Privacy Policy
Effective date: July 5, 2026
This Privacy Policy explains how the K-Suomi mobile application ("K-Suomi", "the App", "we", "us", "our") collects, uses, stores, and protects your personal data, and the rights you have under the EU General Data Protection Regulation (GDPR). K-Suomi is a companion app that helps people move to and settle in Finland, with structured onboarding content, Finnish-language learning, and an AI assistant.
Please read this policy together with our Terms of Use.
1. Who we are (data controller)
The data controller responsible for your personal data is:
- Controller: Voimara (a personal brand operated by an individual developer)
- Contact: support@voimara.com
If you have any questions about this Privacy Policy or wish to exercise your rights relating to your personal data, please contact us at the email address above.
2. Summary — at a glance
- We collect the minimum data needed to run your account and the App's features.
- We do not show ads, we do not use advertising identifiers (no IDFA), we use no third-party tracking or analytics SDKs, and we never sell your personal data.
- Your account and learning data are stored on servers located in the European Union.
- You can delete your account and all associated data from inside the App at any time (Settings → Delete Account).
- Some features send your input to an AI provider (Anthropic) to generate responses.
- Payments for subscriptions are handled by Apple or Google — we never see or store your card details.
3. Data we collect and why
| Category | Examples | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Account & identity | Email address, name, the identifier from your sign-in provider (Google ID / Apple ID); a password hash if you use email/password sign-in | Create and secure your account, authenticate you | Performance of a contract (Art. 6(1)(b)) |
| Learning data | Course/lesson progress, XP, streaks, flashcards, saved library items, comprehensive-test and speaking results | Provide the learning experience, track your progress across devices | Performance of a contract (Art. 6(1)(b)) |
| AI assistant content | The messages and questions you send to the in-app AI assistant, and recent translations you request | Generate answers and translations for you | Performance of a contract (Art. 6(1)(b)); processing by our AI sub-processor is necessary to deliver the reply |
| Subscription records | Subscription tier and validity, and the Apple/Google transaction identifiers for your purchase | Grant and verify premium access, prevent abuse | Performance of a contract (Art. 6(1)(b)); legitimate interest in preventing fraud (Art. 6(1)(f)) |
| Operational logs | Technical/diagnostic logs tied to key actions (e.g. payment verification), stored with automatic expiry (TTL) | Diagnose problems, keep the service reliable and secure | Legitimate interest (Art. 6(1)(f)) |
| On-device cache | Downloaded content and app data cached on your device | Enable offline use and faster loading | Performance of a contract (Art. 6(1)(b)) |
We do not collect your phone number, payment card details, precise location, contacts, photos, health data, or advertising identifiers.
4. Sign-in providers (Clerk)
We use Clerk as our authentication processor. When you sign in with Google or Sign in with Apple, or create an email/password account, Clerk processes your email, name, the provider identifier, and (for email/password) a securely hashed password on our behalf. We receive only the information needed to identify your account. We do not receive your Google or Apple account password.
5. AI processing (Anthropic)
Some features — in particular the AI assistant and certain content/translation features — send the text you provide to our AI sub-processor, Anthropic (Claude models), which processes it to generate a response that is returned to you. We send only the content necessary to produce the answer. AI-generated responses may be inaccurate or incomplete and are for information only — they are not legal, immigration, financial, or professional advice (see the Terms of Use).
6. Subscriptions and payments
K-Suomi offers optional auto-renewable premium subscriptions. All payments are processed by Apple (App Store) or Google (Google Play). We never receive or store your payment card or bank details. We only store a record that a subscription is active, its duration, and the store transaction identifier used to verify it. Managing, cancelling, or requesting a refund for a subscription is done through your Apple ID or Google Play account (see the Terms of Use for details).
7. Where your data is stored
- Account & learning data are stored in our database and backend hosted on Amazon Web Services (AWS) in the EU (eu-north-1, Stockholm).
- Authentication data is processed by Clerk.
- AI content is processed by Anthropic to generate responses.
- On-device cache is stored locally on your device and is cleared on logout and via a periodic cache-cleanup (downloaded language content is purged after 24 hours of non-use).
Where a sub-processor processes data outside the European Economic Area, that transfer is covered by an appropriate GDPR safeguard (such as the European Commission's Standard Contractual Clauses).
8. Sub-processors
| Sub-processor | Purpose | Data involved |
|---|---|---|
| Amazon Web Services (AWS) | Backend hosting & database (EU, eu-north-1) | Account, learning, subscription, log data |
| Clerk | Authentication | Email, name, provider ID, password hash |
| Anthropic | AI assistant / content generation | The text you send to AI features |
| Apple | App Store subscription payments & delivery | Purchase/transaction data (handled by Apple) |
| Google Play subscription payments & delivery | Purchase/transaction data (handled by Google) |
9. Data retention
- We retain your account and learning data for as long as your account is active or until the data is no longer necessary for the purposes described in this Privacy Policy.
- Operational logs are retained for a limited period and expire automatically via a time-to-live (TTL) mechanism.
- Some data is stored temporarily on your device as a local cache. This cache is cleared when you log out, and downloaded language content is purged after 24 hours of non-use.
- When you delete your account (see below), your data is permanently removed after the grace period described in section 10.
10. Account Deletion
You can delete your account directly inside the App:
Settings → Delete Account.
When you confirm deletion (by re-entering your account email), your account is scheduled for deletion and you are signed out. There is a 7-day grace period: if you sign back in during those 7 days, you will see a recovery screen where you can cancel the deletion and restore your account. After 7 days, if not recovered, your account and all associated data are permanently deleted.
Note about subscriptions: Deleting your account does not automatically cancel an active auto-renewable subscription. You must cancel it separately in your Apple ID (Settings → your name → Subscriptions) or Google Play (Play Store → Subscriptions) account settings, otherwise it may continue to renew and be billed.
11. Your rights (GDPR)
If you are in the EU/EEA, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data ("right to be forgotten") — you can do this yourself in-app (section 10) or by contacting us.
- Restrict or object to certain processing.
- Data portability — receive your data in a portable format.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with your data protection authority. In Finland this is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).
To exercise any of these rights, contact us at support@voimara.com.
12. Children
K-Suomi is not directed to children under 13 and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will delete it.
13. No advertising, no tracking
We do not display advertising, do not use advertising identifiers, and do not use third-party tracking or analytics SDKs to profile you across apps or websites. We do not sell or rent your personal data to anyone.
14. News content
The App shows summaries of news and information with attribution and a link back to the original source. We do not collect personal data about which articles you read for advertising purposes.
15. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes we will update the effective date at the top and, where appropriate, notify you in the App. Continued use of the App after an update means you accept the revised policy.
16. Contact
For any privacy question or request, contact:
- Voimara
- support@voimara.com