Data Collection
Kevilex, operated by Kathekon AB, collects the following information when you use our platform:
- Account information provided through our authentication provider (email address, display name)
- Texts you import for reading practice
- Word learning progress (word statuses: new, learning, known)
- Reading activity and interaction data within the platform
Data Usage
We use your data to:
- Provide and maintain the Kevilex language learning service
- Track your vocabulary learning progress across sessions
- Enable spaced repetition review of words you are learning
- Improve the platform based on aggregate usage patterns
We do not sell your personal data to third parties. We may share anonymized, aggregate data for research purposes related to language learning.
Data Retention
Your data is retained for as long as your account is active. If you delete your account, your personal data will be removed within 30 days, except for records we are legally required to retain — in particular, subscription and payment records kept under the Swedish Bookkeeping Act for the statutory period (currently seven years). See “Payment and supporter data” below. Anonymized aggregate data may be retained indefinitely for analytical purposes.
Imported texts and associated learning data are stored on servers hosted by our infrastructure providers (Cloudflare and Neon). Data is stored within the European Union or regions with adequate data protection agreements.
Email updates
Kevilex offers optional email updates from Kathekon AB — for example a weekly summary of your learning progress, new texts and features, and tips for reading Ancient Greek. These are strictly opt-in: we send them only to users who have explicitly chosen to receive them, and we record when and how that consent was given. We rely on your consent (GDPR Art. 6) as the legal basis, and we do not use these emails for any unrelated purpose without asking you separately.
You can unsubscribe at any time — either from the email-updates control in your account Settings, or by using the unsubscribe link included in every such email (no sign-in required). Withdrawing consent is as easy as giving it and does not affect transactional emails about your account (for example receipts or security notices).
Payment and supporter data
When you choose to support Kevilex, we and our payment provider handle additional data:
- What Kevilex stores:your email address, your Stripe customer and subscription identifiers, your billing email and payment status, and — only if you opt in — the display name you choose for the public supporters page. Kevilex does not receive or store your full card details.
- What Stripe collects directly:when you check out, Stripe may collect your billing name and address, your payment method details (including card data), and device and fraud signals, as described in Stripe’s privacy policy.
- Legal bases (GDPR Art. 6):
- Performance of a contract— to create and manage your subscription.
- Consent— to display your chosen name in the public supporters list. Off by default; you can withdraw it at any time in Settings.
- Legitimate interests— to prevent fraud and abuse, secure the service, handle disputes, and send transactional emails about your Support (e.g. receipts).
- Legal obligation— to keep accounting records as required by the Swedish Bookkeeping Act (bokföringslagen (1999:1078)).
- Recipients:Clerk (authentication), Cloudflare (hosting), and Amazon SES (transactional email) process data on our behalf under a data processing agreement. Stripe processes payment data as our payment provider and also acts as an independent controller for fraud prevention, regulatory compliance, and payment-network purposes, as described in Stripe’s Privacy Center and Data Processing Agreement.
- International transfers:some recipients may process data outside the EU/EEA (e.g. the United States). Such transfers rely on the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework. Transactional email (Amazon SES) is configured in the EU (Ireland) region.
- Retention: subscription data is kept while your Support is active. After cancellation, records required by the Bookkeeping Act are retained for the statutory period (currently seven years); other supporter data is deleted on the normal account-deletion timeline. Your public display name is removed as soon as you opt out or stop supporting.
- Your rights: you have the right of access, rectification, erasure, restriction, data portability, objection, and to withdraw consent. To exercise these rights, or for Support-specific requests (withdrawal, cancellation, refund), email kevin@kevilex.com.
- Supervisory authority: you may lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY, imy.se).
- The public supporters list never shows your email — only the display name you explicitly choose to show. Supporters who have not chosen to show a name are represented only by a non-identifying aggregate count, which contains no personal data.
Contact Information
If you have questions about this privacy policy or your data, please contact:
Kathekon AB
Email: kevin@kevilex.com