This page describes what personal data we process when you use Ledarskapsresan 24/7, why we do it, and what rights you have.
The data controller decides why and how personal data is processed. For Ledarskapsresan 24/7, that is:
InfinityStream247 AB
Company reg. no. 559511-5055
Häradsgränd 3
183 39 Täby
Questions about personal data and requests regarding your rights: info@lr247.app
We only collect what the service needs to work. The table shows each processing activity, its purpose, and its legal basis.
| Data | Purpose | Legal basis |
|---|---|---|
| Email address and password | Create and protect your account. Your password is never stored in plain text; it is hashed by our database provider. | Contract |
| First and last name | Issue your certificate in your name. The certificate is part of the service. The same name is shown when you sign in. | Contract |
| Your answers to exercises and reflections | Save your progress between visits and show how far you have come. | Contract |
| The tools you have saved as favourites | Show your favourites at the top of the tool list. | Contract |
| Your messages to the AI coach and your exercise answers | When you use the AI coach, your message, the conversation so far and your saved exercise answers are sent to our AI provider Anthropic so a reply can be generated. That is all the answers you have given, not a selection — the coach bases its advice on your whole picture. We store the conversation so you can return to it, and delete it after 24 months. Anthropic processes the data as a processor on our behalf. Data sent through Anthropic’s commercial API is by default not used to train their models. | Contract — the processing is necessary to provide the AI coach when you choose to use the feature. |
| Name and issue date on certificates | Make the certificate verifiable. Anyone holding your certificate ID can see your name and the issue date on the verification page — that is the point of a verifiable certificate. The page is marked so search engines do not index it, so your name is not searchable by anyone without the ID. | Contract |
| Stripe customer ID, subscription status, and trial end date | Manage your subscription and give you access to the right content. Your card details are handled by Stripe and never pass through our systems. | Contract |
| Whether the purchase was made privately or for a business, and for business purchases also company registration number, VAT number where given, and billing address | Know which terms apply to the purchase. Consumer protection — the right of withdrawal, the Consumer Sales Act and the reminder before renewal — does not apply to purchases made for a business, and the difference has to be visible afterwards. The business details are collected by Stripe at checkout and are needed for the invoice. | Contract and legal obligation — accounting and VAT legislation |
| When the subscription started, and whether you have withdrawn from the purchase | Work out how long your withdrawal period runs, carry out the withdrawal, and be able to show when we received it. We store the time and send it to you as confirmation of receipt. | Legal obligation — the Swedish Distance Contracts Act |
| Your language choice and a note of which of our automatic emails have been sent | Show the service and write emails in your language, and avoid sending the same welcome email twice. | Contract |
| Accounting records for your purchase | Report the purchase in our accounts and be able to produce the records on inspection. | Legal obligation — the Swedish Accounting Act |
| Name, email, and message from the contact form | So we can reply to you. | Legitimate interest — our interest in being able to answer and handle enquiries. |
| Email address for waiting-list signups | Let you know when the app you registered interest in launches. | Consent |
| IP address when submitting a form | Protect the forms against bulk submissions and abuse. The address is sent to our provider Upstash, which counts attempts from the same address over one hour and then deletes the count. The address is never linked to your account. | Legitimate interest — our interest in protecting the service against automated bulk submissions, abuse, and attacks. |
| Visitor statistics | Understand how the site is used. Only collected if you accept statistics cookies. | Consent |
The service is not built for sensitive personal data. Avoid writing information about, for example, health, religion, political opinions, or trade union membership in the AI coach or in the exercises, and avoid writing identifying information about other people — such as a colleague’s name together with personal circumstances.
Most of the data you provide yourself. Payment and subscription status come from Stripe. Technical information and visitor statistics are generated when you use the service.
An email address and password are required to create an account — without them the service cannot be provided. Your name is needed to issue the certificate. Everything else you provide voluntarily.
If your employer has paid for the licence, we report nothing to them about how you use the service — neither that you have started, how far you have got, nor that you have finished. Nor does your employer get access to your exercise answers, reflections or conversations with the AI coach. The certificate is issued to you, and you decide whether to show it. Reflection and coaching need a confidential space — a leader who knows their answers are reported onwards does not write what they actually think.
We never sell your personal data. To run the service we use external providers. Most of them process personal data as processors, under our instructions and a data processing agreement. Some providers may, for parts of the processing, act as independent controllers — for example payment providers with legal obligations of their own.
Within our company a small number of people hold administrator access and can reach account details, subscription status, and how far you have progressed through the programme. The access is used for support, invoicing, and troubleshooting. It does not give access to what you have written in the exercises or in your conversations with the AI coach.
Some of our providers process personal data in countries outside the EU/EEA, including the United States. Where personal data is transferred outside the EU/EEA, we use a valid transfer mechanism under the GDPR — for example a European Commission adequacy decision or the European Commission’s standard contractual clauses (SCC).
Contact us at info@lr247.app if you would like more information about the safeguards used.
You have the right to:
Please contact us first. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY), the supervisory authority in Sweden.
Last reviewed: 2026-08-30
