provappen
እቶ

Privacy Policy

2026-07-20

This policy explains how Provappen (provappen.se) processes your personal data. This English version is provided for information only; the Swedish version governs. The controller is Sava Labs Ltd, registered in England and Wales (Companies House no. 16124943), Unit 13 Freeland Park, Wareham Road, Lytchett Matravers, Poole BH16 6FA, United Kingdom. You can reach us at [email protected].

1. Data we process

  • Account: your email address and login history (one-time codes, no passwords).
  • Study activity: your answers, results, and progress in the Service.
  • Purchases: which plan you bought, the amount, and the time of purchase. Card details are handled by our payment provider and never reach us.
  • Technical data: data needed for operation and security, such as IP address and browser type in server logs.
  • Analytics and marketing: only with your consent via the cookie banner.

2. Purposes and legal bases (GDPR)

  • Providing the Service and your account: contract (Art. 6(1)(b)).
  • Handling purchases and access: contract (Art. 6(1)(b)) and legal obligation for bookkeeping (Art. 6(1)(c)).
  • Responding to support requests: contract and legitimate interest (Art. 6(1)(b) and (f)).
  • Operations, troubleshooting, and security: legitimate interest (Art. 6(1)(f)).
  • Analytics and marketing: consent (Art. 6(1)(a)); you can withdraw it at any time in the cookie settings.

3. Recipients and storage

Your data is stored within the EU. We only share data with the categories of providers needed to run the Service: hosting (EU), payment processing, email delivery, and, with your consent, analytics and marketing services. Providers process data under data processing agreements. Where a provider processes data outside the EU/EEA, this happens under a valid transfer mechanism under GDPR, such as the European Commission's standard contractual clauses.

4. Retention

Account data and study activity are kept for as long as your account exists. You can request deletion of your account, at which point the data is deleted or anonymized. Purchase records are kept for as long as bookkeeping law requires. Server logs are deleted on a rolling basis.

5. Your rights

You have the right to access, rectification, erasure, restriction, data portability, and to object to processing based on legitimate interest. Write to [email protected]. You also have the right to complain to a supervisory authority; in Sweden this is the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY, imy.se).

6. Cookies

Necessary cookies are used for login and core functionality. Analytics and marketing cookies are set only after consent in the cookie banner, where you can also see which services are involved and change your choice.

7. Changes

We may update this policy. Material changes will be announced on the site. The date above shows when the policy was last changed.