Privacy Policy

The data controller is Mohan Chandrasekar, a Swedish sole trader (enskild firma) trading as Corneon AI, company reg. no. SE890629549101, Bangårdsgatan 9, 461 32 Trollhättan, Sweden. Contact us at support@trafikpilot.se about anything concerning your personal data.

Android app (offline-first): your practice results, streak, bookmarks, and settings are stored locally on your device by default. You can use the full theory-exam trainer without signing in, in that case we don't know who you are.

Optional account (web and mobile): if you create one, we store your email, an optional display name, and (with password sign-in) a hashed password. Handled by Firebase Authentication. Signing in is only needed if you want to sync progress across devices or buy Premium on the web.

Profile and progress (only when signed in): your onboarding goal, daily practice results, streak, and bookmarks. Stored in Firestore keyed to your user ID.

Subscription: if you buy Premium via Google Play (Android), payment details are handled by Google Play Billing and entitlement is synced via RevenueCat. On the web, payment goes through Stripe instead. We never see your card number.

Crash reports (Android only): if the Android app crashes, Firebase Crashlytics sends an anonymised report (stack trace + device model + Android version) so we can fix it. No personal information or content from your practice sessions is attached.

AI Coach: your questions and our answers are logged by our AI backend so we can improve answer quality and detect abuse.

We never sell your data and we show no ads. We use one third-party analytics product, Google Analytics, and only if you accept it on the cookie banner. To operate the service we rely on the following data processors, each acting only on our instructions:

Google Cloud (Firebase Authentication, Firestore, App Check, Crashlytics). Sign-in, profile + progress data (when signed in), bot-protection tokens, and crash reports from the Android app. Data is stored in the europe-west1 region (Belgium).

Google Analytics (Google LLC / Google Ireland Ltd). Anonymous usage statistics for the website, loaded only after you accept the Analytics cookie category. Receives a random client ID, the pages you view and your approximate region — never your name, your email address or your answers.

Google Play Billing (Google Ireland Ltd). Android subscriptions. Payment-card details never reach our servers; we receive only the subscription status from Google.

Stripe Payments Europe Ltd. Payment processing and the Customer Portal for web purchases. Data is processed in the European Economic Area; payment-card details never reach our servers.

RevenueCat, Inc.. Subscription-entitlement ledger, keeping Premium status in sync between the web and our mobile apps. RevenueCat is based in the United States; see the next section for the safeguards we rely on.

Vercel. Hosts the website edge and serverless functions. Acts as a transmitter; does not store your account data.

Cloudflare Inc.. Hosts our Content API (cdn.trafikpilot.se), bot mitigation, and rate limiting. All content traffic from both web and Android goes through Cloudflare's network.

Resend, Inc.. Sends our transactional email: verification, password reset and order confirmations. Receives your email address, your name and the contents of the message. Resend is based in the United States; the sending infrastructure itself sits inside the EEA (Ireland). See the next section for the safeguards we rely on.

Our AI Coach backend (chat.trafikpilot.se). Operated by Corneon-AI; receives your question text + a short-lived auth token, returns the answer.

Each provider has a Data Processing Agreement in place with us; copies are available on request from support@trafikpilot.se.

Most of your data stays inside the European Economic Area. Firebase is configured to the europe-west1 region (Belgium), Google Play Billing is operated by Google Ireland Ltd, and Stripe processes payments via its Irish entity.

Google LLC (parent of Firebase Authentication, Firestore, Crashlytics, and Google Analytics), RevenueCat, and Cloudflare are based in the United States. Transfers to these recipients are made under the EU-US Data Privacy Framework (DPF), under which the U.S. provides an adequate level of protection for personal data of EU/EEA residents.

Resend, Inc. (transactional email) is also based in the United States. Sending is handled on infrastructure inside the EEA (Ireland), and the transfer is covered by Standard Contractual Clauses; a copy is available on request.

You can request a copy of the relevant transfer safeguards (Standard Contractual Clauses or DPF certification) by emailing support@trafikpilot.se.

Under the GDPR you have the right to: access the data we hold about you, have it corrected if wrong, export it in a machine-readable format, have it erased ('right to be forgotten'), restrict or object to processing, and withdraw any consent you previously gave.

If you use the Android app without signing in, all data lives locally on your device. Uninstall the app or use 'Clear data' in system settings and it is gone entirely. We hold no copy.

If you are signed in, most rights are available directly in the app: Account → Data lets you download your data, and Account → Danger Zone lets you delete your account and all associated personal data (active subscriptions are cancelled at the same time).

For any request the app doesn't surface (restriction, objection, or a copy of our records) email support@trafikpilot.se. We respond within 30 days, as required by GDPR Article 12. If you're not satisfied with our response, you can lodge a complaint with the Swedish data-protection authority Integritetsskyddsmyndigheten (IMY) at imy.se.

We use only the cookies and local-storage items required to run the service, plus Google Analytics if you accept it. Sign-in, language, theme, security, payment-flow. We do not use advertising cookies.

A full inventory with each item's name, purpose and lifetime is on the Cookie Policy page.

Android app without sign-in: no data leaves your device. We retain nothing.

Active accounts: profile, progress, and AI-coach history live for as long as your account exists.

Account deletion: when you delete your account from Account → Danger Zone, your profile and practice data are removed immediately. Active subscriptions are cancelled at the same time.

Billing records: Stripe (web purchases) and Google Play Billing (Android purchases) are required by Swedish and Irish accounting law to retain invoice + transaction history for 7 years, even after the customer object is deleted. We don't have a way to override that retention.

Crash reports: Firebase Crashlytics retains crash data for up to 90 days and then deletes it automatically.

Backups: encrypted infrastructure backups may retain a deleted account for up to 30 days before they roll over.