kvint · privacy policy

Updated 19 September 2026 · Aksial Technologies AS · Oslo

KVINT is a word game in English and Norwegian Bokmål. We process account, game and purchase data to run the game, recover progress and provide support. The app has no advertising or tracking across other apps and websites.

Your account and Apple sign-in

Free play starts with a guest account. A random recovery secret is stored in your device’s Keychain; the server stores its hash. It is not a hardware fingerprint. Guest recovery depends on that credential remaining available, and unsynced local games cannot be recovered from a purchase receipt.

You can connect Sign in with Apple for cloud saves. Apple sign-in is required before buying or restoring a language pack. We receive an Apple account identifier and authorization tokens, not your Apple password. The app does not request your Apple name or email, although Apple may supply identity attributes to the authentication service. We keep a protected authorization grant so that we can disconnect Apple access when you delete your KVINT account.

What we process and why

• Account and gameplay: account identifiers, your chosen profile name and username, profile country, language choices, guesses, results, streaks, credits, achievements and multiplayer participation. These provide the game and its account features.
• Saved games: Apple-linked Maze and Deep progress, separately for each language, including recent cloud versions for recovery. Guest Maze and Deep saves stay on the device.
• Purchases: the product, transaction identifiers, account binding and refund or revocation state. These verify each language pack and support restoration. Apple handles payment details; we do not receive your card number or billing credentials.
• Support and safety: reports you send, their reference, app version and relevant game context; player blocks and moderation actions. An email to support also supplies your email address and whatever you include in the message.
• Usage and diagnostics: account-linked app opening, onboarding, language selection, purchase/restore outcomes and game-loading errors. We record version/language information and Apple MetricKit summaries of crashes, hangs and launch durations to understand reliability and improve the app. These events do not include your typed guesses, report text, payment receipts or Apple tokens.

Account and gameplay processing provides the service you request. Security, fraud prevention and bounded product diagnostics support our legitimate interest in operating a reliable game. Optional features, such as reminders, remain under your control. We do not sell personal data or use it for advertising.

What other players see

Your chosen public profile name, username, country flag and game rankings can appear to other players. Opponents see the progress needed to play a match. Do not put private information in a public name. Your private cloud saves, purchase records, Apple authorization and support reports are not visible to other players. Game Center is an optional Apple service with its own profile and privacy controls.

Service providers

Supabase provides authentication, the game database and realtime services. Our game database is configured in Stockholm. Vercel hosts our API, configured in Stockholm, and website; infrastructure logs may include network information such as IP addresses. Apple provides sign-in, purchases, Game Center and platform diagnostics. Email support is delivered through Fastmail. Provider operations and Apple or email services may involve processing in other countries; the linked provider notices describe their practices.

Gameplay input is not sent to an AI provider. The app does not request GPS, contacts, camera, microphone or health data. Sharing and email open system interfaces where you choose the destination and whether to send.

Retention and deletion

Account and game records remain while the account is active. Cloud recovery keeps up to ten prior save versions per language. Detailed release events expire after 90 days; closed or dismissed support reports expire 90 days after their last review. Open reports remain available for resolution. Aggregate operational measurements may remain without identifying your account.

Use Profile → Settings → Delete account to remove your KVINT account, associated game progress, cloud saves, profile and account-linked reports and diagnostics. For an Apple-linked account we first revoke the stored Apple authorization. A failure is shown rather than reported as a completed deletion. Deleted progress cannot be restored by signing in again.

Limited purchase verification records, including the transaction and pseudonymous account-binding token, remain to handle purchase restoration, refunds and duplicate claims. Deletion does not cancel an Apple purchase. With the same Apple identity and purchasing App Store account, an unrevoked pack can be restored to a newly created KVINT account; erased progress stays erased. Database backups expire on their retention cycle, currently seven days. Deleting the app alone does not delete the server account.

Your choices and rights

You can play free as a guest, choose menu and puzzle languages separately, control local reminders in the app and iOS Settings, and manage Apple or Game Center access through Apple. Sign-out is different from permanent account deletion.

For access, correction, deletion, portability, restriction or an objection to processing, contact privacy@aksial.io. We may need information that safely verifies your account. Never send passwords or recovery secrets. You can also contact Norway’s Datatilsynet or your local data protection authority.

KVINT is not directed to children under 13. Contact us if you believe a child has supplied personal information. We update this notice when the product or its data handling changes.