Privacy Policy

1. Information We Collect

We collect only what is necessary to provide the service:

• Email address — used to create and identify your account.
• Password — stored as a salted hash; we never store your plain-text password.
• Learning progress — quizzes completed, streak days, and words learned, so your progress is saved across devices.
• Verification codes — temporary 6-digit codes sent to your email for account verification and password reset. These expire after 10 minutes.
• Purchase receipts — if you subscribe to Medborgare Premium, the transaction is processed entirely by Apple (App Store) or Google (Google Play). We only record whether your account has an active premium subscription; we do not receive or store your payment card details.

2. How We Use Your Information

• To create and authenticate your account.
• To deliver and personalise the learning experience.
• To send transactional emails (verification codes, password resets). We do not send marketing emails.
• To grant or restrict access to premium content based on your subscription status.
• To improve the App by analysing aggregated, anonymised usage patterns.

3. Data Sharing

We do not sell, rent, or trade your personal information. We may share data only in these limited circumstances:

• Service providers — we use third-party providers for email delivery. They process your email address solely to send transactional messages on our behalf.
• App stores — Apple App Store and Google Play process subscription payments under their own privacy policies.
• Legal requirements — we may disclose information if required by law or to protect the rights and safety of our users.

4. Data Retention

We retain your account data for as long as your account is active. Expired verification codes are stored briefly for audit purposes and then deleted. If you delete your account, all associated personal data (email, progress, session tokens) is permanently deleted from our servers within 30 days.

5. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (you can do this directly in the App via Profile → Delete account).
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at support@medborgare.site.

6. Security

We use industry-standard measures to protect your data, including HTTPS for all data in transit, password hashing with PBKDF2-HMAC-SHA256, and access controls on our servers. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

The App is not directed at children under 13 (or under 16 in the European Union). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

8. International Transfers

Medborgare is operated from Sweden. If you access the App from outside the European Economic Area, your data may be transferred to and processed in Sweden, which is subject to GDPR protections.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via the App or by email before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

10. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us: