Norwegian Saga, run by Even Svendsen, Hestestien 7, 1555 Son, Norway. Email hello@norwegiansaga.no.
This is a one-person business, so the person looking after your data is the person teaching you.
| What | Why we have it | Our legal basis |
|---|---|---|
| Name, email, phone if you give it | To arrange and teach your lessons | Our contract with you |
| Your level, goal and availability | To teach you at the right level | Our contract with you |
| What you bought and when | To take payment and keep accounts | Legal duty |
| Lesson notes — what we covered, what keeps tripping you up | So each lesson builds on the last | Legitimate interest |
| Your email, if you ask for our newsletter | To send it | Your consent |
| Family: your email, if you ask for Norwegian tips or to hear when Pro opens | To send you a few Norwegian tips, and an email the day Pro opens | Your consent — unsubscribe from any email |
| Family: the emails we send members — to help you get started, and a note if you have not been in for a while — and who unsubscribed | So the right email reaches the right person, once | Legitimate interest — unsubscribe from any email |
| Family: your account — email and password (stored scrambled, never readable) | To sign you in to the Family and the app | Our contract with you |
| Family: your profile — name, picture and a line about you, if you add them | So other members know who they are talking to | Our contract with you |
| Family: your posts, comments, likes, saved posts and private messages | That is the community — they are shown to the members you write them for | Our contract with you |
| Family: your progress — lessons finished, points, level, practice in the app | To show your progress and the leaderboard | Our contract with you |
| Family: the days you open the Family | To count how many members are active — never shown to other members | Legitimate interest |
| Family: warnings and moderation notes | To keep the community safe under the guidelines | Legitimate interest |
| Family: reports you make, with a copy of what you reported, and the members you block | To act on reports and keep blocked members away from you | Legitimate interest |
| Family: your device's notification address, if you turn notifications on | To send you notifications | Your consent — turn them off at any time |
| Family: a note that an account was deleted — the email and the date | So a payment can be stopped | Legitimate interest |
Lesson notes are the only slightly unusual one. Remembering that you struggled with word order last week is the difference between a lesson and a chat — but if you would rather we kept none, say so and we will delete them.
Newsletters are opt-in only, never required to book, and every one has an unsubscribe link.
We never sell your data and never share it for anyone else's marketing. A few suppliers handle bits of it so the business can run — payments go through Stripe, and we use ordinary services for video calls, email, website hosting and accounting. For the Family and the app: Supabase holds the accounts, the community and the files, Netlify hosts the website, and Resend sends the emails (confirming your account, resetting a password, the welcome email). Notifications travel through your browser maker's push service (Apple, Google or Mozilla), encrypted so only your device can read them. Each only does what we tell them to.
Ask us which companies and we will tell you. Some are outside Europe, usually the United States; where that happens the transfer is covered by the standard legal protections the EU requires.
We would also hand data over if the law made us, or to defend a legal claim.
Inside the Family, other members see your name, picture, profile, level and points, and what you post in the community. Your private messages are seen only by you and the member you write to. As the person responsible for the community, Even can read reported posts and messages when that is needed to enforce the guidelines.
| What | How long |
|---|---|
| Enquiries that never became lessons | 12 months |
| Your details and lesson notes | While you are a student, then 12 months |
| Invoices and accounts | 5 years — Norwegian bookkeeping law requires it |
| Newsletter | Until you unsubscribe |
| The tips list | Until you unsubscribe, or the email the day Pro opens has gone out |
| Your Family or app account, profile and posts | Until you delete the account or ask us to |
| The days you opened the Family | 12 months |
| Moderation notes | While the account exists, and 12 months after a ban |
| Reports | Until handled, then 12 months |
| Notification addresses | Until you turn notifications off or delete the account |
| The note that an account was deleted | 90 days |
The 12 months afterwards is so someone who comes back after a break does not start from nothing. Want it gone sooner? Ask, and it is gone — except the accounting records, which we are legally required to keep.
You can tell us to:
Email hello@norwegiansaga.no. It is free and we answer within 30 days. We may check you are who you say you are first — not to be difficult, but so we do not hand your details to someone else.
This website sets no cookies and runs no advertising or analytics trackers. That is why you have not seen a cookie banner. If we ever add analytics, we will ask you first. When you sign in to the Family or the app, your browser keeps your sign-in in its local storage so you stay signed in; that is needed for the service to work, and it is removed when you sign out.
Security. Your data sits in accounts protected by strong, unique passwords and two-factor authentication where it is offered, on encrypted devices, and only Even can get to student records. No system is perfect — if something went badly wrong we would tell Datatilsynet within 72 hours and tell you straight away.
The app. The Norwegian Saga app has its own app privacy policy. Family members use the same account for the Family and the app. Booking lessons does not create an account, and the app tells us nothing about your lessons.
Tell us first — it is usually something we can fix the same day: hello@norwegiansaga.no.
You can also complain to the Norwegian Data Protection Authority, Datatilsynet (Postboks 458 Sentrum, 0105 Oslo), or to the equivalent authority in the country where you live.