Privacy Policy

Who we are

Nordeaster AB operates svenskpass and is the data controller for the personal data described in this notice. svenskpass is an independent educational platform that helps people prepare for the Swedish citizenship test. We are not affiliated with Migrationsverket or any Swedish government authority.

What we collect

• Account data: email address, chosen language, and (optionally) display name.
• Study data: your practice answers, attempts, progress and streaks.
• Technical data: standard server logs (IP address, browser type, timestamps) used to keep the service secure and reliable.
• Support data: messages and information you send when asking for help.
• Payment and subscription data: Paddle handles payment details as Merchant of Record. We receive limited order, plan and subscription-status information.

How we use your data

• Contract performance: to create your account, provide personalised practice, process subscription access and track progress.
• Legitimate interests: to operate, secure, prevent fraud, analyse and improve the service.
• Consent: to send optional communications or use non-essential cookies where you have agreed.
• Legal obligation: to retain records and respond where the law requires us to do so.

We do not sell your data and we do not share it with advertisers.

Who we share data with

We share personal data only where needed with:

• hosting, authentication, analytics and support service providers;
• Paddle, our Merchant of Record, for product sales, payments, subscription management, tax compliance, invoicing, customer service and refunds;
• professional advisers such as legal and accounting providers; and
• courts, regulators or authorities where disclosure is required by law.

Cookies

We use essential cookies for authentication, security and preferences. We may use analytics cookies to understand use and improve the service only where permitted. We do not use third-party advertising cookies. You can control non-essential cookies through any consent controls we provide and through your browser settings.

Your rights

Under the GDPR, you may request access, correction, erasure, restriction or portability of your personal data, object to processing, and withdraw consent where processing relies on consent. You may also complain to the Swedish Authority for Privacy Protection (IMY). Email connect@nordeaster.io and we will normally respond within one month.

Data retention

We keep account and study data while your account is active and only as long afterward as needed for the purposes above or legal obligations. When you delete your account, personal data is normally deleted within 30 days, except records we must retain by law and anonymised statistics. Data that is no longer needed is deleted or anonymised.

International transfers

Some providers may process data outside Sweden or the EEA. Where this occurs, we use lawful safeguards such as an adequacy decision or the European Commission's Standard Contractual Clauses.

Security

We use appropriate technical and organisational measures, including access controls, encrypted connections and restricted administrative access, to protect personal data. No online service can guarantee absolute security.

Contact

Privacy questions or rights requests may be sent to Nordeaster AB at connect@nordeaster.io.