Privacy Policy

Last updated: 11 September 2026

This Privacy Policy explains how Nordkisel AB ("Nordkisel", "we", "us", or "our") collects, uses, stores, and protects personal data when you use Bricks, including the Bricks website at bricks.nordkisel.com and the related mobile app and API services.

Nordkisel AB is the data controller responsible for the processing of personal data described in this policy.

1. Information We Collect

Depending on how you use Bricks, we may collect the following information:

Account information

When you create an account, we collect the information required to create and manage it. This may include your name, email address, and an encrypted or securely hashed version of your password.

Couple and relationship information

Bricks pairs two accounts into a couple. We store the information you and your partner create together or individually within the app, such as monthly and weekly sync entries, shared rulebook entries, shared lists (movies, books, and bucket-list items), daily selfies, quiz answers and scores, milestones, and profile details. This information may be visible to your paired partner so that the relevant feature can operate.

Photos

If you use the daily selfie feature, we store the photo you upload so it can be shared with your partner within the app.

Technical and security information

When you access Bricks, our systems may automatically record limited technical information such as your IP address, device type, operating system, app version, access times, requested pages or endpoints, and server error or security logs.

We use this information only where reasonably necessary to operate the service, diagnose technical problems, prevent abuse, and protect Bricks and its users.

Push notification tokens

If you enable notifications, we store a device token so we can deliver reminders and updates about your and your partner's activity in the app.

Cookies and local storage

The Bricks website may use strictly necessary cookies or similar browser storage to keep you signed in, maintain your session, and protect the service against misuse.

Bricks does not use advertising cookies or cookies for cross-site behavioural tracking.

2. Why We Process Your Information

We process personal data for the following purposes:

• To create and manage your Bricks account and couple pairing.
• To provide the app's features: syncs, rulebook, lists, selfies, quizzes, milestones, and profiles.
• To deliver push notifications you have enabled.
• To authenticate users and keep accounts secure.
• To prevent fraud, abuse, and unauthorised access.
• To investigate errors and maintain the reliability of the service.
• To respond to support requests and privacy enquiries.
• To comply with legal obligations where applicable.

3. Legal Bases for Processing

Under the General Data Protection Regulation ("GDPR"), we rely on:

Performance of a contract

Processing account details, couple data, and content you create is necessary to provide the Bricks service you request when you create an account and pair with your partner.

Legitimate interests

We may process limited technical, security, and diagnostic information where necessary for our legitimate interests in operating, securing, maintaining, and improving Bricks. We consider the impact on users before relying on this basis.

Consent

We rely on your consent for optional features such as push notifications. You can withdraw consent at any time by disabling notifications in the app or your device settings.

Legal obligations

We may retain or process particular information where necessary to comply with applicable law, respond to a lawful request, or establish, exercise, or defend a legal claim.

4. How We Share Information

Nordkisel does not sell, rent, trade, or share your personal data with advertisers, data brokers, analytics companies, or other independent third parties.

Content you create in a shared feature (syncs, rulebook, lists, selfies, quizzes, milestones) is visible to the partner you are paired with, because that is how the feature is designed to work.

Limited information may be processed by infrastructure providers that host or support the technical operation of Bricks, such as push-notification delivery. Such providers act only on Nordkisel's instructions, may use the information only to provide their contracted service, and are required to protect it appropriately.

We may also disclose information where we are legally required to do so, such as in response to a binding court order or another valid request from a competent authority.

5. International Data Transfers

We aim to store and process Bricks data within the European Economic Area ("EEA"). If a technical provider processes personal data outside the EEA, we will use an appropriate legal safeguard required by applicable data-protection law.

6. How Long We Keep Information

We retain account, couple, and content information while your account remains active so that we can provide the service.

When you delete your account, your account and associated personal data are scheduled for deletion from Bricks's active systems.

Some limited information may remain temporarily in encrypted backups or security logs until those records are automatically overwritten. We may also retain information for longer where this is necessary to comply with a legal obligation, investigate abuse, resolve a dispute, or defend a legal claim.

Server and security logs are retained only for as long as reasonably necessary for security, troubleshooting, and abuse prevention.

7. Account and Data Deletion

You can delete your Bricks account and associated data through the account settings available within the app.

Account deletion is permanent. Once the deletion has been completed, your account and content cannot normally be restored, including for the partner you were paired with.

You may also contact us if you are unable to access the account-deletion feature. We may need to verify that you own the account before acting on your request.

8. Your Data-Protection Rights

Subject to the conditions and exceptions in applicable law, you may have the right to:

• Request confirmation of whether we process your personal data.
• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal data.
• Request restriction of certain processing.
• Object to processing based on legitimate interests.
• Receive certain information in a portable format.
• Withdraw consent where processing is based on consent.

Bricks does not make decisions about users solely through automated processing that produce legal or similarly significant effects.

To exercise a right that is not available directly through your account, contact us using the details below. We may ask for reasonable information to confirm your identity and protect your account.

9. Complaints

Please contact us first if you have concerns about how your personal data is handled so that we have an opportunity to address them.

You also have the right to submit a complaint to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, or IMY) or, where applicable, the data-protection authority in the country where you live or work.

10. Data Security

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss, or destruction.

These measures may include access controls, encrypted connections, password hashing, software updates, backups, logging, and limits on administrative access. However, no internet service can guarantee absolute security.

11. Children

Bricks is not intended for children under 13. We do not knowingly collect personal data from children under 13.

Where local law requires parental or guardian consent for a child to use an online service, the child should not create an account without that consent.

If you believe that a child has provided personal data to Bricks contrary to this section, please contact us so that we can investigate and take appropriate action.

12. External Links

Bricks may contain links to websites or services operated by others. Nordkisel is not responsible for the privacy practices of an external service. You should read its privacy information before providing it with personal data.

13. Changes to This Policy

We may update this Privacy Policy when Bricks's features, data practices, or legal obligations change.

The latest version will be published on this page with an updated revision date. Where a change materially affects how we process personal data, we will provide additional notice where reasonably appropriate.

14. Contact

For privacy questions, data-protection requests, or problems deleting your account, contact: