Last updated: May 21, 2026
The data controller responsible for your personal data is:
Hooked Society Oy
Business ID: FI299422601
Linnankatu 33 B 34
20100 Turku, Finland
Email: info@hookedsociety.com
Hooked Society Oy ("we", "us", "our") operates the Hooked Society mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our App, in accordance with the EU General Data Protection Regulation (GDPR) and applicable Finnish data protection legislation.
When you create an account, we collect:
When you connect a Kajaste tattoo machine via Bluetooth, we collect:
The App includes community features such as leaderboards. When these features are active, your display name, profile photo (if you have set one), and the relevant activity statistic (for example, your ranking value) may be visible to other users of the App.
The App requests camera and photo library access solely for setting your profile picture. Photos are not collected, analyzed, or used for any other purpose.
Under the GDPR, we process your personal data based on the following legal grounds:
| Processing Activity | Legal Basis (GDPR Article) |
|---|---|
| Account creation and authentication | Contract performance (Art. 6(1)(b)) — necessary to provide the App's services |
| Bluetooth device connection and management | Contract performance (Art. 6(1)(b)) — core functionality of the App |
| Firmware updates (OTA) | Contract performance (Art. 6(1)(b)) — maintaining device functionality |
| Foreground service notification (Android) | Contract performance (Art. 6(1)(b)) — required by Android to maintain the Bluetooth connection to your machine while the App runs in the background |
| Diagnostic and error logs | Legitimate interest (Art. 6(1)(f)) — maintaining service reliability and troubleshooting |
| E-commerce (Shopify store) | Contract performance (Art. 6(1)(b)) — processing your purchases |
| Profile photo upload | Consent (Art. 6(1)(a)) — voluntary action by the user |
Where processing is based on legitimate interest, we have conducted a balancing test to ensure our interests do not override your fundamental rights and freedoms. You have the right to object to processing based on legitimate interest (see Section 9).
We use the following third-party services as data processors or independent controllers. We have entered into Data Processing Agreements (DPAs) with our processors where required:
| Service | Purpose | Role | Privacy Policy |
|---|---|---|---|
| Google Firebase | Authentication, database, storage | Processor | Firebase Privacy |
| Google Sign-In | Authentication | Joint Controller | Google Privacy |
| Facebook Login | Authentication | Joint Controller | Meta Privacy |
| Apple Sign-In | Authentication | Independent Controller | Apple Privacy |
| Shopify | E-commerce / product store | Processor | Shopify Privacy |
Some of our third-party service providers (including Google and Meta) may process your data outside the European Economic Area (EEA). When personal data is transferred outside the EEA, we ensure adequate protection through one or more of the following safeguards:
Google LLC processes data under the EU-US Data Privacy Framework. You may request details of the specific safeguards applied by contacting us.
The App uses Bluetooth Low Energy (BLE) to communicate with Kajaste tattoo machines. On older Android devices (below Android 12), Bluetooth scanning requires location permission as mandated by the Android operating system — however, we do not track, collect, or store your geographic location. The location permission is used solely for Bluetooth device discovery.
The App may run a background service to maintain the Bluetooth connection with your machine while the App is not in the foreground. This background service does not collect any additional data beyond what is described in this policy.
Your data is stored using Google Firebase services (Firestore, Firebase Storage) hosted within Google Cloud infrastructure. Google Cloud provides data processing within the EU region. Local data on your device is stored using encrypted storage.
We implement appropriate technical and organizational security measures in accordance with Article 32 of the GDPR, including:
We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:
| Data Type | Retention Period |
|---|---|
| Account data (email, name, profile photo) | Until account deletion or 12 months after last login |
| Machine data and statistics | Until account deletion or device removal |
| Diagnostic and error logs | 12 months from collection |
| Feedback submissions | Until account deletion |
You may request deletion of your account and associated data at any time through the App's settings or by contacting us. Upon account deletion, your personal data will be removed from our active systems within 30 days. Backup copies may persist for up to 90 days before being automatically purged.
As a data subject, you have the following rights under the GDPR:
To exercise any of these rights, contact us at info@hookedsociety.com. We will respond to your request within 30 days.
If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. For Finland, the competent authority is:
Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto)
P.O. Box 800, 00531 Helsinki, Finland
Email: tietosuoja(at)om.fi
Website: tietosuoja.fi
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
The App is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal data, please contact us immediately and we will take steps to delete such information.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice in the App and updating the "Last updated" date above. We encourage you to review this policy periodically. Continued use of the App after changes constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
Hooked Society Oy
Linnankatu 33 B 34
20100 Turku, Finland
Business ID: FI299422601
Email: info@hookedsociety.com