Privacy Policy
Last updated: September 14, 2026
1. Introduction
Welcome to Mr Jarven, an AI-powered educational platform operated by Tomjar Invest AB (Organization Number: 559317-2520), a company registered in Sweden. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, and protect your data when you use our service.
2. Data Controller
Tomjar Invest AB
Organization Number: 559317-2520
Registered in Sweden
Contact: Available through our platform
3. Information We Collect
3.1 Account Information
- Email address (required for account creation)
- Profile information you choose to provide
- Subscription and payment information
3.2 Usage Data
- Chat conversations and questions asked
- Documents uploaded for analysis
- Quizzes and flashcards created
- Learning progress and activity data
3.3 Technical Information
- IP address and browser information
- Device type and operating system
- Usage patterns and preferences
- Error logs and performance data
4. How We Use Your Information
- Provide and improve our AI tutoring services
- Process your questions and generate educational content
- Manage your account and subscription
- Send important service updates and notifications
- Analyze usage patterns to enhance our platform
- Ensure platform security and prevent abuse
5. AI Services and Data Training
Important: Your Data is NOT Used for Training
We want to be absolutely clear: Your questions, chats, and uploaded documents are NEVER used to train our AI models or OpenAI's models. Mr Jarven uses OpenAI's APIs to provide AI tutoring services, and all your data is:
- Encrypted during transmission and storage
- Processed only to provide you with educational assistance
- Never used for model training or improvement
- Not shared with OpenAI or any third parties for training purposes
- Protected under strict data processing agreements
6. Data Storage and Hosting
Hosting Location: Our services are hosted on Supabase infrastructure, which provides secure cloud hosting with data centers located in various regions. Your data may be processed and stored in these secure facilities outside of Sweden, but always in accordance with GDPR requirements and appropriate data transfer mechanisms.
7. Cookies and Tracking
We use cookies and similar technologies to:
- Keep you logged in to your account
- Remember your preferences and settings
- Analyze how our service is used
- Ensure security and prevent fraud
Essential cookies are necessary for the service to function and cannot be disabled. You can control other cookies through your browser settings, though this may affect your experience with our platform.
8. Data Sharing
We do not sell your personal data. We may share your information only in the following circumstances:
- With service providers who help us operate our platform (under strict confidentiality agreements)
- When required by law or to protect our legal rights
- In connection with a business transfer or acquisition (with prior notice)
- With your explicit consent
9. Your Rights (GDPR)
As an EU resident, you have the following rights:
- Access: Request copies of your personal data
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your data
- Portability: Request transfer of your data
- Objection: Object to certain data processing
- Restriction: Request limitation of data processing
You have the right to delete your account and all associated data at any time. You can do this directly from your Account settings page — open the "Danger zone" section and follow the confirmation steps. Once deleted, your data cannot be recovered. If you have any questions, contact us at hello@mrjarven.com.
To exercise other rights, please contact us through our platform or customer support.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure data transmission, access controls, and regular security assessments.
11. Data Retention
We retain your personal data only as long as necessary to provide our services and fulfill the purposes outlined in this policy. Account data is typically retained until you delete your account, while usage data may be aggregated and anonymized for analytical purposes.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through our platform. Your continued use of our service after changes indicates your acceptance of the updated policy.
13. Contact Information
If you have any questions about this Privacy Policy or our data practices, please contact us through our platform's support system. For data protection matters, you also have the right to lodge a complaint with the Swedish Data Protection Authority (Dataskyddsmyndigheten).