Privacy Policy

Effective date: 26 July 2026 · Last updated: 26 July 2026

Klack is a scorekeeping app for the game of Mölkky, published by Suuntio (“we”, “us”), based in Finland. This policy explains what data Klack handles, why, and what control you have over it.

The short version: Klack works entirely on your device. You do not need a Klack account. There is no advertising, no analytics, and no third-party tracking. Data leaves your phone only when you deliberately choose a feature that needs it — sharing a live game, backing up to the cloud, or subscribing to Klack Pro.

1. Who is responsible for your data

Suuntio Finland Email: support@klack.club

Suuntio is the data controller for the personal data described in this policy, within the meaning of the EU General Data Protection Regulation (GDPR).

2. Data stored on your device only

By default, everything Klack records stays on your phone in a local database and is never transmitted anywhere:

• Games you have played: throws, scores, rules used, timestamps, outcomes
• Your player roster: the names you give the people you play with
• Statistics and skill ratings derived from those games
• App settings: language, theme, and your own display name

This data is not accessible to us. If you delete the app without ever creating a Klack account, this data is deleted with it and no copy exists anywhere else.

3. Data processed when you use online features

Klack’s online features are all optional and user-initiated. If you never use them, no personal data is sent to our servers.

3.1 Anonymous device identity

The first time the app can reach the network, Klack creates an anonymous identifier for your device — a random UUID. It carries no name, email, device fingerprint, or advertising identifier, and it is not derived from anything about you or your hardware.

This identifier exists so that a person can be recognised across games and devices: it is how your history follows you, and how the app knows that “Anna” on your friend’s phone and “Anna” on yours are the same player. We refer to it in the app as your Klack user id.

• Purpose: enabling multiplayer, player identity, and backup
• Legal basis: legitimate interest (GDPR Art. 6(1)(f)) in providing a functioning app; for the features you actively choose, performance of a contract (Art. 6(1)(b))
• Retention: until you delete your Klack account, or until the identity is discarded (for example by signing out or reinstalling)

The app is fully usable if this identity is never created — for example if the device is permanently offline.

3.2 Sharing a live game

When you share a game so that others can follow the score in real time, the following is sent to our backend for the duration of that game:

• A game record (its rules, its status, and a short join code)
• The list of participants: their Klack user ids and the display names they chose
• An ordered log of the throws recorded during the game, and the final result
• Skill-rating values reported by participants, so ratings can be settled

This data is readable only by the people who are members of that game session. It is kept only for as long as it is needed to relay the game to its participants and let them download their own copy, and is then deleted from the relay.

• Purpose: delivering the live-sync feature you requested
• Legal basis: performance of a contract (Art. 6(1)(b))

3.3 Creating a Klack account

A Klack account is optional. It makes your player identity durable — your name, statistics and skill rating stay yours across your devices and in games other people record — and it is what a Klack Pro subscription and any cloud backup attach to. Every local feature of Klack — scoring, history, statistics, ratings, the roster — works with no Klack account.

If you create one, we process:

• Your email address, if you sign up with email and password
• The identifier supplied by Apple or Google if you use their sign-in. With Sign in with Apple you may choose Apple’s private relay address, in which case we never see your real email address.
• An encrypted password hash, if you use email and password

We use your email address only to authenticate your Klack account and to send essential service messages (confirming your address, resetting your password). We do not send marketing email.

• Legal basis: performance of a contract (Art. 6(1)(b))
• Retention: until you delete your Klack account

3.4 Cloud backup of your games (Klack Pro)

If you are a Klack Pro subscriber and you switch on backup, your completed games are uploaded to your private cloud library: the game’s rules, its players’ names and Klack user ids, the throws, the final scores and the resulting ratings. Only you can read your library — it is protected at the database level by row-level security keyed to your Klack account.

Restoring your own games from the cloud is always free and remains available even if your subscription lapses.

• Legal basis: performance of a contract (Art. 6(1)(b))
• Retention: for as long as your Klack account exists. If your subscription lapses, your cloud games are retained for a further 6 months and then deleted; we warn you in the app before this happens. Deleting your Klack account deletes them immediately.

3.5 Push notifications

If you accept notifications, your device’s push token is stored against your Klack account so we can notify you when someone invites you to a game. Klack never asks for notification permission at launch — only after you first confirm an invitation or join a hosted game, and only after explaining why.

Notification tokens are used solely for game invitations and game events. We send no promotional notifications. Declining permission breaks nothing: invitations still reach you inside the app.

• Legal basis: consent (Art. 6(1)(a)) — you may withdraw it at any time in your device settings
• Retention: until you revoke permission, delete your Klack account, or the token becomes invalid

3.6 Subscriptions

If you purchase Klack Pro, the purchase itself is handled by Apple or Google. We never see or receive your payment card, billing address, or any financial details.

To know whether your subscription is active, we process — via RevenueCat — an anonymised purchase record: your subscription status, product, purchase and expiry dates, platform, and an app-user identifier linked to your Klack account.

• Legal basis: performance of a contract (Art. 6(1)(b)) and compliance with legal obligations (Art. 6(1)(c))
• Retention: for the life of the subscription and thereafter as required for accounting and tax purposes

3.7 Camera

Klack can scan a QR code to join a game or claim your history. The camera feed is processed live on your device and is used only to decode the code. No image, video, or frame is ever stored, transmitted, or retained. Camera access is optional — every code can also be typed in by hand.

4. What Klack does not do

To be explicit, Klack contains:

• No advertising and no ad networks
• No analytics, telemetry, or attribution SDKs
• No third-party trackers, pixels, or fingerprinting
• No cross-app or cross-site tracking, and no use of the advertising identifier (IDFA). We do not request App Tracking Transparency permission because we do not track.
• No collection of location, contacts, photos, health data, microphone audio, or your browsing activity
• No sale or sharing of personal data with data brokers, ever, under any circumstances

We do not use your data to train machine-learning models.

5. Who else processes your data

We use a small number of processors, each bound by a data-processing agreement:

Where a transfer outside the EEA occurs, it is covered by the European Commission’s Standard Contractual Clauses or an adequacy decision.

6. How long we keep things

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, object to, and port your personal data, and to withdraw consent where processing is based on it.

You can exercise the most important of these yourself, in the app:

• Rectification — rename yourself and any player from the Players tab.
• Erasure — open your Klack account from the “You” tab → account icon → Delete Klack account. This deletes your Klack account credentials and every record we hold that belongs to you, including your entire cloud library, and returns the device to a fresh anonymous identity. It is immediate and irreversible.
• Local erasure — deleting the app removes all local data.

For anything else, or to make a request in writing, email support@klack.club. We respond within 30 days.

What deletion does not do. Deleting your Klack account does not reach into other people’s data. Games your friends recorded on their devices remain theirs, including the pseudonymous player identifier that links your appearances in them — that is their own record of games you played together, and removing it would destroy their history. That identifier carries no name, email, or contact detail of yours.

If you believe we have handled your data unlawfully, you may lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi) or your local supervisory authority.

8. Security

Data in transit is encrypted with TLS. Cloud data is protected by database-level row-level security policies that make each row readable only by its owner or by the members of the game session it belongs to — knowing someone’s identifier grants no access to their data. Authentication sessions are held in the device’s secure storage (iOS Keychain / Android Keystore).

9. Children

Klack is not directed at children under 13 (or under the applicable age of digital consent in your country, which is 13 in Finland). We do not knowingly collect personal data from children. Klack is safe for family use offline — it collects nothing at all in that mode. If you believe a child has created a Klack account, contact support@klack.club and we will delete it.

10. Changes to this policy

If we change this policy materially, we will update the date above, publish the revised policy at this address, and — where the change affects data we already hold — notify you in the app before it takes effect.

11. Contact

Questions, requests, or complaints:

support@klack.club Suuntio, Finland

Effective 26 July 2026 · Published by Suuntio · support@klack.club