Privacy Policy

Last Updated: 2025-01-01

At Kör Kit, we take your privacy seriously. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website, mobile applications, and related services (the "Service").

This Privacy Policy is designed to comply with the EU General Data Protection Regulation (GDPR) and Swedish data protection laws.

1. Data Controller

The data controller responsible for your personal information is:

Remix AB

Organization Number: FIXME: add tax number
Address: FIXME: add business address
Email: [email protected]

If you have questions about how we handle your data, please contact us using the information above.

2. Information We Collect

We collect different types of information to provide and improve our Service.

2.1 Information You Provide

Account Information

  • Name
  • Email address
  • Password (encrypted)
  • Language preference (Swedish or English)
  • Profile settings

Payment Information

  • Billing details are processed through our payment processor (Stripe)
  • We do NOT store your full credit card details on our servers
  • We receive limited payment information (last 4 digits, card type, expiration date) for record-keeping

Communications

  • Messages you send to our support team
  • Feedback and survey responses

2.2 Information We Collect Automatically

Learning Data

  • Lessons completed and progress
  • Test scores and performance statistics
  • Streak information and achievements
  • Time spent on lessons and exercises
  • Answers to practice questions

Usage Information

  • Pages you visit and features you use
  • Time and date of your visits
  • Referring website or source
  • Device information (browser type, operating system, device type)
  • IP address and general location (country/city level)

Cookies and Tracking Technologies

  • We use cookies and similar technologies to recognize you and improve your experience
  • See Section 9 for more details on cookies

2.3 Information from Third Parties

Social Login (if applicable)

  • If you sign up using a social media account, we receive basic profile information (name, email) from that service

Payment Processors

  • Stripe provides us with payment confirmation and subscription status

3. How We Use Your Information

We use your information for the following purposes:

3.1 To Provide the Service

  • Create and manage your account
  • Deliver lessons, exercises, and learning content
  • Track your progress and personalize your learning experience
  • Process payments and manage subscriptions
  • Provide customer support
  • Send transactional emails (account confirmations, password resets, receipts)

Legal Basis

Performance of a contract (GDPR Article 6(1)(b))

3.2 To Improve the Service

  • Analyze how users interact with the Service
  • Identify and fix bugs and technical issues
  • Develop new features and content
  • Conduct research and analytics

Legal Basis

Legitimate interests (GDPR Article 6(1)(f)) - improving our Service

3.3 To Communicate with You

  • Send important updates about the Service
  • Respond to your questions and support requests
  • Send marketing emails about new features or offers (with your consent)

Legal Basis

  • Transactional emails: Performance of a contract (GDPR Article 6(1)(b))
  • Marketing emails: Consent (GDPR Article 6(1)(a)) - you can unsubscribe anytime

3.4 To Ensure Security and Compliance

  • Prevent fraud and abuse
  • Enforce our Terms of Service
  • Comply with legal obligations
  • Protect the rights and safety of our users

Legal Basis

Legal obligation (GDPR Article 6(1)(c)) and legitimate interests (GDPR Article 6(1)(f))

4. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

4.1 Service Providers

We work with third-party companies to help us operate the Service:

Payment Processing

Analytics

Email Services

Hosting and Infrastructure

These service providers have access to your information only to perform tasks on our behalf and are obligated to protect your data.

4.2 Business Transfers

If Kör Kit is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred and becomes subject to a different privacy policy.

4.3 Legal Requirements

We may disclose your information if required by law or in response to:
- Court orders or legal processes
- Requests from government authorities
- Protection of our rights, property, or safety
- Prevention of fraud or illegal activity

4.4 With Your Consent

We may share your information for other purposes with your explicit consent.

5. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy.

Account Data

  • Retained while your account is active
  • Deleted within 90 days of account deletion (unless we have a legal obligation to retain it longer)

Learning Data

  • Retained while your account is active to track your progress
  • Deleted when you delete your account

Payment Records

  • Retained for 7 years to comply with Swedish tax and accounting laws

Analytics Data

  • Aggregated and anonymized data may be retained indefinitely for research purposes

You can request deletion of your account and data at any time (see Section 7).

