Terms, privacy and cookies
Purchase terms version: . The Swedish version is legally binding.
Customer support: Monday–Saturday, 12:00–17:00 Swedish time. Closed Sundays. You can email at any time.
Purchase terms
1. The service
Teorilo is a digital study service for the Swedish category B driving theory test. It includes theory lessons, text-to-speech, quizzes, practice tests and saved progress. Teorilo is independent and is not part of, or approved by, Trafikverket. Purchasing access does not guarantee a pass.
2. Prices and payment
Prices are shown in Swedish kronor including applicable VAT before you order. Weekly access costs SEK 39 per week, equivalent to approximately SEK 169 per month on average. Monthly access costs SEK 89 per month. These subscriptions renew for the same period until cancelled. A one-time purchase costs SEK 249 and gives access for as long as Teorilo operates, with no recurring charge. Earlier purchases remain subject to the terms accepted at purchase. This description does not affect mandatory consumer rights. Stripe Checkout shows the final total before payment.
3. Subscriptions and cancellation
You may cancel a subscription at any time. Cancellation stops the next renewal and access normally continues until the end of the paid period. Completed payments are not refunded automatically, but your mandatory consumer rights always apply.
Manage your subscription in My account or contact tim@teorilo.se for help cancelling.
4. Delivery and right of withdrawal
Teorilo is a digital service and access is activated after confirmed payment. Consumers normally have a 14-day right of withdrawal from the date of the agreement. Before purchase, you expressly request delivery during the withdrawal period. If you then withdraw, you may have to pay a proportionate amount for the part supplied, to the extent permitted by law.
Use our online withdrawal function, the standard withdrawal form, or send a clear notice to the contact email below. You do not need to give a reason. The online function sends a downloadable receipt in your browser immediately. These terms never limit mandatory consumer rights.
5. Account and use
Access is personal. Do not share login details or copy, sell or distribute the content. We may restrict access in cases of misuse, fraud or a serious breach of these terms.
6. Faults and complaints
If the service does not work or differs from what was promised, contact us so we can correct the problem. These terms do not limit mandatory statutory rights.
7. Disputes
Swedish law applies. If we cannot resolve a dispute together, you may contact the Swedish National Board for Consumer Disputes (ARN), Box 174, SE-101 23 Stockholm, ARN. We follow ARN's recommendations.
Privacy policy
Privacy and retention information updated on .
Tim Hanno Mineur, sole trader operating Teorilo, is the controller for the processing described here. Contact details are listed below.
Teorilo processes account details, email address, payment status, study progress, test results, your chosen test date, questions you save, question reports, selected settings and technical security data to provide the service, administer purchases, save your work, improve the question bank, prevent misuse and meet legal obligations.
Processing is based on our agreement with you, legal obligations and our legitimate interest in secure operation. Stripe processes payments and Supabase provides account authentication. The website and its study data are hosted using OpenAI Sites and Cloudflare. These suppliers process data under their own terms and applicable data-processing arrangements.
To request access, correction, deletion or other data rights, email tim@teorilo.se. You can also read about your rights and complaints to IMY.
Account emails, purchase confirmations and subscription notices are sent using Supabase and Google Gmail/SMTP. Your email address and the message contents are processed to deliver these service messages.
When you start narration, the public study text is sent to ElevenLabs to generate audio. Teorilo stores the generated audio to reuse it for the same text. Narration is not available on account or owner pages.
Data retention – what is stored and for how long?
Retention must be limited to what is needed to provide the service, handle requests, protect the service and meet legal obligations. Different data therefore has different retention periods. Where no fixed period is specified, the criteria below explain how retention needs are assessed. A technical validity period, for example for a login or an unfinished test, does not mean that every associated record is deleted when that period expires.
Account, study data and saved questions
Account details let you sign in and connect your account to your access. Study progress, study days, test results, saved questions and your chosen test date let you continue studying. While your account is active, you can change or remove these records through available features or request erasure. After your account is closed, account and study data is retained only for as long as necessary to complete the closure, handle outstanding matters or meet legal obligations. Data that is no longer needed is erased. The statutory retention period for accounting records does not apply to all account or study data. Teorilo currently has no general automatic account-deletion schedule based on a set number of inactive months.
Cancelling a subscription stops future renewals under the purchase terms; it does not itself erase your account or study data. Removing a saved question removes it from the review list; it does not rewrite earlier test results. Resetting study progress is also separate from closing your account or erasing purchase and accounting records.
Purchases, payments and accounting
Payment status, purchase references and subscription information are needed to provide access and handle payments, cancellations and refunds. Records may also be needed to investigate an ongoing case or legal claim. This does not mean that all study data needs to be retained for the same period.
Data that forms part of the accounting records is subject to statutory retention: it must normally remain available through the seventh year following the calendar year in which the financial year ended. These records may therefore need to be retained after an account closes or other personal data is erased.
