Privacy policy

Mathieu Guicheteau EI, sole trader (entrepreneur individuel). SIRET 890 467 723 00031 · RCS Paris 890 467 723.

Registered office: 6 rue d'Armaillé, 75017 Paris, France. Contact: hej@svenska.app

The business is not required to appoint a data protection officer; your requests go straight to the address above.

The whole course works without signing up. In that case your progress — lessons finished, words learnt, streak, hearts — is kept only in your browser's local storage, on your device. It is never sent to us, and clearing the site's data erases it for good.

You sign in so your progress follows you between devices. Google then passes us three things: your email address, the name on the account, and the profile picture. We never receive your password.

We then keep your progress on our servers: lessons finished, exercises passed and missed, scores, the vocabulary you have met and how well you remember it, streak, XP, the goal you chose and the day's quests.

Lawful basis: performing the service you asked for. Without this data, cloud saving has no purpose.

The social features — leaderboard, friends, challenges — show others your username if you chose one, and otherwise your first name followed by the initial of your last name. Your full name is never published, and your email address is never shown to another learner.

The “public profile” setting on your profile page takes you out of the rankings and out of search. Somebody who already knows your exact address can still add you as a friend: knowing it is the evidence that they know you.

We only email a newsletter to people who asked for one. Signing in with Google is not agreement to receive it: you have to turn on the setting on your profile, or ask for a free sheet.

We then record your address, the language you chose, the date you agreed and what was being offered at the time — the proof of your consent and of what it was for. Every message carries a one-click unsubscribe link, and the profile setting can be turned off at any moment.

These emails are carried by Brevo, which measures opens and clicks so we know whether the letter is read. The site itself measures nothing.

Lawful basis: your consent, which you can withdraw as easily as you gave it.

The forms that send email are rate limited. The counter stores a cryptographic digest of the address or IP, never the value itself: the table holds digests, not people.

Lawful basis: our legitimate interest in not having our domain used to send unsolicited mail.

If you use the tutor, what you write to it is sent to a language model provider so it can answer: OpenAI, L.L.C. (United States) or Anthropic PBC (United States), depending on how the service is configured. What is sent: your message, the last twelve turns of the conversation, your level, the lessons you recently finished, the words still fragile, the mistakes already corrected, and whatever you have written about your own situation.

That text, the one you type into "Tell the tutor about you", is the most personal thing in this service. It is optional, capped at 300 characters per answer, and you can change or delete it from your profile at any moment. Write nothing and nothing of the sort is sent.

Your conversations with the tutor are stored in our database so you find them again from one device to the next: the last sixty turns are kept, older ones are deleted on every new exchange, and "Start a new conversation" erases all of it immediately.

Lawful basis: performance of the contract, since this is the feature you asked for. The transfer to the United States is covered by the European Commission's standard contractual clauses.

When you report an exercise with the flag in a lesson, we record which exercise, the reason you picked, your comment if you wrote one, the interface language, and your address only if you are signed in. That is what lets us fix it, and answer you.

Lawful basis: our legitimate interest in repairing what is broken in the course.

Payment is handled by Stripe Payments Europe, Ltd. (Ireland). No card detail passes through this site or is stored by us: the payment page is Stripe's own.

We keep your address, the customer and subscription identifiers Stripe gives us, the status of the subscription, the plan, and the end date of the period you paid for. That is the minimum needed to know who has access to what, and until when.

Lawful basis: performance of the contract, and our accounting obligations for invoices.

One cookie is set without asking, and only if you sign in: the one that keeps your session open. It is strictly necessary to the service.

No advertising cookie, no advertising tracker, no profiling.

That leaves audience measurement. This site uses Google Analytics to see which pages people arrive on. It is not exempt from consent, so nothing is loaded until you answer: refusing sends no request to Google at all, and refusing is exactly as easy as accepting, one button each. Your answer is kept in your browser's local storage rather than in a cookie, and you can change it at any time from this page.

Vercel Inc. (site hosting, United States); Neon Inc. (database, hosted in the European Union); Brevo — Sendinblue SAS (email delivery, France); Google Ireland Ltd. (sign-in, only if you use it; and audience measurement, only if you accept it); Stripe Payments Europe, Ltd. (payment, Ireland, only if you subscribe); OpenAI, L.L.C. or Anthropic PBC (the conversation tutor, United States, only if you use it).

Each acts on our behalf and on our instructions. The transfers to the United States, for hosting as for the tutor, are covered by the European Commission's standard contractual clauses.

Your data is not sold, rented, or passed to advertisers. There are none on this site.

Your account and progress are kept for as long as the account exists. Ask for deletion and all of it goes.

A newsletter address is kept until you unsubscribe, then for up to three years, so that consent having been given and withdrawn can be proved.

The anti-abuse counters are kept with no time limit, as a cryptographic digest of the address: they are what makes the sending limits, the tutor's free trial and the weekly-review opt-out hold. The table contains no address in the clear.

Tutor conversations are capped at the last sixty turns. Exercise reports are kept for as long as it takes to fix what was reported.

You may ask for access to your data, its correction, its erasure, its portability, a restriction on its processing, and you may object to processing based on our legitimate interest. You may withdraw your consent to the newsletter at any time.

One address for all of it: hej@svenska.app. We answer within one month.

If our answer does not satisfy you, you can complain to the French data protection authority, the CNIL (cnil.fr), 3 place de Fontenoy, 75007 Paris, or to the authority in your own country.

The service is meant for people aged 15 and over. Below that age, creating an account needs a parent's agreement. The course itself can be used without an account, at any age.

This page carries the date it was last changed (2026-09-09). A change that genuinely affects you will be announced by email if you have an account.