Privacy policy

Last updated: 30 October 2026

Taleb is operated by Sendebad AB, a company registered in Sweden. This policy explains what data we collect when you use the app or the website, why, who processes it for us, and how you control it.

For privacy questions or data requests, write to [email protected].

What we collect

• Account data: when you register with email we keep your email, name and a hashed form of your password (never the password itself). Older accounts may be registered with a phone number instead of an email.
• Google sign-in: we receive your Google account identifier, email address, its verification status and your name. We never receive your Google password and do not ask for access to your mail, contacts or files.
• Sign in with Apple: we receive your Apple account identifier and email (or the relay address Apple gives you instead), and your name once, at the first sign-in.
• Study level: the school year and track (scientific or literary) you choose when you start, so the app shows the right subjects.
• Device and session: an identifier for the current installation on your device and session tokens, used to manage sign-in (an account works on one device at a time). If you allow notifications we also keep your device's push token.
• Study activity: your answers, exam results and progress, favourites, notes, content downloaded for offline use, and the error reports or support requests you send from the app.
• Crash reports: when a technical error happens the app may send a report with the device model, operating system, app version and a description of the error. It does not include your name or email.
• Connection data: when you connect to our servers, technical connection data such as your IP address and device type is processed to run and secure the service.

Why we use it

• To run your account and sign-in, show content for your level, keep and sync your progress when you change device.
• To send notifications about new content, if you allow them.
• To answer support requests and handle error reports.
• To protect the service from abuse, such as sharing accounts.
• To improve the app's stability through crash reports.

We do not sell your data, show ads, or track you across other apps or websites.

Providers we rely on

The service runs on a server operated by the company in Sweden with local backups. The following providers process parts of the data on our behalf, and their servers may be outside your country:

• Cloudflare: carries and protects the connection between your device and our servers, and processes technical connection data.
• Google: Google sign-in, notification delivery through Firebase Cloud Messaging, and on Android reading QR codes through ML Kit, which may send diagnostic data about the device and app to Google under Google's privacy policy.
• Apple: Sign in with Apple, and notification delivery on iPhones.
• Resend: sending emails such as verification codes, password resets and the account-deletion notice.
• Sentry: receiving technical crash reports.

Notifications

Notifications are optional. You can decline them when first asked or turn them off later in the device settings. Messages stay available in the inbox inside the app. The push token is deleted when you sign out or delete the account.

What stays on your device

The app keeps session tokens, a copy of the content you downloaded for offline use, and some settings on your device. They are removed when you sign out or uninstall the app. Screenshots are blocked by default to protect the content.

Retention and deletion

We keep your account and activity data for as long as the account exists.

You can delete your account inside the app: Settings → Delete account. The account is frozen for 30 days, during which signing in again cancels the deletion; after that it is permanently deleted together with its study data. We send an email confirming the deletion date.

You can also request deletion at taleppretest.com/account-deletion or by writing to [email protected], even after uninstalling the app or if you cannot sign in. We may need to verify that you own the account.

After deletion a copy may remain in protected backups for up to 30 more days; backups are not used to operate the account. Operational logs keep only a reference to the student number, with no name, email or phone.

Uninstalling the app or disconnecting Google or Apple alone does not delete your account.

Your rights

You can access, correct and delete your data and object to its processing. Write to [email protected] and we answer within 30 days. Because the company is registered in Sweden, you can also complain to the Swedish Authority for Privacy Protection (IMY).

Students under 18

The app is made for secondary-school students. We do not knowingly create accounts for children under 13. A parent or guardian can contact us to see or delete a student's data.

Security

All traffic between the app and the server is encrypted with HTTPS, passwords are stored hashed, and an account works on one device at a time. Only administrators authorised to run and support the service can see student data.

Changes to this policy

When we change the policy we publish the new version in the app and on the website with its date, and tell you inside the app if the change is significant.