Pratkompis – Privacy Policy
Effective date: 2026-11-01
Version: 1.0
This policy explains what happens to your information when you use Pratkompis – prata svenska ("Pratkompis", "the app"). We have tried to write it the way we would explain it to a friend: plainly, and without hiding anything in the small print.
1. Who we are
Pratkompis is made by Venusoft AB (org. no. 559395-7565, Kavallerivägen 2C, 174 58 Sundbyberg, Sweden), a Swedish limited company. When this policy says "we" or "us", it means Venusoft AB.
- Privacy contact: tata2026@tutamail.com
Venusoft AB is the controller of the personal data described here. That means we decide why and how it is used, and we are responsible for it.
2. The short version
- Your voice never reaches us or the AI. Your phone's own speech recognition turns speech into text. iPhones and newer Android phones do this on the device; on some older Android phones the recogniser is Google's online service, so the audio may go to Google. Pratkompis itself never receives or stores audio.
- You do not create an account. We never ask for your name, email, phone number, location or contacts.
- To have a conversation, some text must leave your phone. What you say (as text), plus a short summary of your level and common mistakes, goes through our server to Anthropic, whose AI (Claude) writes your companion's reply and your corrections. The reply text goes to ElevenLabs, which turns it into speech. We ask for your consent before the first conversation, and you can withdraw it at any time.
- Your learning history stays on your phone. Conversations, corrections, vocabulary, review cards and streaks are stored locally. You can export or delete them in the app.
- No ads, no tracking, no analytics. We do not track you across apps or websites and we do not sell data.
3. What we process, and why
3.1 Two anonymous codes: the install ID and the phone code
The install ID. When you first open the app, it creates a random code (a UUID) and keeps it in your phone's secure storage (Keychain on iPhone, Keystore-backed storage on Android). It is not derived from your phone's hardware, your advertising ID or anything about you. The app sends it with every request to our server, and it connects a purchase to your installation (see 3.5).
The phone code. The free week and your daily and monthly minutes belong to the phone, not to the installation, so that reinstalling the app does not start a new free week. When the app registers with our server (see "Device check" below), it sends a one-way digest of a device identifier: a SHA-256 hash, shortened, that cannot be turned back into the identifier. On iPhone the identifier is a random code the app keeps in the Keychain, which survives deleting the app. On Android it is the Android ID, which changes only if the phone is reset to factory settings. The digest is bound into the device check, so it cannot be swapped for another phone's. It is not your advertising ID, phone number or serial number. (If a phone has no usable identifier, the minutes are counted per installation instead.)
"Delete all data" in the app (Profil) erases everything Pratkompis stores on your phone and gives the app a new install ID. Your minutes and free week stay with the phone, so they do not start over.
3.2 Conversation text (only with your consent)
When you talk with your companion, the app sends the following to our server, which runs on Cloudflare:
- what you just said, as text (recognised on your phone),
- the last few turns of the conversation (at most 6),
- your chosen companion, level (A1–B2), how strict the corrections should be, your first language (the language explanations are written in) and your display choices that change the reply (plain language, answer suggestions, pictures),
- a short learner profile (at most about 600 tokens, i.e. a few hundred words) with: your level and the kinds of mistakes you often make (for example "word order after a time phrase"), with a few examples; the words you learned most recently; why you're learning Swedish and your interests, if you chose them; the text you wrote under "In your own words", if any; the facts your companion remembered (see below); and the topic you picked for today,
- when you practise a situation ("Öva en situation"): the situation you chose or described,
- the voice to use for the reply,
- your install ID.
Our server forwards the conversation content to Anthropic to generate the reply, the correction and any grammar explanation. It then sends the reply text only to ElevenLabs to turn it into speech, and streams the result back to your phone. Neither of them receives your install ID or phone code.
Our server does not save the conversation text. To save cost, it keeps a cache of the companion's spoken sentences and of a few general conversation openings in Cloudflare R2 storage in the EU. The cache contains only the companion's words, never what you said and never an ID. Our server logs contain only outcomes (for example "reply ok" or "reply rejected"), never what you or the companion said.
Please do not share sensitive personal details (health, finances, other people's names, ID numbers) in conversations. The companion does not need them to help you practise.
What your companion remembers. When you mention something about yourself that will help later conversations (for example "I work as a nurse"), the AI can return a short note of it. The note is saved on your phone only, shown to you in the conversation when it's saved, and listed under Profil → Om mig, where you can change or delete each one, or all of them. The notes are sent with your next conversations as part of the learner profile. The AI is instructed never to note health, religion or beliefs, political opinions, sexual life, ethnic origin, trade-union membership, finances, ID or contact details, or other people's names; if one slips through, delete it in Om mig.
