Privacy policy

Controller

Tobias Wissmüller
Groschenweg 41g
81825 München
Germany
Email: hello+afup-karten@ramuslabs.com
More details: Imprint

In short

Your learning progress stays on your device. AFuP Karten needs no account. The free version shows ads from Google, and we use Firebase to tune the app; in the EU you decide in a consent dialog whether ads may be personalised and whether analytics runs. Purchases are checked through RevenueCat.

Data on your device

Answers, Leitner boxes, statistics, learning calendar and settings are stored only on your device. They are not sent to us. Your operating system schedules learning reminders locally.

Your consent

In the EU, the EEA, the UK and Switzerland the app asks for your consent before it loads ads or records analytics. The dialog comes from Google’s User Messaging Platform, a consent management platform certified under the IAB Transparency and Consent Framework. Your choices are stored on your device only. You can change them at any time in the app under Mehr › Datenschutz-Einstellungen.

• If you agree, Google may use cookies and similar identifiers on your device to show personalised ads and to measure them, and Firebase Analytics records usage events.
• If you decline, the app shows only limited, non-personalised ads, without storing identifiers on your device for advertising, and Firebase Analytics records nothing.

The legal basis for storing and reading information on your device is your consent (§ 25(1) TDDDG); for the processing that follows it is your consent (Art. 6(1)(a) GDPR). Outside these regions consent is not required by law and the app does not ask.

Advertising (Google AdMob)

The free version on iPhone, iPad and Android shows ads from Google AdMob, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. To deliver an ad, count impressions and prevent fraud, the Google Mobile Ads SDK sends Google your IP address and device and app information. With your consent it also uses the advertising identifier of your device for personalised ads. On iOS the app does not ask for tracking permission, so Google never receives the identifier for advertisers (IDFA). Google may transfer data to the USA under the EU-US Data Privacy Framework. See policies.google.com/privacy and how Google uses data from apps. The one-time “Remove ads” purchase turns ads off completely. The Mac and web versions show no Google ads.

Firebase (Google)

Firebase Remote Config lets us change settings, such as how often ads appear, without an app update. It loads a configuration file and processes your IP address to deliver it. Firebase Analytics records anonymous usage events (for example that an ad was shown or a screen opened) with a random app-instance ID that is not linked to your name or any account. In the regions listed above it does so only with your consent. The provider is Google Ireland Limited; data may be transferred to the USA under the EU-US Data Privacy Framework. The legal basis is our legitimate interest in running the app (Remote Config, Art. 6(1)(f) GDPR) and your consent (Analytics, Art. 6(1)(a) GDPR). Analytics data is kept for at most 14 months.

Purchases

“Remove ads”, “Unlock explanations” and donations are bought through the App Store or Google Play, or, in the web app, through RevenueCat Web Billing with Stripe as payment processor. We never see payment details.

Purchases are validated by RevenueCat, Inc. (USA). To check what you have bought, the app sends RevenueCat a randomly generated app user ID, technical device and app information (such as the operating system version) and the store transaction. RevenueCat creates the ID; it is not linked to your name, your store account or any other identity. The legal basis is the performance of the purchase contract and our legitimate interest in verifying purchases reliably (Art. 6(1)(b) and (f) GDPR). Data is transferred to the USA under the EU-US Data Privacy Framework and standard contractual clauses. See revenuecat.com/privacy.

The web app

app.afup-karten.de stores your progress in your browser’s local storage. The server only delivers the files and keeps technically necessary logs.

App downloads

When you download or update the app, the App Store or Google Play processes data under their own privacy policies. We only receive aggregated, anonymous statistics such as download counts.

Contacting us

If you write to us, for example with “Contact support” in the app, we process your email address and message only to answer you (Art. 6(1)(b) and (f) GDPR). The app may pre-fill app version, platform and OS version; you can edit the mail before sending it.

Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You can withdraw any consent at any time with effect for the future (Art. 7(3)). Write to hello+afup-karten@ramuslabs.com.

Most data never reaches us. It stays on your device or in your own iCloud account, and you can delete it yourself at any time by removing the app or its files.

Right to lodge a complaint

You can complain to a data protection supervisory authority, in particular in the member state where you live. The authority responsible for us is: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach.

Children

Our apps work without an account and do not ask for your age. We do not knowingly collect personal data from children under 16.

Changes

When the app or the law changes, we update this policy. The version published here applies.