Skip to content
TeoriPilot

Privacy policy

Last updated: 2026-10-03

This policy explains what personal data TeoriPilot collects, why, who it is shared with, how long it is kept and what rights you have. It applies to the website and the course.

Who is responsible

Viswanth Bhagavatula (organisation number 19910912-1294), Astrid Lindgrens väg 6G, 224 66 Lund, Sweden, is the controller of your personal data. Contact: teoripilot@outlook.com.

What we collect and why

  • Account: your name, email address and password. The password is stored only as a scrambled (hashed) value that cannot be turned back into the password. If you sign in with Google, we receive your name and email address from Google instead of a password. Purpose: to create and run your account (performance of our agreement with you).
  • Email verification: a one-time code that we email to you. It is stored hashed and expires after 15 minutes. Purpose: to confirm that the email address is yours (agreement).
  • Learning progress: which lessons and scenarios you have opened, your answers and scores in quizzes and practice tests, your review list and study-plan settings. When you are signed in, this is saved to your account so it follows you between devices. Purpose: to provide the course (agreement).
  • Purchases and access: which pass or extension you bought, when, what you paid, the dates of your access, the time you confirmed that access should start straight away, the gift or school codes you bought or redeemed, and, if you use the pass guarantee, the date of the theory test you report. Card and other payment details are entered in Stripe’s payment form and handled by Stripe; we never see or store them. Purpose: to provide paid access (agreement) and to keep accounting records (legal obligation).
  • Sign-in session: a cookie with a random session ID that keeps you signed in for up to 30 days. Purpose: to provide the service securely (agreement).
  • Technical data: IP address, browser type and the time of requests, recorded by our hosting provider when you use the site. Purpose: security, preventing abuse and fixing faults (our legitimate interest in running a safe service).

We do not sell your data, and we do not use it for advertising. The site has no analytics or advertising trackers.

Who we share data with

We use these service providers, who process data on our behalf and only on our instructions:

  • Vercel — hosts the website and server.
  • Neon — stores the database (accounts, purchases, codes and synced progress).
  • Resend — sends verification emails and the gift codes you buy.
  • Stripe — takes payments (for example by card, Klarna or Swish, depending on what is offered in the payment form). For some purposes, such as preventing fraud and meeting financial regulations, Stripe and the payment method provider are themselves responsible for the data under their own privacy policies.
  • Google — only if you choose “Sign in with Google”.

Some of these providers are based in, or use services in, the USA. Where data leaves the EU/EEA, the transfer relies on the EU–US Data Privacy Framework or on the EU’s standard contractual clauses.

We may also disclose data if the law requires it, for example to a public authority.

How long we keep it

  • Account and progress: for as long as you have an account. If you ask us to delete your account, we delete it within 30 days.
  • Accounting records about payments, including purchases and gift codes: 7 years, as required by the Swedish Bookkeeping Act (bokföringslagen). If you delete your account, these records are kept without being linked to it.
  • Verification codes: 15 minutes. Sign-in sessions: up to 30 days, or until you sign out.
  • Technical logs: kept by the hosting provider for a limited period for security and troubleshooting.

Cookies and storage in your browser

We use one cookie, which is necessary to keep you signed in. We also use your browser’s local storage to keep your progress, language and settings on your device. We use no cookies for analytics or advertising, so we do not ask for cookie consent.

Stripe sets its own necessary cookies in the payment form to prevent fraud. Google sets cookies only if you use “Sign in with Google”.

Your rights

You have the right to get a copy of your personal data, to have wrong data corrected, to have data deleted, to restrict or object to some processing, and to receive data you gave us in a machine-readable format (data portability).

To use your rights, email teoripilot@outlook.com. We reply within one month.

If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), imy.se.

Children

You need to be at least 13 years old to create an account. If you are under 18, you need a parent’s or guardian’s permission to buy a pass.

Changes to this policy

If we change how we handle personal data, we update this page and the date below. If the change matters for you, we tell you by email or on the site before it applies.