The privacy policy in short

In order to provide you - the user - with an easy to understand definition regarding what this policy is for, it is summarized in the sections below. The policy in its entirety follows after that. The applications described are "Edda Physics 1" and "Edda Physics 1 Demo - Archimedes' Principle".

What user data are the applications collecting

The applications are collecting anonymized usage data, which are an anonymized identifier, the length of how long it takes to complete a lab and indicators what version of the application the user is using, as well as the build version of the application.

How is the user data used

This is used to improve the labs, keeping the content relevant and the experience bug free. The indicators are to track the usage of the demo compared to the home and school version and the build version is to be able to track and identify bugs across versions.

How may users request the deletion of collected or stored user data

Users may request the deletion of the collected data by mailing [email protected].

The policy in its entirety follows, starting with interpretations and definitions.

Interpretations and Definitions

Interpretations

Words whose initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or plural.

Definitions

For the purposes of this Privacy Policy:

• User Data Refers to data collected and stored automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a playback of a study module).
• Application Means the software program provided by the Company and downloaded by You on any electronic device, including but not limited to "Edda Physics 1" or "Edda Physics 1 Demo - Archimedes' Principle".
• You Refers to the individual whose personal data is collected, in accordance with this Privacy Policy.
• Device Means any device that can access the Service, such as a computer, a mobile phone, a digital tablet, or a Virtual Reality headset.
• Company (In this Privacy Policy referred to as "Company", "We", "Us" or "Our") Refers to Edda Knowledge AB, Scheelevägen 15, 223 70 Lund.
• GDPR Means Regulation EU 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
• Account Means a unique user account to access our Service or parts of our Service.
• Personal Data Is any information that relates to an identified or identifiable individual.
• Service Refers to the use of any application, including the Virtual Reality (VR) application "Edda Physics 1" or "Edda Physics 1 Demo - Archimedes' Principle", VR applications that fall under "Edda VR", as well as Edda Knowledge's "Teacher Portal" and the Edda Knowledge website.
• Third-Party Provider Means any natural or legal person who processes personal data on behalf of the company. It refers to third-party companies or individuals engaged by the company providing services to the company, e.g., to facilitate the service, to provide the service on behalf of the company, to perform services related to the service, or to help the company analyze how the service is used, such as Google Analytics, Mixpanel, Facebook, Sentry, Unity Cloud Diagnostics.
• Third-Party Social Media Service Refers to any website or social network website through which a user can verify their identity to log in or create an account to use the service.
• Website Refers to Edda Knowledge - the website available at https://eddaknowledge.com, including its subpages and Edda Knowledge Teacher Portal.

Collection and Use of Personal Data

Types of Data Collected

• Contact Information

When You use our service, we may ask You to provide certain personal data that can be used to contact or identify You. Contact information may include, but is not limited to, your email address, your name or pseudonym, or other identifiers; your other contact details that You may provide Us.

• Usage Data

Usage data is collected and stored automatically when You use the service via an application such as "Edda Physics 1 Demo - Archimedes' Principle" or "Edda Physics 1". Usage data may include information such as a anonymized identifier, the length of a walkthrough of a lab; indicators for the different modes in the application (demo, home, and school mode) and the application's build version

• Website Visit Data

Website visit data is collected and stored automatically when You visit our website. Website visit data may include the following categories of personal data: date and time of the visit, IP address (may also indicate the country you are visiting the website from), your browser, the type and operating system of your device, the referring website, and information about your user behavior.

Use of Your Personal Data

The Company may use personal data according to GDPR Article 6, point 1 (b) (processing is necessary to fulfill a contract) for the following purposes:

• To provide and maintain our service, including to monitor the usage of our service.
• To manage your account: To manage Your registration as a user of the service. The personal data You provide can give You access to various features of the service that are available to You as a registered user.
• To fulfill a contract: Development, compliance, and execution of the purchase agreement for the products, items, or services you have purchased or any other agreement with Us via the service.
• To contact you: To contact you via email regarding updates or informative messages related to the features, products, or the agreed services, including security updates, when necessary or reasonable for their implementation.
• To manage your requests: To manage your requests to Us.

The Company may use personal data according to GDPR Article 6, point 1 (f) (processing is necessary for purposes related to the legitimate interests of the data controller or a third party) for the following purposes:

• For business transfers: We may use your information to evaluate or execute a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, where personal data held by us about our service users are among the transferred assets.
• For business and product development purposes: We may use your information to improve our services, such as data analysis, identifying usage trends, determining the effectiveness of our marketing campaigns, and evaluating and improving our products, services, marketing, and user experience.
• To resolve legal disputes: We may retain your personal data related to our contractual relationship to resolve disputes and uphold our legal agreements.
• To improve user experience: We may use website visit data (as described above) to improve the website's visibility and the relevant user experience - changing and improving the website's design and content based on user activities on the website and its technical functionality.

Disclosure to Third Parties

We may share your personal data in the following situations:

• With service providers: We may share your personal data with service providers to the extent necessary for them to provide their services to us (including helping us monitor and analyze the usage of our service) and to contact you.
• For business transfers: We may share or transfer your personal data in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• With other users: When you share your personal data or otherwise interact with other users in the public areas within the applications or on the website (including relevant chat channels), such information may be viewed by other users and may be publicly disclosed outside the applications. Users who use the services in the role of teachers (e.g., in Edda Knowledge Teacher Portal) may have access to personal data about other users participating in a class they manage. Note that if you interact with other users outside the applications, e.g., via a third-party social media service, the terms of such third-party social media service apply, and Edda Knowledge accepts no responsibility for such interactions.
• With your consent: We may disclose your personal data to third parties for other purposes only with your prior written consent.