Swedish Accounting Standards Board: retention of accounting records
Support, question reports and withdrawal requests
Contact details, messages and case history are used to answer questions and follow up requests. Under the retention procedure adopted on 12 October 2026, ordinary support correspondence is scheduled for erasure within 90 days after the case is closed, allowing time for follow-up. The deadline is calculated from closure, not from each monthly review. Question reports may be retained without identifying the reporter when needed to improve the course. Withdrawal requests, complaints and disputes are assessed separately where records are needed for an ongoing matter, a legal obligation or a legal claim.
Access-request exports and test material
The procedure calls for working copies of access-request exports to be erased within 30 days after secure delivery, provided no delivery problem or ongoing matter requires them. Test emails, screenshots and test exports containing personal data are scheduled for erasure within 30 days after the test is completed. Test results may be retained without personal data. These are Teorilo’s internal retention periods, not general statutory deadlines.
We keep a minimal record of erasure requests, the actions taken and any justified exceptions, without retaining the full export. Information needed to prevent erased data from returning during a restore must remain available while older recoverable backups can contain that data. Other continued retention requires a documented purpose and review date.
Review and implementation of the procedure
The procedure provides for a monthly review and a due date for each item. Any exception must record its reason and next review date. The procedure is being introduced: the initial review and cleanup of existing material have not yet been completed. No general automatic deletion of customer correspondence or accounts has been enabled. The periods above describe the adopted procedure, not a confirmation that every older copy has already been erased. Requests to exercise your data-protection rights are handled separately and are not postponed until the monthly review.
Technical data, local storage and audio
Technical data supports sign-in, security, troubleshooting and misuse prevention. Retention needs depend on the record’s purpose and any ongoing security investigation. Session and cookie validity periods and local browser storage are described in the Cookies section below. Clearing your browser does not automatically erase records stored in your account.
Teorilo’s own usage counters store aggregate totals without identifiers, IP addresses or visitor profiles attached to those counters. These are distinct from technical security records. Generated audio of public study text is retained for reuse and is separate from your test answers and study history.
Erasure, your rights and any backups
You may request access, correction, erasure, restriction and, where the conditions are met, data portability. You may also object to processing based on legitimate interests. Erasure is not an unconditional right; some records may need to be retained for accounting requirements or legal claims, for example.
Account-erasure requests are handled through the contact address below. Their scope needs to cover relevant records in Teorilo and with suppliers processing them on Teorilo’s behalf. Erasure from the active service and handling of any backups need separate assessment. Removing an account in one service does not itself remove records simultaneously from other systems or copies. No general promise of immediate erasure from every backup is made.
Teorilo has a daily backup routine for the authentication database and study database, with encrypted copies stored locally and in a private Google Workspace Drive folder. The routine depends on the backup computer being available. It aims to keep daily copies active for 30 days. Older automatic copies may be moved to trash only after a newer local and external copy has been verified and a recent restore test has passed; at least the two latest verified copies and the latest restore-tested copy are retained. Moving a file to trash does not erase it permanently. Trash, retained manual copies and exceptions require separate review and confirmed permanent deletion, so this is not a guarantee that all backup data disappears on day 30. Suppliers’ own logs and internal backups follow separate retention arrangements.
Suppliers and where data is processed
Stripe is used for payments and subscriptions, Supabase for account authentication, OpenAI Sites and Cloudflare for website hosting and study data, and Supabase and Google Gmail/SMTP for service messages. ElevenLabs is used to narrate public study text. Using a supplier does not mean it receives every category of customer data. Roles and responsibilities depend on the processing involved; a supplier may also have legal obligations of its own.
Storage location and access from other countries depend on the supplier, service and configuration. Making personal data available outside the EU/EEA requires a lawful transfer basis, such as an applicable adequacy decision or appropriate safeguards. Contact us for more information about recipients, storage countries and applicable safeguards for your data.
Our Supabase authentication project uses the Stockholm region in Sweden (eu-north-1). This does not mean that all supplier processing stays in Sweden: support, account administration and other services may involve Singapore and the United States. Supabase describes its standard contractual clauses and supplementary safeguards in its data residency and transfers information.
Service email uses Google Workspace Business Starter, which does not provide a selectable EU storage region. Google's data processing terms govern processing and international transfer safeguards. Old messages are not automatically deleted in our current Gmail settings; requests and retention needs therefore require a separate review of the mailbox.
OpenAI Sites hosts the website and study database using Cloudflare infrastructure. Sites does not offer a data residency guarantee for this hosting, so we do not promise that these records remain within Sweden or the EU. See OpenAI's Sites information. Supplier logs and backup retention are separate from account deletion in the active service.
Contact and response to your request
Email tim@teorilo.se and describe which account and records your request concerns. Do not send passwords or payment card details. Additional information may be needed to verify your identity. You are entitled to a response without undue delay, normally within one month. If a permitted extension is needed, you must be informed within the first month, including the reason.
Read more about your data-protection rights and transfers outside the EU/EEA at IMY. You may also complain to IMY if you believe your personal data is being handled incorrectly.
Business and contact details
- Service and brand
- Teorilo
- Trader
- Tim Hanno Mineur, sole trader
- Address
- Solrosvägen 9C, 903 65 Umeå, Sweden
- tim@teorilo.se
- Phone
- 076-769 42 28
- Organisation number
- 070125-8758
- VAT number
- SE070125875801