Privacy policy

For the Kokodoko app for iPhone and Android. Last updated 23 October 2026.

Data controller

Lightgraph, company registration number 556893-2288, [ADRESS], is the controller of the personal data in the app. Questions about your data: david@lightgraph.se.

What data we process

Account: email address. If you sign in with Google we also receive the name and profile photo of your Google account.
Profile: the display name and profile photo you choose.
What you save in the app: patterns, PDF files, projects, steps, notes, photos, fabrics and finished garments.
Community: posts, photos, comments, likes, blocks and reports.
Web shop purchases: which Kokodoko patterns you have bought at kokodoko.com, so they can be shown in the app. The purchase and payment take place in the web shop.
The Sewing Queen game: results, buttons and what you have bought with buttons in the game (no real money).

Some settings, such as projector calibration and your pattern adjustments, are stored only on your phone. The app has no ads and no third-party tracking or analytics. The app only uses the camera and photo library when you choose a photo yourself.

Why we process the data

To provide the service you asked for: your account, your saved patterns and projects and the community (contract).
To keep the community safe: review reports and stop abuse (legitimate interest).
To reply when you contact us (legitimate interest).

Who can see the data

What you share in the community – display name, profile photo, posts and comments – is visible to other signed-in users. Everything else is private to you.

We use these providers (processors) to run the app:

Supabase – database, sign-in and storage of files and photos (West EU (Ireland)).
Google – sign-in with Google, if you choose it.
Shopify – the web shop kokodoko.com, to see which patterns you have bought.
Lightgraph – sends the sign-in emails.
Expo – delivers app updates.

If a provider processes data outside the EU/EEA, this is done with safeguards under the GDPR, such as the European Commission’s standard contractual clauses. We never sell your data.

How long we keep the data

For as long as you have an account. When you delete your account the data is removed immediately, and from backups within 30 days. See Delete account.

Your rights

You have the right to know what data we hold about you, to have it corrected or deleted, to receive it in a machine-readable format and to object to processing based on legitimate interest. Email us and we will help you. You can also complain to the Swedish Authority for Privacy Protection (imy.se).

Children

The app is intended for people aged 13 or older. We do not knowingly collect data about younger children.

Changes

If we change this policy we update the date above, and for larger changes we tell you in the app.