Retention of Your Personal Data

The Company will retain your personal data only for as long as is necessary for the purposes set out in this privacy policy. We will retain and use your personal data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws). The Company will also retain usage data for internal analysis purposes. Usage data is generally retained for 5 years from its generation.

Transfer of Your Personal Data

Your personal data is processed at the company's operating locations and at all other locations where the involved parties in the processing are located. This means that your personal data may be transferred to — and stored on — computers located outside your state, province, country, or other governmental jurisdiction, including a third country specified below, where data protection laws may differ from those in your jurisdiction. A third country is a country that is not an EU member state, EEA country, or a country that does not offer an adequate level of data protection according to a relevant decision from the European Commission. We do not store or transfer your personal data to third countries, except in the cases described here. If necessary, your personal data will only be transferred if we have entered into an agreement with the recipient that meets the requirements under the GDPR for transferring personal data outside the EEA (including standard contractual clauses) and have taken other relevant measures to ensure that your personal data is processed according to the high standards of the GDPR.

Disclosure of Your Personal Data

Business Transactions If the company is involved in a merger, acquisition, or sale of assets, your personal data may be transferred to the potential investor or other transaction counterpart. Edda Knowledge shall take measures to minimize the scope of the disclosed personal data, e.g., by removing specific identifiers, aggregating the data, and anonymizing the data, if possible. Legal Proceedings A third country is a country that is not an EU member state, EEA country, or a country that does not offer an adequate level of data protection according to a relevant decision from the European Commission. Other Legal Requirements The company may disclose your personal data in good faith that such action is necessary to:

• Comply with a legal obligation
• Protect and defend the rights or property of the company
• Prevent or investigate possible wrongdoing in connection with the service
• Protect the personal safety of users of the service or the public
• Protect against legal liability

Security of Your Personal Data

The security of Your Personal Data is important to Us, and We implement the necessary legal, organizational, physical, and technical security measures to protect Your Personal Data. The main security measures include the following.

• Physical measures – the offices are locked, and a "clean desk policy" is applied.
• Technical measures – computers are password-protected and encrypted when needed; firewalls and antivirus programs are used; backups are made regularly.
• Organizational measures – data protection, information security, and access management rules are in place; awareness-raising measures for employees; confidentiality requirements are applied to employees.

However, remember that no method of transmission over the Internet or method of electronic storage is 100% secure.

Right to Delete Your Personal Data

A user can contact us at any time via [email protected] to request that collected or stored data be deleted. Please note that We cannot delete any data that We process to fulfill a contractual or legal obligation.

Protection of Your Personal Data under GDPR

If You are a resident of the European Economic Area (EEA), You have certain data protection rights. Edda Knowledge takes all necessary steps to allow You to correct, amend, delete, or limit the use of Your Personal Data. If You want to be informed about what Personal Data We hold about You and if You want it to be removed from our systems, please contact us at [email protected]. Under certain circumstances, You have the following data protection rights:

• Right to access, update, or delete the Personal Data We have about You. Where technically feasible, You can access, update, or request deletion of Your Personal Data directly by contacting us.
• Right to rectification. You have the right to have Your Personal Data corrected if that information is inaccurate or incomplete.
• Right to object. You have the right to object to Our processing of Your Personal Data.
• Right to restriction. You have the right to request that We restrict the processing of Your Personal Data.
• Right to data portability. You have the right to receive a copy of the Personal Data We have about You in a structured, machine-readable, and commonly used format.
• Right to withdraw consent. You also have the right to withdraw Your consent at any time where Edda Knowledge relied on Your consent to process Your personal information.

Please note that We may ask You to verify Your identity before responding to such requests. You have the right to complain to a Data Protection Authority about Our collection and use of Your Personal Data. For more information, please contact Your local data protection authority in the European Economic Area (EEA).

Children's Privacy

Our service does not address anyone under the age of 13. We do not knowingly collect Personal Data from anyone under the age of 13. If You are a parent or guardian and You are aware that Your child has provided Us with Personal Data, please contact Us. If We become aware that We have collected Personal Data from anyone under the age of 13 without verification of parental consent, We take steps to remove that information from Our servers. If We need to rely on consent as a legal basis for processing Your information and Your country requires consent from a parent, We may require Your parent's consent before We collect and use that information.

Links to Other Websites

Our service may contain links to other websites that are not operated by Us. If You click on a third-party link, You will be directed to that third party's website. We strongly advise You to review the privacy policy of every website You visit. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services.

Subscription Licenses

The VR application "Edda Physics 1 Demo - Archimedes' Principle" is free to download and try, but more content can be unlocked via an app store such as the Meta Store or through Subscription Licenses. Please note that when purchasing or subscribing via external providers (e.g., Meta), the relevant external provider's policies apply. Purchases in the app store are subject to the Platform's policies, and Subscription Licenses are offered only in bulk to educational institutions, subject to separate contractual arrangements, both as defined by Meta at https://developer.oculus.com/policy/app-policies/.

Changes to this Privacy Policy

Edda Knowledge reserves the right to update this privacy policy at any time by publishing the updates on our website. You are encouraged to regularly review this privacy policy for any changes. Changes to this privacy policy take effect when they are published on this page.