Privacy Policy
Last updated: 4 September 2026
This Privacy Policy explains how North Tone Media Handelsbolag, the operator of Say it in Swedish, processes personal data.
North Tone Media Handelsbolag is the data controller. Our full company details are available in our Imprint. For privacy questions or requests, contact hej@sayitinswedish.com.
1. What we process and why
Account and membership
When you create an account, we process your email address, an account identifier, login credentials and, where applicable, your display name.
For paid memberships, we receive a Stripe subscription identifier and subscription status. We use this to provide your membership and determine your access. We do not store your card details or billing information.
An email address and password are required to create an account.
Legal basis: performance of our contract with you (Article 6(1)(b) GDPR).
Learning activity
We process information needed to provide the learning features you use, including saved words, vocabulary selections, exercises and answers, practice and review history, progress, scores and similar learning activity.
This information is linked to your account so that your progress can be saved and the learning features can work as intended.
Legal basis: performance of our contract with you (Article 6(1)(b) GDPR).
Product analysis
We analyse how Say it in Swedish is used in order to understand and improve the service. This may include use and completion of features, lessons and exercises, account registrations and membership cancellations.
This analysis is carried out internally, using information the service already generates. It does not create a separate store of data with its own retention period. We use aggregated information where account-level information is not needed.
We do not use a third-party website analytics service and we do not track users across other websites.
Legal basis: our legitimate interest in understanding, maintaining and improving Say it in Swedish (Article 6(1)(f) GDPR).
Comments and member content
If you post comments or other member content, we process the content and the account information needed to display and moderate it.
Legal basis: performance of our contract with you and our legitimate interest in operating and moderating the service (Articles 6(1)(b) and 6(1)(f) GDPR).
AI features
Some features use the OpenAI API.
When you use an AI-powered feature, we send OpenAI the information necessary to provide it: your input, relevant learning context and the generated response. OpenAI processes this information on our behalf under its applicable data-processing terms.
We do not store AI inputs or responses in our database unless you choose to use generated text in content that you save or post.
Please do not enter sensitive personal information into AI features. You do not need to for them to work.
Legal basis: performance of our contract with you (Article 6(1)(b) GDPR).
Access and security logs
Our servers create access logs that may include your IP address, request time, requested resource, browser or user-agent information, and login or security events.
We use these logs to operate and secure the service, diagnose technical problems and detect abuse or attacks.
Legal basis: our legitimate interest in operating and securing Say it in Swedish (Article 6(1)(f) GDPR).
We use your email address for account, security and service-related communications. These are part of providing the service and cannot be opted out of while you have an account.
If we obtained your email address in connection with a purchase, we may also send occasional messages about our own similar products and services where the conditions of Swedish marketing law are met. Otherwise, we send marketing email only where we have the required consent.
Every marketing message includes a way to unsubscribe.
We use Mailgun to deliver email. Mailgun processes what is needed to send and manage messages, including delivery, failure, unsubscribe and spam-complaint events.
Legal basis: performance of our contract for service communications (Article 6(1)(b) GDPR); our legitimate interests where applicable (Article 6(1)(f) GDPR); or consent where required (Article 6(1)(a) GDPR).
2. Your right to object
You can object to processing we base on legitimate interests.
You can always object to direct marketing, and we will stop using your personal data for that purpose.
To object, contact hej@sayitinswedish.com. We will handle your objection in accordance with GDPR.
3. Service providers and international transfers
We use a limited number of external services to operate Say it in Swedish:
- Stripe Managed Payments / Sold Through Link, LLC for purchases, subscriptions and related transaction processing;
- OpenAI for AI-powered features;
- Mailgun for email delivery;
- SoundCloud for some audio content; and
- a hosting provider for our website, application and database.
SoundCloud content is not loaded until you choose to activate it. Once activated, your browser connects to SoundCloud and its own privacy terms apply.
Some providers may process personal data outside the EU/EEA. Where required, such transfers are protected by a mechanism recognised under GDPR, such as an adequacy decision or the European Commission's Standard Contractual Clauses.
You can contact us for details of the safeguards applicable to a particular transfer.
We may also disclose personal data where required by law or where necessary to establish, exercise or defend legal claims.
4. Cookies
Say it in Swedish uses one cookie:
| Cookie | Purpose | Duration |
|---|---|---|
session | Keeps you signed in and identifies your session | 7 days |
This cookie is necessary to provide account access and is not used for analytics or advertising. Because it is necessary, we do not need to ask for your consent.
We do not use analytics or advertising cookies, tracking pixels or similar technologies on the Say it in Swedish website.
SoundCloud may use its own cookies after you choose to load SoundCloud content.
If we introduce non-essential cookies or similar technologies in the future, we will obtain consent where required before using them.
5. How long we keep data
We keep personal data only for as long as necessary for its purpose or as required by law.
| Data | Retention |
|---|---|
| Account and learning information | While your account exists |
| Subscription identifier and status | Until the subscription ends |
| Access and security logs | 90 days |
| AI inputs and responses | Not stored by us unless saved or posted by you |
| Comments and member content | Normally while your account exists |
Learning activity is kept for as long as your account exists because it allows you to review, resume and see your progress.
When you delete your account, identifying account information is deleted or anonymised within 30 days unless we need to retain something for a legal or security reason.
Comments may be detached from your account rather than deleted where necessary to preserve a discussion involving other members.
Learning activity and statistics may be retained after account deletion only once they have been irreversibly anonymised so that they can no longer reasonably be linked to you.
6. Age
You must be at least 13 to have a Say it in Swedish account. We do not knowingly create accounts for younger children.
If you believe a child under 13 has an account, contact us and we will look into it.
7. Your rights
Under GDPR, depending on the circumstances, you have rights including access to your personal data, correction, deletion, restriction, data portability and the right to object to processing based on our legitimate interests.
Where processing is based on consent, you may withdraw that consent at any time.
To exercise your rights, contact hej@sayitinswedish.com. We will respond within the time limits required by GDPR. Requests are normally free of charge.
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or, where applicable, the data-protection authority where you live or work.
We may update this Privacy Policy when our processing changes. The date above shows the current version. If we make a material change, we will inform you before it takes effect where required.