Level check. If you use "Kolla min nivå", your three answers (as text), your first language and your install ID are sent through our server to Anthropic to estimate your level. They are not stored on our server, and the install ID is not passed on to Anthropic.
3.3 Usage counters
On our server (Cloudflare Durable Objects, kept in Cloudflare's EU jurisdiction) we store, under the phone code: the date you first used conversations, and how many seconds you have used today, this week and this month. Nothing else is stored with them. They are erased automatically after 13 months without use. We use them to give each phone one free week and to keep the minute limits fair. We also keep a single, global daily counter of total conversation turns and speech characters for all users together, so that we can control costs. The global counter contains no ID.
Device check. The first time the app contacts our server, it proves that it is the genuine Pratkompis app on a real phone, so that free minutes cannot be collected by scripts inventing install IDs. On iPhone this uses Apple's App Attest; on Android, the phone's hardware key attestation. The phone creates a key that never leaves it and sends us a certificate for it, issued by Apple or by the phone's secure hardware, together with the phone code. The certificate states that the key belongs to our app and, on Android, the phone's security level and whether its software is unmodified (bootloader locked, verified boot) and its OS version and security patch level. It contains no name, phone number, hardware serial number or advertising ID. Our server checks it once, logs only the outcome (for example "register: android ok"), does not store the certificate, and gives the app a code tied to its install ID and phone code that it sends with later requests. On iPhone, Apple's servers are involved in issuing the certificate under Apple's own privacy policy.
3.4 Reports you choose to send ("Rapportera svaret")
If you tap "Rapportera svaret" (Report this reply), the app sends that one exchange: your words, the companion's reply, the suggested correction, which companion it was, the reason you picked and the time. We store it in a Cloudflare R2 storage bucket in Cloudflare's EU jurisdiction, without your install ID or phone code, so that we can fix mistakes and improve safety. Reports are deleted automatically after 12 months. (The install ID travels with the request, as with every request, but is not saved with the report.)
3.5 Purchases (when you buy Pro)
Pratkompis Pro is bought through Apple's App Store or Google Play. Apple or Google handle your payment; we never see your card. When you buy Pro, we use RevenueCat to check whether your installation has an active subscription. RevenueCat receives your install ID and the store's purchase receipt (product, purchase and renewal dates, store transaction ID, country/currency). After "Delete all data", tap Återställ köp on the Pro screen to connect your subscription to the new install ID.
3.6 Technical connection data
Like any internet service, Cloudflare necessarily receives your IP address and basic request information when the app connects to our server. Our server runs in the Cloudflare data centre nearest to you. We do not store IP addresses ourselves, and we have not switched on Logpush or any persistent request logging; the server logs only outcomes, without install IDs, phone codes, IP addresses or text. To limit how many new installations can register from one network in a day, our server keeps a scrambled code derived from the IP address (a keyed hash that cannot be turned back into the address) together with a count; these are deleted within two days. Cloudflare processes connection data under its own security and operational retention rules.
3.7 What stays only on your phone
Stored locally in the app's database and never sent to us unless you send it yourself: your conversations (text), corrections, error tags, vocabulary, review cards, XP and streaks, your settings, your profile choices, the facts your companion remembered and your consent record. The microphone audio is processed by the phone's own speech recognition and is not stored by the app. On iPhones and newer Android phones this happens on the device. On some older Android phones the recogniser is Google's online service, so the audio may be sent to Google under Google's own privacy policy; it never reaches Pratkompis.
3.8 What we do not do
We do not use analytics, crash reporting or advertising tools, and we do not track you across other companies' apps or websites. If we add analytics or crash reporting in the future, we will update this policy first and ask for your consent where the law requires it.
4. Legal bases (GDPR)
| Processing | Legal basis |
|---|---|
| Sending conversation text to Anthropic and ElevenLabs via our server | Your consent (Art. 6(1)(a)). You give it on the screen before your first conversation and can withdraw it in Profil → Dra tillbaka samtycke. |
| Install ID, phone code and usage counters to provide the free tier, the free week and your subscription allowance | Contract (Art. 6(1)(b)) — needed to provide the service you asked for. |
| One free week per phone, fair minute limits, global daily counter, abuse prevention, security | Our legitimate interest (Art. 6(1)(f)) in keeping the service running, affordable, fair and protected from misuse. |
| Storing reports you send | Our legitimate interest in correcting errors and keeping the AI safe; you choose to send each report. |
| Purchase records | Contract, and legal obligation (Art. 6(1)(c)) for bookkeeping where it applies. |
Withdrawing consent does not affect anything done before you withdrew it. Without consent, AI conversations are switched off, but review and other on-device features keep working.
