Privacy policy
This is how we handle your personal data. We collect as little as possible.
Who is responsible
The data controller is Carl Isedor, enskild firma, Högomsvägen 32, 857 40 Sundsvall, org.nr 010812-4090. Email: info@integreranu.se.
What data we process
Account: email address, a password hash (never the password in plain text), subscription, customer number and subscription ID at Stripe.
Login: IDs for up to two signed-in devices, so that the device limit works.
Family: the owner of a family plan sees the email addresses of the members.
Purchase: the time you gave your consent at purchase is stored at Stripe together with the purchase.
Reading progress: which modules you have ticked as read.
Protection against misuse: temporary counters per account when you are logged in, and per IP address when you log in, register or search without an account. When a limit is reached, a timestamp is stored. It is removed when you delete your account.
Contact: what you write to us.
Why, and on what legal basis
Account, Premium, purchases and email confirmations: to fulfil the contract with you (GDPR article 6(1)(b)).
Protection against bulk downloads and attacks: our legitimate interest in protecting the content and the service (article 6(1)(f)).
Bookkeeping: legal obligation (article 6(1)(c)).
Who receives the data
Cloudflare runs the website and stores account data for us (processor). Stripe handles payments; for card and payment details, Stripe is an independent controller according to stripe.com/privacy. We never sell data and do not use it for advertising.
Transfers outside the EU
Cloudflare and Stripe may process data in the USA. Both are certified under the EU-U.S. Data Privacy Framework (DPF). If the framework does not apply, transfers are made with the European Commission’s standard contractual clauses (SCC).
How long we keep it
Account data and reading progress: until you delete the account. Login: at most 30 days per device. Counters against misuse: from 15 minutes up to one day. Receipts and payment records: seven years after the end of the calendar year in which the payment was made (Bookkeeping Act, chapter 7, section 2).
Cookies and storage on your device
We use one necessary cookie for login (__Host-ig_session, at most 30 days). Your browser also stores your language choice, light or dark mode, that you have closed the cookie notice or the campaign notice, a short login status for the tab, and pages for offline use. All of this is needed for features you choose yourself, so we do not need consent (Electronic Communications Act, chapter 9, section 28). We do not use tracking or advertising cookies.
Your rights
You have the right to find out what data we hold about you, to have it corrected or deleted, to ask for restriction, to object, and to get your data in a machine-readable format (GDPR articles 15–21). You can delete your account yourself under Account. Write to support@integreranu.se for other questions; we reply within one month.
You can complain to the Swedish Authority for Privacy Protection (IMY), imy.se.
Practice questions and read-aloud
Answers to practice questions are not stored. Read-aloud uses your device’s built-in voice, and the text is not sent to us.