests. You may withdraw consent at any time and complain to the Swedish Authority for Privacy Protection. We normally respond within one month.
7. Automation, AI and on-device storage
Adaptive study plans and AI assistance provide recommendations but do not make decisions with legal or similarly significant effects. Local progress and preferences may be stored on the device. Read more in our dedicated notices.
8. Security, children and changes
We use HTTPS, access controls, server-side secrets and data minimisation. The service is not directed to children under 16. This policy is updated when the service or law changes, and material changes are communicated clearly.
9. Contact
BeetleSense AB · 559475-3088 · Sweden
christo@beetlesense.com