5. Who receives data (our processors)
We only use providers that act on our instructions under data processing terms. Access to these provider accounts is limited to Venusoft AB's developer.
| Provider | What it does | What it receives | Location |
|---|---|---|---|
| Cloudflare, Inc. | Runs our server, usage counters, report storage and speech cache | Requests, install ID, phone code, IP address, counters, reports | Server: the Cloudflare data centre nearest to you; counters, reports and speech cache: Cloudflare's EU jurisdiction |
| Anthropic Ireland, Limited | AI (Claude) that writes replies and corrections | Conversation text, learner profile, settings | Processed in the USA |
| Eleven Labs Inc. | Turns reply text into speech | The companion's reply text and voice choice (never your voice) | USA |
| RevenueCat, Inc. (when you buy Pro) | Checks subscription status | Install ID, store purchase receipt | USA |
| Apple / Google | App distribution and payments | Handled under their own privacy policies; they are independent controllers for payments | — |
Cloudflare: its data processing addendum is part of its self-serve subscription agreement.
Anthropic: its Data Processing Addendum is part of its Commercial Terms. Anthropic does not use our API data to train its models, and deletes API inputs and outputs within 30 days.
ElevenLabs: its data processing addendum applies to self-serve customers through its terms. Data is processed in the USA (ElevenLabs' EU data residency is only for enterprise customers, which we are not). ElevenLabs keeps a history of generated speech by default, and its zero-retention mode is not available on our plan, so the companion's reply text and audio may be kept in that history under ElevenLabs' retention rules. Under ElevenLabs' privacy policy, data can be used to improve its models unless the account opts out, and we are turning that off. The text it gets is only the companion's Swedish reply, never your words or your voice.
We never sell personal data or share it for advertising.
6. Transfers outside the EU/EEA
Anthropic, ElevenLabs and RevenueCat process data in the United States, and Cloudflare may process a request outside the EU if the data centre nearest to you is outside the EU. The safeguards we rely on:
- Anthropic: the European Commission's Standard Contractual Clauses.
- ElevenLabs: its US company is certified under the EU–U.S. Data Privacy Framework, with Standard Contractual Clauses as a backup.
- Cloudflare: certified under the EU–U.S. Data Privacy Framework, with Standard Contractual Clauses as a backup.
- RevenueCat: the Standard Contractual Clauses in its data processing agreement.
You can ask us for a copy of the relevant safeguards.
7. How long we keep data
- On your phone: until you delete it ("Radera all data") or delete the app.
- Conversation text on our server: not stored; it exists only while your reply is being created.
- At Anthropic: API inputs and outputs are deleted within 30 days.
- At ElevenLabs: in its speech history, according to ElevenLabs' retention rules (see section 5).
- Usage counters: erased automatically after 13 months without use.
- Reports: deleted automatically after 12 months.
- Registration limit per network: deleted within two days.
- Purchase records: as long as required by Swedish bookkeeping law (generally 7 years) where we hold them.
8. Your rights
Under the GDPR you have the right to access, correct, delete and port your data, to restrict or object to processing, and to withdraw consent.
- Your learning data: use Profil → Exportera (JSON) to get a copy and Profil → Radera all data to delete it.
- Withdraw consent: Profil → Dra tillbaka samtycke.
- Data on our server: the usage counters are erased automatically after 13 months without use. You can also ask us to erase them earlier: email tata2026@tutamail.com. Because we do not know who you are and the counters are stored only under the one-way phone code, we will tell you what we need to find them. Reports are stored without any ID, so we cannot link a report to you.
We answer within one month. You also have the right to complain to the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY), www.imy.se, or the authority where you live.
9. Age
Pratkompis is made for adults learning Swedish. You must be at least 18 to use it. The companion is an open AI conversation without a separate moderation step, and the AI provider requires extra safeguards for services used by minors. Although the companion is instructed to stay on language practice, we cannot guarantee that every reply is suitable for children. We do not knowingly process data about anyone under 18; if you believe a minor has used the app, contact us.
10. Security
Everything sent between the app and our server is encrypted in transit (HTTPS/TLS). The install ID is kept in the phone's secure storage, and our server only ever sees a one-way digest of the phone's identifier. Access to our provider accounts (Cloudflare, Anthropic, ElevenLabs, RevenueCat) is limited to Venusoft AB's developer.
11. Changes
If we change how we handle data, we will update this policy, change the date at the top and, for important changes (for example a new provider or analytics), tell you in the app and ask for consent again where required.
12. Contact
Venusoft AB, org. no. 559395-7565, Kavallerivägen 2C, 174 58 Sundbyberg, Sweden · tata2026@tutamail.com