Privacy

Updated 10 October 2026

Who holds your data

Liminal is run by Heriberto Tinsten, Stockholm, Sweden. Under the GDPR that makes him the data controller for everything below. For any question about your data, write to hello@liminalcases.com.

What we store

Account: your email address and your user id, via Supabase.

Training: your answers to exercises, the evaluation you get back, and which parts of the course you have worked through. When you practise a case or talk to the coach, we also keep the conversation: your messages, the replies, and any rating you give a reply.

Payment, if you buy access: which plan you have, when it ends, and Stripe’s reference for the purchase. Stripe handles your card. We never see the card number.

We keep all of this for as long as you have an account. Delete your account and it goes with it. The one exception is the record of a payment, which Swedish bookkeeping law makes us keep for seven years.

Why we are allowed to

Account, training data and conversations: to provide the service you signed up for. Payment records: the purchase itself, and the bookkeeping law. Reading conversations to improve the grading and the coach, analytics and recording: our legitimate interest in making the product work and finding out where it breaks. You can object to these. See below.

How AI is used

Liminal uses AI models for three jobs: grading your answers against the criteria for each exercise; the interviewer in a case, which picks the fact from the case that answers your question; and the coach you can talk to.

For these jobs we send the model what you write in the exercise or the chat, the case you are working on, and where you are in the course. We don’t send your name or your email address, so please don’t type personal details into your answers.

The models are run by Anthropic (Claude) and, for some older exercises, by OpenAI. Under their commercial terms, neither trains its models on what we send. Anthropic deletes it within 30 days. OpenAI keeps it for up to 30 days to check for abuse, then deletes it.

To improve the grading and the coach, we read the replies students rate down, and a sample of other conversations.

The grading, the interviewer and the coach are generated automatically, and they can be wrong. A grade is practice feedback. Your access and your price never depend on it, and we make no automated decision about you that has legal or similar effects.

Analytics and recording

We use PostHog (EU servers) to see how the product is actually used: page views, which exercises are opened and finished, and where people get stuck. We also record sessions.

The point is to find where the product breaks — not to follow individual people. What you type into answer fields is masked in the recordings.

If you would rather not be recorded, email hello@liminalcases.com and we will turn it off for your account.

What we do not do

We do not sell your data, do not share it with ad networks, and do not use it for marketing aimed at you.

Processors

Supabase (account and database), Anthropic (the interviewer, the coach and grading), OpenAI (grading some older exercises), Stripe (payments), PostHog (analytics and session recording, EU), Cloudflare (hosting).

Anthropic, OpenAI, Stripe and Cloudflare are based in the United States, so your data can be processed there. Each transfer is covered by the EU Standard Contractual Clauses in our agreement with that company, or by the EU–US Data Privacy Framework where the company is certified under it.

Your rights

You can ask for a copy of your data, have it corrected, have it deleted, take it elsewhere, or object to the analytics described above. Email hello@liminalcases.com and we will do it.

If you think we have handled your data badly, you can complain to the Swedish authority for privacy protection, IMY.