TypeThai for iOS — Privacy Policy

Effective: 31 May 2026

This policy describes how the TypeThai mobile application for iOS ("the App") handles information. It applies specifically to the iOS version of TypeThai. Other Klondis products and our website are covered by the general Klondis Privacy Policy — where the two differ, this document governs the App.

Summary

The App is designed to collect as little personal information as possible. We do not require an account. We do not ask for your email. We do not show advertising. We do not sell or share your data with advertisers or data brokers.

The App stores your preferences and learning progress locally on your device, and — if iCloud is enabled in your iOS settings — syncs them to your own iCloud account so you can move between your devices. Klondis does not have access to data in your iCloud.

Purchases are handled by Apple's StoreKit, not by us; we receive only the confirmation that you are entitled to premium features.

We offer optional analytics, off by default. You can turn them on, and turn them back off, at any time. If you do, anonymous usage data is sent to PostHog in Frankfurt, Germany. Because the data is anonymous, we have no way to identify which records belong to you — and we have deliberately designed the system that way.

That is essentially everything. The sections below describe each piece in more detail.

1. Who we are

The data controller for personal data processed in connection with the App is:

Klondis Oy
Business ID: 3595444-5
Kukkulantie 2 A 28, 33960 Pirkkala, Finland

For privacy questions, requests, or to exercise the rights described in this policy, contact: privacy@klondis.com

2. What the App processes

2.1 Preferences and settings

The App stores your preferences (chosen theme, voice, fonts, keyboard layout, language, audio settings, and similar configuration) on your device using iOS's standard preference storage. If iCloud Key-Value Store sync is enabled on your device, these preferences are also synchronized to your iCloud account so that the same settings appear on your other Apple devices.

• Where it's stored: locally on your device, and in your private iCloud account.
• Who sees it: only you. Klondis does not have access.
• Why we process it: to make the App work the way you've configured it.

2.2 Learning progress

The App records your progress through lessons: which lessons you have completed, how long they took, accuracy and pacing data per keystroke, your current streak, and spaced-repetition state that powers the App's review system.

• Where it's stored: locally on your device in a Core Data database, and synchronized to your private iCloud (CloudKit) database if iCloud is enabled.
• Who sees it: only you. Klondis does not have access to your CloudKit data.
• Why we process it: to track your progress, show you statistics, and power the spaced-repetition review system.

2.3 Purchase records

When you make a purchase in the App — a subscription or the lifetime option — the App relies on Apple's StoreKit framework to handle the transaction. Apple processes your payment and your App Store account information; the App does not see your payment method, billing address, or any financial details.

The App receives only a confirmation from Apple that your account is entitled to the premium features. This confirmation is checked locally on your device.

• Where it's stored: Apple's servers (under Apple's privacy policy); entitlement confirmation is verified locally on your device.
• Who sees it: Apple, and you. Klondis does not see your transaction details.
• Why we process it: to determine whether to unlock premium content.

2.4 Free trial

If you choose to start a free trial when subscribing, the trial is managed by Apple's StoreKit framework as part of your subscription. Apple handles trial eligibility, the trial period, and any automatic conversion to a paid subscription. Klondis does not see or store your trial details.

2.5 Optional analytics

The App can collect anonymous usage data — which screens you visit, which lessons you complete, which features you use — to help us understand how the App is being used and improve it.

Analytics are off by default. When you first open the App, you are asked whether to enable them. You can decline, and the App will not send any analytics data. You can change your choice at any time in Settings.

If you enable analytics, the data is sent to PostHog, a product analytics platform. Analytics data is processed on PostHog's EU cloud servers in Frankfurt, Germany. The data is associated with a randomly-generated identifier created on your device; it is not linked to your name, email, Apple ID, or any other personally identifying information, because the App does not collect those. The identifier is never transmitted to Klondis in any form that lets us connect it back to you as a person.

• Retention: Analytics events are retained in our PostHog project for a maximum of one year, after which they are automatically deleted by PostHog. We may configure shorter retention periods within that maximum.
• Withdrawing consent: You can disable analytics at any time in Settings. When you do, the App stops sending data immediately, and your local analytics identifier is rotated — so any future events (if you re-enable analytics) are not connected to previous ones.
• Where it's stored: PostHog Cloud EU (Frankfurt, Germany).
• Who sees it: Klondis, in aggregated form. Klondis cannot link analytics data back to you as an individual.
• Why we process it: to understand how the App is used and improve it (consent-based, withdrawable at any time).

2.6 What we do not collect

To be explicit, the App does not collect:

• Your name, email address, phone number, or postal address
• Your contacts, calendar, photos, microphone, or camera data
• Your location or country (we do not collect precise GPS location, nor do we approximate your location or country via network IP routing metrics)
• Your IDFA (advertising identifier) — we do not use AppTrackingTransparency because we do not track you
• Any data from other apps you have installed
• Any data for advertising or marketing purposes

We do not build user profiles, we do not sell data, we do not share data with advertisers, and we do not participate in any cross-app or cross-website tracking.

3. Third parties

The App uses two third-party services:

Apple Inc.

Apple provides StoreKit (for purchases) and iCloud (for syncing your preferences and progress). When you use the App on an Apple device, you are also subject to Apple's Privacy Policy. The geographic location of iCloud data storage is determined by Apple's infrastructure decisions and Apple's policies — see Apple's documentation for current details.

Apple acts as the data processor for these services. Klondis does not have access to your iCloud data or your Apple ID information.

PostHog Inc.

