Privacy

Hideous Monster AS is the controller of the personal data we process when you use (practice for Norwegian trade exams).

What we process and why

Account: You sign in with Google or Apple. We store your name, your email address and your Google or Apple ID. If you hide your email address with Apple, we use the address Apple creates for you. The legal basis is our agreement with you (GDPR Article 6(1)(b)).
Purchases: Which passes you have bought, when, and what you paid. We never see your card details; the payment provider handles them. If you buy in the app, you pay in the App Store or Google Play, and RevenueCat sends us the purchase under your account ID. We keep purchase records for five years under the Norwegian Bookkeeping Act (Article 6(1)(b) and (c)).
Practice: Your answers, results and the topics you have practised, so you can see what to practise more and whether you have earned the pass guarantee (Article 6(1)(b)).
Customer service: The messages you send us and the email address you give, so we can reply (Article 6(1)(b) and (f)).
The app: The app stores your language, your sign-in and drafts of your answers on your phone or tablet. It does not use the camera, location or an advertising ID.
Visits: We count page views with the page address, the referring site and the campaign code, and a daily visit code made from a shortened IP address and browser information. We do not store the full IP address. We respect Do Not Track and Global Privacy Control (Article 6(1)(f)).

Cookies

We only use the cookie that keeps you signed in. The language you choose is stored in your browser. We use no analytics or advertising tools from others.

Automatic grading

When you ask for automatic grading of an answer, we send the text to an AI service that grades it. Do not write names or other personal data in your answers.

Providers

We use providers for hosting, database, sign-in, payment, in-app purchases, email and automatic grading. They process the data only on our behalf, under a data processing agreement. Some of them store data outside the EU and EEA; such transfers rely on the EU standard contractual clauses.

Retention

Your account and practice are kept until you delete your account. Purchase records are kept for five years. Messages to customer service are deleted with the account.

Your rights

You have the right of access, rectification, erasure, restriction and data portability, and you can object to the processing. You can download and delete your data yourself under My data after signing in. Otherwise write to customer service. If you believe we break the rules, you can complain to Datatilsynet, the Norwegian Data Protection Authority.

Delete your account

In the app, delete your account under Account and Delete account. On the web, sign in and use Delete account. Your account, answers, mock exams and access are deleted at once, also at RevenueCat. We keep the purchase records for five years without your name and email address, as the Bookkeeping Act requires. Deleting your account does not refund a purchase.

Changes

If we change this notice, we publish the new version here.

Company details

Company: Hideous Monster AS
Org. no.: 929 134 613
VAT: Registered in the Norwegian VAT Register
Address: Sophies vei 14, 1542 Vestby
Email: hei@eksamen.org