Privacy Policy
Effective 2026-11-01
FiniTok ("we") is operated by Elton Carlström, Stockholm, Sweden, who is the data controller. Contact: support@finitok.com. FiniTok shows no ads, does not track you across other companies' apps or websites, and does not sell your data.
What we collect and why
- Email address and user ID (a random ID our backend assigns), to create and secure your account and sign you in. Legal basis: performing our contract with you.
- Onboarding answers, topics and creators you follow, saves, notes and feedback, to build your daily edition and Library. Legal basis: contract.
- Engagement events (such as which posts you opened, finished, saved or rated), to keep the edition and Library working. Legal basis: contract; our legitimate interest in running and improving the service.
- Subscription status, to know whether you have access. Legal basis: contract; legal obligations (accounting).
If you sign in with Apple or Google we receive only the identifiers they return (such as an account identifier and, if you allow it, your email). We never see your Apple or Google password. We do not collect precise location, contacts, photos or the advertising identifier.
Who processes data for us
- Supabase: authentication, database and server functions. Our project runs in the EU (Ireland, eu-west-1).
- RevenueCat: receives your app account ID and purchase information to confirm your subscription status.
- Apple: Sign in with Apple, In-App Purchase (Apple processes payment; we never see your card details), and DeviceCheck.
- Google: Sign in with Google, if you choose it.
- Resend: sends account confirmation and password-reset codes to your email address.
These providers act on our instructions and have their own privacy policies. Some may process data outside the EU, including in the United States, under safeguards such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
Free trial and device check
To offer one free trial per device we use Apple DeviceCheck. The app sends Apple a device token via our server; Apple stores a single on/off marker for your device. We do not store the token or any device identifier: we only store whether a trial decision was made for your account. The marker stays with the device at Apple, even if you delete your account or reinstall. Legal basis: legitimate interest in preventing trial abuse.
Videos from other platforms
Posts play in the official embedded players of YouTube, Instagram and TikTok. When you play one, that platform may collect data such as your IP address and device information under its own policy. We do not control this.
How long we keep data
Account data is kept until you delete your account. A small purchase-event log (event ID, technical checksum, processing status) is kept to avoid processing the same subscription notice twice; it is disconnected from your account on deletion. Backups and server logs may hold copies for a short additional time. When you delete your account in the app, we delete your server data and then ask RevenueCat to delete your customer record (this second step is best effort; if it fails, contact support@finitok.com and we will remove it). Apple keeps its own purchase records (App Store receipts) under Apple's privacy policy. Deleting your account does not cancel an active Apple subscription: it keeps billing until you cancel it in your Apple Account settings. We may keep limited records where the law requires (for example accounting).
Deleting your account
In the app go to Settings, then Delete account. This signs you out everywhere and permanently deletes your account and the data linked to it on our servers. If you signed in with Apple, the app asks you to confirm with Apple so the connection to your Apple ID can be revoked. Deleting your account does not cancel an App Store subscription; cancel it in your Apple ID subscription settings. You can also email us to request deletion.
Your rights
Under the GDPR you may request access, correction, deletion, restriction, portability, and object to processing based on legitimate interest. Where processing relies on consent you can withdraw it at any time. Email support@finitok.com; we reply within one month. You can complain to the Swedish Authority for Privacy Protection (IMY, imy.se) or your local authority.
Security and children
Data is sent over encrypted connections and access is restricted by account-level rules in the database. No system is perfectly secure. FiniTok is not directed at children under 13 and we do not knowingly collect their data; contact us and we will delete it.
Changes
If we change this policy we will update the date above and, for material changes, tell you in the app or by email.