Updated 10 October 2026
Liminal is run by Heriberto Tinsten, Stockholm, Sweden. Under the GDPR that makes him the data controller for everything below. For any question about your data, write to hello@liminalcases.com.
Account: your email address and your user id, via Supabase.
Training: your answers to exercises, the evaluation you get back, and which parts of the course you have worked through. When you practise a case or talk to the coach, we also keep the conversation: your messages, the replies, and any rating you give a reply.
Payment, if you buy access: which plan you have, when it ends, and Stripe’s reference for the purchase. Stripe handles your card. We never see the card number.
We keep all of this for as long as you have an account. Delete your account and it goes with it. The one exception is the record of a payment, which Swedish bookkeeping law makes us keep for seven years.
Account, training data and conversations: to provide the service you signed up for. Payment records: the purchase itself, and the bookkeeping law. Reading conversations to improve the grading and the coach, analytics and recording: our legitimate interest in making the product work and finding out where it breaks. You can object to these. See below.
Liminal uses AI models for three jobs: grading your answers against the criteria for each exercise; the interviewer in a case, which picks the fact from the case that answers your question; and the coach you can talk to.
For these jobs we send the model what you write in the exercise or the chat, the case you are working on, and where you are in the course. We don’t send your name or your email address, so please don’t type personal details into your answers.
The models are run by Anthropic (Claude) and, for some older exercises, by OpenAI. Under their commercial terms, neither trains its models on what we send. Anthropic deletes it within 30 days. OpenAI keeps it for up to 30 days to check for abuse, then deletes it.
To improve the grading and the coach, we read the replies students rate down, and a sample of other conversations.
The grading, the interviewer and the coach are generated automatically, and they can be wrong. A grade is practice feedback. Your access and your price never depend on it, and we make no automated decision about you that has legal or similar effects.
We use PostHog (EU servers) to see how the product is actually used: page views, which exercises are opened and finished, and where people get stuck. We also record sessions.
The point is to find where the product breaks — not to follow individual people. What you type into answer fields is masked in the recordings.
If you would rather not be recorded, email hello@liminalcases.com and we will turn it off for your account.
We do not sell your data, do not share it with ad networks, and do not use it for marketing aimed at you.
Supabase (account and database), Anthropic (the interviewer, the coach and grading), OpenAI (grading some older exercises), Stripe (payments), PostHog (analytics and session recording, EU), Cloudflare (hosting).
Anthropic, OpenAI, Stripe and Cloudflare are based in the United States, so your data can be processed there. Each transfer is covered by the EU Standard Contractual Clauses in our agreement with that company, or by the EU–US Data Privacy Framework where the company is certified under it.
You can ask for a copy of your data, have it corrected, have it deleted, take it elsewhere, or object to the analytics described above. Email hello@liminalcases.com and we will do it.
If you think we have handled your data badly, you can complain to the Swedish authority for privacy protection, IMY.