Privacy policy

Data controller

LAGA CO AS, Møllergata 8, 0179 Oslo, Norge, organisation number 938 176 663. For any question about your data: personvern@nyhem.eu.

Without an account, nothing leaves your device

Your answers, results, flashcards and preferences (test date, language, time per day) are stored in your browser, with a random device identifier. They are not sent to us.

You can delete them at any time in Settings, "Delete my progress", or by clearing this site’s data in your browser.

What we process, why and for how long

• Account and sign-in: email address, creation date, sessions (token, expiry date, IP address and browser at sign-in), one-time codes. Basis: performance of the contract. Retention: a code expires after 10 minutes, a session after 90 days without use, the account stays until you delete it.
• Synced progress (when signed in): answers (question, right or wrong, date), mock tests, flashcards, preferences. Basis: contract. Retention: until the account is deleted.
• Purchases, passes and guarantee: email, pass, amount, currency, payment reference, dates, status and, for the guarantee, the date and result of the official test that you declare. Basis: contract, and the legal accounting obligation for purchase records. Retention: until the account is deleted; purchase records are kept without your email for as long as Norwegian accounting law requires.
• Oral correction: the recording of your voice is only used to produce the transcript. It is never stored, neither on our servers nor on your device, and it is discarded as soon as it is transcribed. Only the transcript, the question and the target level are sent to the correction service, without your email or any identifier. The result is shown to you and not kept on our servers. Basis: contract.
• Error reports: the question, the language, your message and the random device identifier. Basis: legitimate interest (content quality). Retention: 2 years.
• Security: a hash of the IP address and the email, to limit abuse. Basis: legitimate interest (security). Retention: one hour.
• Email before a pass ends: one reminder 7 days before the end. There is never an automatic renewal. Basis: contract.

Artificial intelligence

Two features use an AI model: the oral correction and "Explain more simply". No data that identifies you is sent to the model: an automatic check blocks any input containing an email address. Our providers commit not to use this data to train their models.

The oral correction is a learning estimate, not a decision with legal effects. It does not replace the official result.

Recipients and processors

Your data is never sold or used for advertising. It is processed on our behalf by:

• Cloudflare: hosting of the site, the API and the database (data location in the European Union requested).
• An email service: sign-in codes and reminders.
• A payment provider: it handles your payment details, which we never see.
• Transcription of the oral: a service located in the European Union. The recording is never kept.
• Correction of the oral: only the transcript is sent, without your email or any identifier, to a service located in the United States.

When one of them processes data outside the European Economic Area, the transfer is covered by the European Commission’s standard contractual clauses. The up-to-date list of named providers is available on request at personvern@nyhem.eu.

Cookies and local storage

Nyhem uses no advertising cookie and no tracker. Only one cookie is set, and only if you sign in: the session cookie, needed to keep you signed in. Everything else (progress, language, preferences) is stored in your browser to make the service work. No consent is therefore requested.

We measure traffic with Cloudflare Web Analytics: no cookie, no identifier, and no following you from one visit to the next. We see totals per page, never people.

Your rights

At any time, you can:

• download all your data (Account, "Download my data");
• delete your account and your synced progress (Account, "Delete my account");
• ask for access, correction, restriction or erasure of your data, or object to a processing based on legitimate interest, by writing to personvern@nyhem.eu.

We answer within one month. You can also lodge a complaint with Datatilsynet, the Norwegian Data Protection Authority (www.datatilsynet.no), or with the authority of your country of residence.

Age

Nyhem is for adults preparing an integration or citizenship test. It is not intended for children under 16.

Changes

If this policy changes in an important way, we say so on the site and, if you have an account, by email.