kvint · privacy policy

Updated 3 November 2026 · Aksial Technologies AS · Oslo

KVINT is a word game in English and Norwegian Bokmål. We process account, game and purchase data to run the game, recover progress and provide support. The app has no advertising or tracking across other apps and websites.

Your account and Apple sign-in

Free play starts with a guest account. A random recovery secret is stored in your device’s Keychain; the server stores its hash. It is not a hardware fingerprint. Guest recovery depends on that credential remaining available, and unsynced local games cannot be recovered from a purchase receipt.

You can connect Sign in with Apple for cloud saves. You can buy and restore KVINT Full without it; earlier versions of the app ask you to sign in with Apple first. We receive an Apple account identifier and authorization tokens, not your Apple password. The app does not request your Apple name or email, although Apple may supply identity attributes to the authentication service. We keep a protected authorization grant so that we can disconnect Apple access when you delete your KVINT account.

What we process and why

• Account and gameplay: account identifiers, your chosen profile name and username, profile country, language choices, guesses, results, streaks, credits, achievements and multiplayer participation. These provide the game and its account features.
• Saved games: Apple-linked Maze and Deep progress, separately for each language, including recent cloud versions for recovery. Guest Maze and Deep saves stay on the device.
• Purchases: the product, transaction identifiers, account binding and refund or revocation state. These verify KVINT Full and the earlier language packs, and support restoration. Apple handles payment details; we do not receive your card number or billing credentials.
• Notifications and invitations: if you allow notifications, an Apple push token for this device, linked to your account with your notification choices, menu language and app version. We use it to tell you when a player joins, it is your move, a turn is running out, a match ends, or someone invites you or asks for a rematch. Notifications name the other player and never include your guesses or the word. The in-app inbox shows the same events. An invitation link contains only a room code.
• Players and friends: the players you have played, the players you save, and your records against them. Saving a player does not notify them. When you and another player have saved each other and both share your Daily (on by default, under Settings), each of you sees how many guesses the other needed for today’s word, after finishing it yourself, and you appear on each other’s Friends leaderboard. The word and your guesses are never shown. A nudge in a day-long duel or an invitation to a race sends the other player a notification that names you.
• Support and safety: reports you send, their reference, app version and relevant game context; player blocks and moderation actions. An email to support also supplies your email address and whatever you include in the message.
• Usage and diagnostics: account-linked app opening, onboarding, language selection, unlock offers seen, purchase/restore outcomes, completed Daily and Maze stages, whether Apple’s rating prompt was requested, and game-loading errors. We record version/language information and Apple MetricKit summaries of crashes, hangs and launch durations to understand reliability and improve the app. These events do not include your typed guesses, report text, payment receipts or Apple tokens.

Account and gameplay processing provides the service you request. Security, fraud prevention and bounded product diagnostics support our legitimate interest in operating a reliable game. Optional features, such as reminders and notifications, remain under your control. We do not sell personal data or use it for advertising.

What other players see

Your chosen public profile name, username, country flag and game rankings can appear to other players. Opponents see the progress needed to play a match. Players you have saved each other with see your Daily guess count while you share your Daily. Do not put private information in a public name. Your private cloud saves, purchase records, Apple authorization and support reports are not visible to other players. Game Center is an optional Apple service with its own profile and privacy controls.

Service providers

Supabase provides authentication, the game database and realtime services. Our game database is configured in Stockholm. Vercel hosts our API, configured in Stockholm, our website and the invitation pages; infrastructure logs may include network information such as IP addresses. Apple provides sign-in, purchases, push notifications, Game Center and platform diagnostics. Email support is delivered through Fastmail. Provider operations and Apple or email services may involve processing in other countries; the linked provider notices describe their practices.

Gameplay input is not sent to an AI provider. The app does not request GPS, contacts, camera, microphone or health data. Sharing and email open system interfaces where you choose the destination and whether to send.

Retention and deletion

Account and game records remain while the account is active. Cloud recovery keeps up to ten prior save versions per language. Detailed release events expire after 90 days; closed or dismissed support reports expire 90 days after their last review. Open reports remain available for resolution. Inbox entries expire after 30 days. Saved players remain until you remove them, block the player or delete your account. A push token is removed when you sign out or delete your account; one that Apple reports as no longer valid stops receiving notifications and is deleted after 30 days. Aggregate operational measurements may remain without identifying your account.

Use Profile → Settings → Delete account to remove your KVINT account, associated game progress, cloud saves, profile and account-linked reports and diagnostics. For an Apple-linked account we first revoke the stored Apple authorization. A failure is shown rather than reported as a completed deletion. Deleted progress cannot be restored by signing in again.

Limited purchase verification records, including the transaction and pseudonymous account-binding token, remain to handle purchase restoration, refunds and duplicate claims. Deletion does not cancel an Apple purchase. With the purchasing App Store account, an unrevoked KVINT Full or language pack can be restored to a newly created KVINT account; erased progress stays erased. Database backups expire on their retention cycle, currently seven days. Deleting the app alone does not delete the server account.

Your choices and rights

You can play free as a guest, choose menu and puzzle languages separately, control reminders and multiplayer notifications in the app and iOS Settings, stop sharing your Daily with friends, remove saved players, and manage Apple or Game Center access through Apple. Sign-out is different from permanent account deletion.

For access, correction, deletion, portability, restriction or an objection to processing, contact privacy@aksial.io. We may need information that safely verifies your account. Never send passwords or recovery secrets. You can also contact Norway’s Datatilsynet or your local data protection authority.

KVINT is not directed to children under 13. Contact us if you believe a child has supplied personal information. We update this notice when the product or its data handling changes.