If you have enabled analytics, anonymous usage data is sent to PostHog, our product analytics provider. We use PostHog Cloud EU, with data stored in Frankfurt, Germany. PostHog acts as a data processor under a Data Processing Agreement with Klondis. PostHog's privacy practices are described at posthog.com/privacy.

If analytics are off, no data is sent to PostHog.

4. Legal basis for processing (GDPR)

For users in the EU, EEA, and UK, we process personal data under the following legal bases:

• Performance of a contract (GDPR Art. 6(1)(b)): processing your preferences, learning progress, and purchase entitlement is necessary to provide the App and the features you have purchased or are trialing.
• Consent (GDPR Art. 6(1)(a)): processing analytics data is based on your consent, given through the in-app prompt. You can withdraw consent at any time without affecting your use of the App.
• Legitimate interest (GDPR Art. 6(1)(f)): in limited cases, we may process data for our legitimate interests in providing and securing the App, where these interests are not overridden by your rights — for example, basic diagnostic behavior needed to keep the App functioning correctly.

5. Data retention

• Preferences and learning progress are kept on your device and in your iCloud account for as long as you keep the App installed and have iCloud enabled. You can delete them at any time using the "Delete My Cloud Data" option in Settings, or by deleting the App.
• Purchase records are kept by Apple under Apple's own retention policies. Klondis does not retain transaction data.
• Trial state is managed and retained by Apple under Apple's policies.
• Analytics data is retained by PostHog for a maximum of one year, after which it is automatically deleted. We may configure shorter retention within that maximum.

6. Your rights

Under the GDPR (for EU/EEA/UK users), the California Consumer Privacy Act (for California residents), and similar laws in other jurisdictions, you have the following rights in principle:

• Access to personal data we hold about you
• Rectification of inaccurate data
• Erasure of your data
• Restriction of processing
• Portability of your data in a machine-readable format
• Objection to processing based on legitimate interests
• Withdrawal of consent, at any time, for analytics

How these rights apply to the App is shaped by the fact that we have deliberately designed it to hold almost no personal data about you. Specifically:

We have no account for you and no way to identify you. We do not store your name, email, Apple ID, IP address, device identifier, or any other personally identifying information on our infrastructure. Analytics events, if enabled, are stored under an anonymous identifier that exists only on your device; we have no mechanism to link this identifier back to you as a person.

GDPR Article 11 addresses this directly: where a controller does not need to identify the data subject in order to provide the service, the controller is not required to create or maintain identification information for the sole purpose of complying with the regulation. Articles 15 to 20 (access, rectification, erasure, restriction, portability, objection) consequently do not apply to data we cannot link to you. We are not in a position to verify the connection between any request and specific records in our systems, and we have not built such a capability — by design.

Practically, this means:

• You can withdraw consent for analytics at any time in Settings. This stops further data collection immediately and rotates your local analytics identifier.
• You can delete all locally-stored data by tapping "Delete My Cloud Data" in Settings, which removes data from your device and from your iCloud account, and rotates the analytics identifier. (This does not delete previously-sent analytics events from PostHog's servers; those events remain until they expire under the one-year retention described in Section 5.)
• You can delete all data on Apple's side by deleting the App, signing out of iCloud, or using Apple's data management tools at privacy.apple.com.
• You can contact us at privacy@klondis.com with any rights request. As described above, we cannot verify the connection between requests and specific anonymous records, so we cannot fulfill access or deletion requests targeting individual records in our analytics. We will respond within the 30-day timeframe required by GDPR, and where the App itself provides a way to exercise the right (such as the Settings options listed above), we will direct you there.

You also have the right to lodge a complaint with a data protection authority. In Finland, that is the Office of the Data Protection Ombudsman (tietosuoja.fi). If you are in another EU/EEA country, you may contact your local supervisory authority.

For California residents: we do not sell personal information, and we do not share personal information for cross-context behavioral advertising. The rights above include your rights under the CCPA.

7. International transfers

Klondis is based in Finland. The App's optional analytics data is processed in Germany, within the EU. Apple's iCloud data is processed according to Apple's infrastructure decisions and Apple's privacy policy.

Klondis itself does not transfer your personal data outside the EU/EEA.

8. Children's privacy

The App is not directed at children under 13. We do not knowingly collect personal data from children. The App does not request information that could identify a child specifically.

If you believe a child has provided information to us, contact privacy@klondis.com and we will address it appropriately.

9. Security

We use the security features built into iOS and into the third-party services we use:

• Data on your device is protected by iOS's standard data protection.
• iCloud sync uses Apple's encryption, governed by your iCloud settings.
• Analytics data in transit to PostHog uses TLS encryption.
• PostHog Cloud EU is SOC 2 Type II certified and GDPR-compliant.

Because the App is designed to collect so little personal information, the impact of any security incident is inherently limited — we do not hold lists of users, email addresses, payment details, names, or any data that could be used to identify or contact you. If we become aware of a security incident affecting personal information for which we are the controller, we will notify the relevant supervisory authority within 72 hours as required by GDPR. Direct notification of affected users is generally not possible given the anonymous nature of our data; where the App itself can communicate with users (e.g., via an in-app notice on next launch), we will use that channel.

10. Changes to this policy

We may update this policy as the App evolves. If we make material changes, we will notify you through the App and update the "Effective" date at the top of this document. Continued use of the App after a policy update means you accept the updated policy.

Previous versions of this policy are available on request.

11. Contact

Klondis Oy
Kukkulantie 2 A 28
33960 Pirkkala
Finland
Business ID: 3595444-5

Privacy questions and requests: privacy@klondis.com

This policy is provided in English. If you have read a translated version, the English version governs in case of any conflict.