Tok — connect, flow, fill the void
Nothing you do in Tok goes anywhere.
No account, no cloud, no advertising, no measurement. The app declares no internet permission at all, which Android enforces at the level of the operating system rather than leaving it to the app's good behaviour — without that permission a connection cannot be opened, whatever the code intends. Which boards you have finished, your best times and move counts, and your settings are written into the app's own private folder on the handset and stay there.
What follows is the detail: what is kept, what the app is barred from touching, what Google sees because the game is distributed through Google Play, and what you may ask of the company behind it.
Tok is made and published by AK Kajtna d.o.o., a company registered in Slovenia at Ljubljanska cesta 2, 1270 Litija, with Igor Kajtna answering for it. Under the General Data Protection Regulation the company is the controller for this app, which here is a title with almost nothing to govern, since the app hands over no personal data at all.
Worth explaining rather than leaving to be puzzled over: the address this page sits on does not carry the company's name. It is simply a domain the company holds, and the site on it is operated by AK Kajtna d.o.o.
Everything on this page goes to flow@istoctoptancilar.world.
Four things, and not one of them describes a person:
Read the list again for what is absent from it: anything that could tie a finished board back to a human being. There is no name in there, no address of any sort, no account, no identifier the app minted for you and none it borrowed from the phone. Android walls every app's private folder off from all the others, and that walled-off folder is the entirety of what this game knows.
Times and move counts look like the most harmless data an app could hold, and inside the phone they are. The reason they are worth a paragraph is what they would become if they ever left it. A stream of solve times carries when somebody plays, how long their sittings run, which nights they are up late and which weeks they stopped altogether — a shape of a life, assembled out of numbers nobody would think to protect.
So they stay where they are made. They are compared with your own earlier attempts and nothing else: there is no leaderboard, no ranking, no friends list, no achievements service and no username to choose, which is the main reason the app never has to ask who you are.
Besides the absent internet permission there is no camera, no microphone, no location, no contacts, no photo library and no access to your wider storage. A grid of dots and lines has no use for any of them.
None of this has to be taken on trust. The permission list is visible on the store page and on the handset, before installing and after, and a version that wanted to reach a network would have to add a line there where anybody could see it.
There is no ad network in this build, no analytics library, no crash reporter, no attribution kit and no social sign-in. Nothing here is funded by watching whoever is holding the phone, which is why the list two sections up runs to four items.
A puzzle of bright dots and coloured lines is handed to small children constantly, so it is worth stating outright: with nothing advertised and nothing collected from anybody, there is no profile to be assembled from a child's play, no attention being resold, and no purpose in asking an age — the app would behave identically whatever the answer.
One thing happens above the app's head. Where backup to Google Drive is switched on, Android may copy the small progress-and-settings file into your own Google account alongside the backups of everything else installed. That copy belongs to you and runs under Google's terms rather than ours; the company has no account there and nothing to look at.
It is also the only route by which sixty-six finished boards survive a new handset. The switch sits in Android's own settings, for the whole phone or for this app alone.
Installing is a transaction between you and Google, recorded against your Google account. What reaches a developer afterwards is a console of totals: installs by country, which Android versions are in use, how a rating is moving. No individual row lies beneath those figures for anyone here to open, and nothing in them touches a board or a time.
Google's own part is governed by Google's privacy policy at policies.google.com/privacy.
Everything sits in one folder, so there is a single action and nobody to write to. Uninstalling Tok removes the finished boards, the records and the settings together. To keep the game but start from a blank set, Android's app settings will clear its storage.
Both take effect at once and neither can be undone, and neither needs anything from us, because no second copy was ever made.
Every other section here is about data that never arrives. Email is the exception. Writing leaves the company holding an address and whatever the message contains, for as long as the matter is live and a short while after in case it reopens, and the thread is then deleted.
It is read, answered, and used for nothing else — no list, no onward sharing, no marketing. The lawful basis is legitimate interests, in replying to people who write. It cannot be joined to anything you did in the app, since the app carries no identifier for it to be joined to, and asking for an exchange to be deleted is enough to have it gone.
Seven rights follow from the General Data Protection Regulation, which Slovenia applies alongside the Zakon o varstvu osebnih podatkov (ZVOP-2): access, a copy, correction, erasure, restriction, objection and portability. Aimed at the game they will all come back empty, because the game holds nothing. Aimed at the mailbox above they work in the ordinary way, free of charge, with a reply due within a month.
Complaints are heard by Informacijski pooblaščenec — Slovenia's Information Commissioner — reachable at ip-rs.si, and nothing obliges you to come here first. Living in another EEA country simply changes which authority that is.
There is a single date on this page, and it marks the version you are reading. Should anything real ever change behind it — a permission added, a component brought in, a byte collected, a byte sent — the work happens in a set order and never the other way round. The page is corrected. The Play Console's Data safety answers are corrected beside it, in the same sitting. Only then does the build that caused all of it reach anybody.
Tidying a clumsy sentence does not qualify, and earns nothing but a fresher date at the top.
Kajtna DEV
AK Kajtna d.o.o.
Ljubljanska cesta 2, 1270 Litija, Slovenia
Responsible: Igor Kajtna
Lahko nam pišete tudi v slovenščini.
© 2026 AK Kajtna d.o.o.