Privacy Policy – Korko

This privacy policy covers the Korko mobile app (iOS and Android) and its web pages.

Updated 10 November 2026.

1. Summary

The Korko app is used without an account. The loan details, settings, and rate alerts you enter stay on your own device. The app has no ads, third-party analytics, or tracking.

2. Controller

Cavalier Venues Oy (Cavalier Code), Business ID 3649639-4, VAT ID FI36496394, domicile Helsinki, Finland. Privacy enquiries: tietosuoja@ccode.fi.

3. Data we process

On your phone and tablet: The loan details you enter in the app (principal, loan term, reference rate, margin, repayment method, and rate reset date), your reminders, and the most recently fetched rate dataset are stored only on your own device and in its local home screen widget storage. Cavalier Venues Oy has no backend server or database to which your loan details would be sent. On iPhone and iPad, local app storage may be included in your own device backups according to your device settings; on Android, cloud backup is disabled.

Fetching reference rates: When the app updates the latest public reference rates online, your device fetches the public report directly from the Bank of Finland's public report server (reports.suomenpankki.fi). No loan details or personal data are sent in the request; as in normal web traffic, the receiving server sees the device's IP address and basic technical headers to deliver the response.

Local notifications: Rate reset reminders and rate alerts are calculated and scheduled locally on your device using operating system local notifications. Notification data is not sent to external push servers.

Korkopassi annual subscription: Payments and subscriptions are processed by Apple (App Store) or Google (Google Play). The app verifies subscription status on the device via StoreKit 2 or Google Play Billing. Cavalier Venues Oy does not receive your payment card, bank account, or other billing details.

4. Retention and deletion

Because loan data is stored only on your device, you can edit or delete it at any time directly in the app or by uninstalling the app from your device.

5. Website and enquiries

This website uses no cookies or analytics and is hosted by our processor Vercel Inc. Logs containing technical data are kept for at most 30 days. If you email us at support@ccode.fi or tietosuoja@ccode.fi, we process your name, email address, and message in Google Workspace to reply to you (legitimate interest, GDPR Article 6(1)(f)). Messages are kept for up to 12 months from the last message. Vercel and Google may process data outside the EU; transfers rely on the EU–US Data Privacy Framework or standard contractual clauses approved by the European Commission.

6. Your rights and changes

You have the right to request access to enquiries you have sent us, rectification or erasure, and to object to processing by contacting tietosuoja@ccode.fi. You may also lodge a complaint with the Office of the Data Protection Ombudsman in Finland (tietosuoja.fi). When this policy changes, the date at the top of the page is updated.