Your learning account
Account privacy
How account information is used and how you can control it.
Infinity Insights AB is responsible for the personal information used to operate this account service. This notice was updated on 23 October 2026.
Your account is private. Other learners cannot see your email, answers or learning progress. This release has no public profiles, messaging, advertising, payments or marketing emails. Your learning results help you review your work. We do not use them to make decisions about access to education or employment. We use the same privacy protections for teenagers and adults.
Your account information
We use your email address to identify your account, verify ownership, help you sign in and send essential account notices. Passwords are stored as salted password hashes. We also record signup and terms acceptance dates, your confirmation of the signup age requirement, and when you last use your account.
Your learning information
When you practise or take a test while signed in, we save your selected questions, submitted answers, results, scores and attempt dates. We also keep question progress, completed Learning Path steps, saved test selections and learning preferences. This lets you continue on another device, review mistakes and choose questions you have not tried before.
Answers are checked automatically using the exercise's answer rules. Results are practice feedback, not an official language qualification. Do not enter private or sensitive information in exercise answers or saved test names. We do not record your voice or test speaking.
To understand which courses and tests need improvement, we produce internal totals of starts and completions from retained attempts. These reports group activity by day, course and predefined test. They do not include learner identities, answers, individual scores or custom test names and are not sent to Web Analytics. This limited use supports our legitimate interest in improving the learning service. You can object by contacting us.
The age check
Registration starts at age 13 in the European Economic Area, the United Kingdom and the United States. In other countries, the first release is for adults aged 18 or over who have also reached any higher local age of adulthood. The account eligibility rules explain this initial rollout.
Before registration, we use the birthday and country you enter to check availability. We do not save either value in your account or our database. The check relies on what you enter and does not verify your identity. We do not ask for identity documents or a parent's email address.
A necessary temporary cookie records the result of the check without your birthday or country. A successful check lasts 15 minutes. A result below the minimum age prevents another attempt in that browser for one hour. Your account records the date of your eligibility confirmation and the version of the terms you accepted.
Why we use this information
We use limited account and learning information for our legitimate interests in providing the free private account and learning features you ask for, verifying your email and helping you recover access. This means we use only what we need to provide these features, after considering how that use affects you, including if you are a teenager. We also rely on legitimate interests to prevent abuse, protect accounts and honour deletion requests.
We use information where necessary to meet applicable legal obligations and respond to data protection requests. We do not rely on accepting the account terms as consent to use your information.
Your email and a password are needed for an account. You can continue to use public courses without providing them. Accepting account terms does not subscribe you to marketing or allow optional visit statistics.
Cookies and security
A necessary sign-in cookie keeps your session active. It expires after 30 days unless you sign out or a security action ends it sooner. If you separately allow visit statistics, Cloudflare Web Analytics counts page visits here too. It receives no account IDs, email addresses, typed answers, passwords or individual scores. Query parameters and fragments are removed from page addresses. You can change your choice on the website privacy page.
Cloudflare provides hosting, security checks and the database. Scaleway sends essential account emails. These providers process information required to deliver and protect their services. The application avoids storing raw IP addresses and device details in account sessions. Short-lived keyed identifiers are used to limit abuse.
Cloudflare receives technical information such as your IP address, browser information and security-check results when it delivers and protects these pages. That provider processing is separate from what our account database stores.
Our account databases use Cloudflare's EU jurisdiction setting. Cloudflare's hosting and security services may process information outside the European Economic Area. Its Data Processing Addendum provides transfer safeguards, including standard contractual clauses where applicable. Cloudflare also uses security-check signals to improve Turnstile under its Turnstile privacy notice.
Scaleway processes our transactional email service data in France. Your own email provider controls the copies delivered to your inbox.
When you choose a password, our server checks whether it appears in known data breaches using Have I Been Pwned. It sends only the first five characters of a hash of the password. It does not send your email, the password itself or the full hash to that service.
Download, change or delete
From Your account, you can change your email or password, sign out all sessions, download your account and retained learning information or request deletion. Sensitive actions require your current password. Email changes require confirmation through both the current and new addresses.
Deletion disables access and removes live account records, answers, results, learning progress and saved tests. If cleanup is interrupted, it is retried. Backup copies may remain for up to 30 days. A minimal deletion record is kept separately for 37 days after erasure to stop a backup restore from restoring your account. A pending deletion record remains until cleanup finishes.
Scaleway keeps email delivery metadata and logs while our sending domain remains active. Deleting your website account does not automatically remove those provider records. Contact us to request removal of the related email records so we can ask Scaleway to erase them under its email data policy.
Your data protection rights
You can ask for access to your personal information, correction, deletion, restriction of processing or a portable copy where the relevant right applies. You can object to processing based on legitimate interests. The website privacy page explains optional visit statistics and how to turn them off.
Contact us using the address below to exercise these rights. We may need to confirm that the request concerns your information before acting. You can also complain to Sweden's privacy authority IMY or your local data protection authority.
Account retention
Detailed test and practice attempts, including your submitted answers, are removed after 90 days without an update to the attempt. We keep at most your 200 most recent attempts, so older details may be removed sooner. Question progress, step completion, scores kept as progress summaries, saved tests and learning preferences remain until you delete your account or it expires under the rules below. Summary progress can remain after the detailed attempt is removed.
Unverified registrations are removed after seven days. If an account has not been used for 24 months, we send a warning before scheduling deletion at least 30 days later. Using the account again cancels that inactivity warning.
Contact
For account help or privacy requests, contact support@getinfinityinsights.com. Messages pass through Cloudflare Email Routing to our monitored Gmail inbox. Google handles these messages under its consumer Privacy Policy and may process them outside the European Economic Area. Replies may come from our Gmail address.
Please do not email passwords or verification or reset links. We keep support correspondence only as long as needed to handle the request, necessary follow-up and applicable legal obligations.
If we change how account or learning information is used, we will update this notice and explain significant changes before they take effect.