1 – Who is the data controller?

Studeni AB, corporate ID no. 559524‑2164, is the data controller for all processing of personal data described in this policy. Postal address: Polonäsvägen 11, 352 45 Växjö, Sweden Email for privacy matters: info@studeni.se

2 – Summary

We process as little personal data as possible: primarily your email address and any content you upload yourself (e.g. presentations, notes, questions and feedback). The purpose is to deliver our AI‑based study service, handle
payments and communicate with you as a customer. We never sell your personal data, and we currently use no cookies for marketing or third‑party analytics.

3 – What personal data we process

Account details ,What: email address, Source: provided by you when you registerLegal basis: performance of a contract (Article 6.1 b GDPR)User‑generated content What: files you upload, AI‑generated notes, questions, feedbackSource: created by you or by the service during useLegal basis: performance of a contractPayment and transaction dataWhat: payment token, payment status, receipt dataSource: obtained from our payment service provider StripeLegal basis: performance of a contract and legal obligation under the Swedish Accounting ActBasic system logsWhat: IP address, timestamps and similar operational and security dataSource: generated automatically by our systemsLegal basis: legitimate interest (operation and security)We do not intentionally process special categories of personal data (Article 9 GDPR). If such data is uploaded, we delete or anonymise it.

4 – Purposes of the processing

Provide the service – create and manage your account, generate AI content and store your materials.Payment processing – carry out and verify your subscription payments.Communication and support – send important messages, answer questions and handle cancellations.Security and abuse prevention – logging, troubleshooting and access control.

5 – Sharing of personal data

We share personal data only with the recipients below, and only to the extent necessary:Stripe Payments Europe (Ireland/USA) – processes subscription payments. Any transfer is governed by the European Commission’s Standard Contractual Clauses (SCC).Digital ocean (within the EU/EEA) – hosts and operates our platform under a data‑processing agreement.If data is transferred to a country outside the EU/EEA, we always rely on valid safeguards such as the SCC.

6 – Storage periods

Your account and user‑generated content are retained while the account is active and for no more than twelve (12) months after termination, or until you request erasure.Transaction and accounting data are kept for seven (7) years in accordance with the Swedish Accounting Act.System logs are stored only as long as needed for security and troubleshooting, normally no longer than thirty (30) days.

7 – Your rights

You may at any time:request access to your personal data,request rectification or erasure,request restriction of processing,object to processing based on legitimate interest,receive your data in a portable format,lodge a complaint with the Swedish Authority for Privacy Protection (IMY).Contact us via the email address above; we normally respond within 30 days.

8 – Security

We employ both technical and organisational measures to protect your data, including encryption at rest and in transit, role‑based database access, two‑factor authentication for administrators, and regular penetration testing.

9 – Minors

The service is intended for adult users. We do not actively verify age, but if we learn that a child under 13 has registered, the account will be deleted immediately.

10 – Cookies

The website currently uses no cookies for marketing or third‑party analytics. Only a strictly necessary session cookie is set, and it is deleted when you log out or close your browser. 11 – Changes to this policy We may update this policy when necessary. The latest version is always available on our website. For material changes, we will notify you by email or within the service. Contact us If you have questions about how we process personal data, please email info@studeni.se.