6. International Data Transfers

Kör Kit is based in Sweden, and our servers are located in the European Union (Hetzner data centers). However, some of our service providers (such as Stripe) may transfer data outside the EU.

When we transfer data outside the EU, we ensure adequate protection through:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy Decisions for countries recognized by the EU as providing adequate data protection
- Other appropriate safeguards required by GDPR

7. Your Rights Under GDPR

As a user in the European Union, you have the following rights regarding your personal information:

7.1 Right of Access

You can request a copy of the personal information we hold about you.

7.2 Right to Rectification

You can request that we correct inaccurate or incomplete information.

7.3 Right to Erasure ("Right to be Forgotten")

You can request that we delete your personal information, subject to certain exceptions (e.g., legal obligations).

7.4 Right to Restriction of Processing

You can request that we limit how we use your information in certain circumstances.

7.5 Right to Data Portability

You can request a copy of your data in a structured, machine-readable format to transfer to another service.

7.6 Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

7.7 Right to Withdraw Consent

If we process your data based on consent, you can withdraw that consent at any time.

7.8 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority:

Swedish Authority for Privacy Protection (IMY)

Website: https://www.imy.se
Email: [email protected]

7.9 How to Exercise Your Rights

To exercise any of these rights, please contact us at:
- Email: [email protected]
- Account Settings: You can access, update, or delete some information directly through your account settings

We will respond to your request within 30 days.

8. Account Settings and Controls

You have control over your information:

Account Settings

  • Update your name, email, and preferences
  • Change your password

Email Preferences

  • Unsubscribe from marketing emails (link at the bottom of each email)
  • You will still receive transactional emails necessary for the Service

Delete Your Account

  • You can delete your account at any time through account settings
  • This will permanently delete your learning progress and personal information (within 90 days)

9. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your experience and analyze usage.

9.1 Types of Cookies We Use

Essential Cookies

  • Required for the Service to function (authentication, security)
  • Cannot be disabled

Analytics Cookies

  • Posthog analytics to understand how users interact with the Service
  • Help us improve features and fix bugs

Preference Cookies

  • Remember your language and settings

9.2 Managing Cookies

You can control cookies through your browser settings. Note that disabling essential cookies may affect your ability to use the Service.

Browser Controls

  • Chrome: Settings > Privacy and security > Cookies
  • Firefox: Settings > Privacy & Security > Cookies
  • Safari: Preferences > Privacy > Cookies

Analytics Opt-Out

  • You can opt out of Posthog analytics through your account settings or by contacting us

10. Security

We take reasonable measures to protect your information from unauthorized access, loss, or misuse:

  • Encryption: Data is encrypted in transit (HTTPS/TLS) and at rest
  • Access Controls: Limited employee access on a need-to-know basis
  • Secure Infrastructure: Hosting with reputable providers (Hetzner)
  • Regular Security Reviews: We monitor for vulnerabilities and threats

However, no system is 100% secure. If you believe your account has been compromised, contact us immediately at [email protected].

11. Children's Privacy

Kör Kit is intended for users aged 16 and older. We do not knowingly collect personal information from children under 16.

If you are a parent or guardian and believe your child under 16 has provided us with personal information, please contact us at [email protected]. We will delete such information promptly.

12. Third-Party Links

The Service may contain links to third-party websites or services (e.g., Trafikverket, social media). We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

When we make material changes:
- We will update the "Last Updated" date at the top
- We will notify you via email or through the Service
- We may require you to accept the updated policy to continue using the Service

We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Remix AB

Organization Number: FIXME: add tax number
Address: FIXME: add business address
Email: [email protected]

Summary

We collect your account information, learning progress, and usage data to provide and improve Kör Kit. We share data only with trusted service providers (Stripe, Posthog, email services, Hetzner hosting) and never sell your information. You have full GDPR rights to access, correct, or delete your data. We use cookies for essential functions and analytics. Contact us with any privacy questions.