Effective 2026-07-22

Privacy policy

This page explains how Redo för Sverige handles personal data under the GDPR. The Swedish version is intended to be the legally reviewed primary version before launch.

Plain-language notice: This policy describes the services that are currently connected and the optional services that may be enabled later. Optional providers are only used after their corresponding feature is configured.

1. Controller and contact

Controller: BeetleSense AB, org.nr 559475-3088
Address: Brushanegatan 44, 331 42 Värnamo, Sweden
Privacy contact: christo@beetlesense.com

2. Data we process

  • Account: email address, user ID, preferred language and sign-in session information.
  • Learning: answers, confidence, progress, review schedule, selected chapters and simulation results.
  • Purchases: tier, Stripe customer and payment references, purchase status and accounting records. We do not receive full card details.
  • Student verification: verified institution, university email, verification and expiry dates. We do not request nationality, religion, ethnicity, migration status, passport copies or programme documents.
  • AI and support: tutor questions, retrieved source references, contact messages and feedback where you choose to provide them.
  • Audio: pronunciation recordings are transmitted for transcription and feedback and are not intentionally stored by this application.
  • Technical: necessary session cookies, security events, IP-derived abuse controls and error logs.

We do not sell personal data and do not use it to infer religion, ethnicity, political views or immigration status.

3. Why and legal basis

  • Contract: account access, purchased features, progress synchronisation and student access.
  • Legitimate interests: service security, abuse prevention, debugging and aggregated product improvement.
  • Consent: optional marketing, optional analytics and microphone access. Consent can be withdrawn.
  • Legal obligation: accounting, tax and legally required disclosures.

4. Providers and international transfers

The planned providers are Supabase for authentication and database, Vercel for hosting, Stripe for payment, Resend for transactional email and OpenAI for optional tutor, speech, translation and transcription functions. Final regions and transfer mechanisms must be confirmed before launch. Where data leaves the EU/EEA, an appropriate legal transfer mechanism and supplementary safeguards must be documented.

5. Retention

  • Account and learning data while the account is active; planned deletion after 24 months of inactivity with prior notice.
  • Support messages for up to 12 months.
  • Student verification until its expiry plus a short security/audit period.
  • Raw pronunciation audio is not intentionally retained by this application.
  • Purchase and accounting records for the period required by Swedish law.
  • After account deletion, personal data is removed within 30 days except records legally required to be retained.

6. Cookies

Necessary authentication and security cookies are enabled by default. Vercel Web Analytics may collect privacy-friendly, aggregated page-view information without advertising pixels. Optional marketing technologies remain disabled unless the user actively consents.

7. Your rights

You may request access, correction, deletion, restriction, objection, data portability and withdrawal of consent. You may also complain to the Swedish Authority for Privacy Protection, IMY. Requests can be sent to christo@beetlesense.com; identity may need to be verified.

8. Security and incidents

Planned measures include HTTPS, Supabase row-level security, least-privilege service access, secret separation, access logs, webhook verification and rate limits. Reportable personal-data breaches will be handled within the GDPR timetable, including notification to IMY within 72 hours where required.

9. Children

The service is intended for people aged 16 or older. We do not knowingly collect personal data from younger children.

10. Student and partner reporting

Lund University, ESN, mentors or other partners do not receive individual names, emails, answers, scores or progress. A partner may receive aggregated campaign totals that do not identify students.

11. AI transparency

AI output may be incorrect. Tutor answers are designed to use reviewed source material and visible citations, but the service does not provide legal or migration advice. User content is not used by this application to train a general-purpose model.

12. Changes

The current version and effective date will remain visible here. Registered users will be informed of material changes where required.