Privacy policy

Who is responsible for your data?

Swed Prime AB, Swedish company registration number 559213-5262, operates Öva Medborgarskap and is the data controller for the data described here. Contact us at hej@ovamedborgarskap.se with questions about your data.

What data do we store?

We process the following data when the service needs it to work:

• Account: name and email address. Supabase handles authentication credentials; we cannot read your password in plain text.
• Study progress: which chapters and questions you have practiced and your results.
• Purchases: payment reference, amount and date. Stripe processes the contact and payment details needed for the purchase. Card details never reach our systems.
• Visitor statistics: after you consent, page views and product events are sent to Google Analytics. The data may include a cookie identifier, browser, device, approximate location and pages visited. We do not send names or email addresses.
• Technical logs: our hosting providers may process data such as IP addresses, browser information and error logs for security and troubleshooting.

Why do we store it?

To fulfil our agreement with you: giving you access to your account, your study material and what you bought (legal basis: contract).

To understand how the service is used and improve it. Google Analytics is used only after you consent (legal basis: consent).

Where is it stored, and who helps us?

We use a small number of providers (data processors):

• Supabase — database and sign-in. Data is stored within the EU (Stockholm).
• Vercel — website hosting and technical logs.
• Google Analytics — visitor and product statistics after you consent. Google may process the data under its data protection terms. Names and email addresses are not sent to it.
• Stripe — payments. Stripe processes payment data under its own privacy policy.
• Google — only if you choose to sign in with Google.

How long is it kept?

Your account and progress are kept until you ask us to delete them.

Purchase records must be kept for seven years under the Swedish Bookkeeping Act.

Your rights

You have the right to:

• know what data we hold about you (subject access)
• have incorrect data corrected
• have your data deleted ("right to be forgotten")
• receive your data in a machine-readable format (data portability)
• withdraw your analytics consent at any time through Cookie settings in the footer
• complain to the Swedish Authority for Privacy Protection (imy.se) if you believe we mishandle your data

Cookies

We use necessary storage for sign-in and to remember your cookie choice. Your language choice is saved locally. A functional cookie also remembers it for up to one year, so the same language can be used when you return or sign in. Google Analytics and its analytics cookies are activated only if you accept them. We do not use Google Analytics for advertising tracking or ad personalisation. You can change your choice through Cookie settings in the footer. If you continue to Stripe or use Google sign-in, their own services and privacy policies also apply.

Deleting your account

Email us at hej@ovamedborgarskap.se from your registered address and we will delete your account and progress. Purchase records are kept for as long as the Bookkeeping Act requires.