Kvint — Privacy Policy

Effective date: 2026-05-03

Kvint does not collect, store, or transmit any personal data to the developer or to any server operated by the developer.

Data Controller

The data controller for the purposes of the EU General Data Protection Regulation (GDPR) is:

Sofus Laubel
Denmark
Email: sofus@laubel.dk

What Kvint Handles

Display name

When you first launch Kvint, the app generates a random display name for you (for example, "brave-otter"). You can change this name in Settings. Your display name is:

• Stored in the app's private sandbox storage on your device (the iOS Documents folder used by Kvint, which is not shared with other apps).
• Broadcast on your local Wi-Fi network using mDNS for as long as the app is running, so that other Kvint players nearby can discover you.
• Sent to the host you connect to as part of the join handshake when you tap to join a game, so they can see who is asking to play. This transmission is end-to-end encrypted between the two devices.

Your display name is never sent to any server operated by the developer, and never persisted by anyone other than you.

System permissions

Kvint requests one iOS permission — Local Network access — so it can use mDNS to discover other players on your Wi-Fi. No other system permissions (camera, photos, contacts, location, microphone, etc.) are requested.

Networking and third parties

Kvint uses the open-source iroh peer-to-peer networking library. iroh in turn relies on two services operated by Number 0, Inc. (USA):

• Relay servers at *.relay.n0.iroh-canary.iroh.link. These forward end-to-end encrypted packets between you and your opponent when a direct connection is not possible (for example, when both devices are behind NAT firewalls). Number 0 can observe your IP address, an ephemeral session identifier, and packet timing, but cannot read your display name or game moves.
• A pkarr DNS service at dns.iroh.link. This maps your ephemeral session identifier to your current relay address, so that other players can find you when joining via a shared code or QR code. Number 0 can observe the same identifier and the relay address you are reachable at.

The session identifier is an iroh public key that is regenerated every time you launch Kvint. It is not linked to your account, your device, your display name, or any persistent identifier.

Game moves (board coordinates) and your display name are end-to-end encrypted between you and your opponent. They are not visible to either Number 0 service or to any other party in the network path.

Legal Basis for Processing (GDPR)

The minimal processing described above (broadcasting your display name to discover peers, exchanging an ephemeral identifier and your IP address with relay infrastructure to establish a connection) is performed on the legal basis of performance of the service you have requested (GDPR Art. 6(1)(b)) — namely, finding and connecting to other Kvint players.

International Transfers

Number 0, Inc. operates from the United States. When you use Kvint's online multiplayer features, the relay and DNS services described above may process your IP address and ephemeral session identifier outside the European Economic Area. Kvint itself transmits no personal data internationally beyond what is necessary to establish a peer-to-peer connection.

Your Rights

If you are in the EU, EEA, or UK, you have the right under GDPR to:

• Access any personal data about you that is processed
• Correct inaccurate data
• Have data erased
• Restrict or object to processing
• Data portability

Because Kvint stores your display name only on your own device and operates no server-side database, you can exercise all of these rights yourself directly in the app: change your display name in Settings, or delete the app to remove all associated data from your device.

For any data processed by Number 0 (your IP address and ephemeral session identifier during a multiplayer connection), please contact Number 0 directly.

You also have the right to lodge a complaint with a data protection authority. In Denmark this is Datatilsynet; in other EU/EEA countries you can contact your national supervisory authority.

Children

Kvint is suitable for all ages and does not knowingly collect personal data from children. The app does not require an account or any personally identifying information. If a child uses the multiplayer feature, the same minimal processing described above applies; no special collection takes place.

Data Retention

Your display name and game settings are kept on your device until you change them or uninstall the app. Game move data is held only for the duration of the active game and never written to persistent storage.

Changes to This Policy

If this policy changes, the updated version will be published at this URL and the effective date at the top will be updated. Material changes will also be noted in the app's release notes.

Your Consent

By installing and using Kvint, you consent to the minimal processing described above: your display name being broadcast on your local network for peer discovery, your IP address and ephemeral session identifier being exchanged with Number 0's relay and DNS services when you use online multiplayer, and your display name being shared with the host you connect to. You can withdraw your consent at any time by uninstalling the app or, for the online multiplayer features specifically, by not using them.

Contact

Questions about this policy? Reach out: sofus@laubel.dk