Privacy policy

Controller

Tobias Wissmüller
Groschenweg 41g
81825 München
Germany
Email: hello+longpath@ramuslabs.com
More details: Imprint

In short

Training happens on your device and needs no account. Channels, the shared Morse channels, run through our own server. The free version on phones and tablets shows ads from Google, and we use Firebase to tune the app; in the EU you decide in a consent dialog whether ads may be personalised and whether analytics runs. Purchases are checked through RevenueCat.

Data on your device and in your iCloud

Settings, training progress and statistics are stored on your device. On iPhone, iPad and Mac they sync across your devices through your own iCloud account (iCloud key-value storage), processed by Apple. We have no access.

Channels

When you open Channels, the app connects to our server at api.longpath.ramuslabs.com (Hetzner Online GmbH, Germany). It transmits the nickname you choose, your keying on the channel, and a device token. The token is a random install ID and, on Apple devices, a token from Apple’s DeviceCheck service. We use it to count your free days and to apply bans, not to identify you. Keying is relayed live to the others on the channel and not stored. If you report someone, we store the report (channel, time, reason, and the reported nickname and device token) to moderate, and delete it twelve months after it was decided or after a resulting ban ended. The legal basis is providing the service you use (Art. 6(1)(b) GDPR) and our legitimate interest in keeping Channels safe (Art. 6(1)(f) GDPR). Please don’t put personal data into your nickname.

Bluetooth

Bluetooth is used only to connect your ble-key or another Morse key interface. Keying stays on the device.

Your consent

In the EU, the EEA, the UK and Switzerland the app asks for your consent before it loads ads or records analytics. The dialog comes from Google’s User Messaging Platform, a consent management platform certified under the IAB Transparency and Consent Framework. Your choices are stored on your device only. You can change them at any time in the app under Settings › Ads › Privacy settings.

• If you agree, Google may use cookies and similar identifiers on your device to show personalised ads and to measure them, and Firebase Analytics records usage events.
• If you decline, the app shows only limited, non-personalised ads, without storing identifiers on your device for advertising, and Firebase Analytics records nothing.

The legal basis for storing and reading information on your device is your consent (§ 25(1) TDDDG); for the processing that follows it is your consent (Art. 6(1)(a) GDPR). Outside these regions consent is not required by law and the app does not ask.

Advertising (Google AdMob)

The free version on iPhone, iPad and Android shows ads from Google AdMob, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. To deliver an ad, count impressions and prevent fraud, the Google Mobile Ads SDK sends Google your IP address and device and app information. With your consent it also uses the advertising identifier of your device for personalised ads. On iOS the app does not ask for tracking permission, so Google never receives the identifier for advertisers (IDFA). Google may transfer data to the USA under the EU-US Data Privacy Framework. See policies.google.com/privacy and how Google uses data from apps. The one-time “Remove ads” purchase turns ads off completely. The Mac and web versions show no Google ads.

Firebase (Google)

Firebase Remote Config lets us change settings, such as how often ads appear, without an app update. It loads a configuration file and processes your IP address to deliver it. Firebase Analytics records anonymous usage events (for example that an ad was shown or a screen opened) with a random app-instance ID that is not linked to your name or any account. In the regions listed above it does so only with your consent. The provider is Google Ireland Limited; data may be transferred to the USA under the EU-US Data Privacy Framework. The legal basis is our legitimate interest in running the app (Remote Config, Art. 6(1)(f) GDPR) and your consent (Analytics, Art. 6(1)(a) GDPR). Analytics data is kept for at most 14 months.

Purchases

Remove Ads, the Channels subscription and donations are bought through the App Store or Google Play. We never see payment details.

Purchases are validated by RevenueCat, Inc. (USA). To check what you have bought, the app sends RevenueCat a randomly generated app user ID, technical device and app information (such as the operating system version) and the store transaction. RevenueCat creates the ID; it is not linked to your name, your store account or any other identity. The legal basis is the performance of the purchase contract and our legitimate interest in verifying purchases reliably (Art. 6(1)(b) and (f) GDPR). Data is transferred to the USA under the EU-US Data Privacy Framework and standard contractual clauses. See revenuecat.com/privacy.

App downloads

When you download or update the app, the App Store or Google Play processes data under their own privacy policies. We only receive aggregated, anonymous statistics such as download counts.

Contacting us

If you write to us, for example with “Contact support” in the app, we process your email address and message only to answer you (Art. 6(1)(b) and (f) GDPR). The app may pre-fill app version, platform and OS version; you can edit the mail before sending it.

Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You can withdraw any consent at any time with effect for the future (Art. 7(3)). Write to hello+longpath@ramuslabs.com.

Most data never reaches us. It stays on your device or in your own iCloud account, and you can delete it yourself at any time by removing the app or its files.

Right to lodge a complaint

You can complain to a data protection supervisory authority, in particular in the member state where you live. The authority responsible for us is: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach.

Children

Our apps work without an account and do not ask for your age. We do not knowingly collect personal data from children under 16.

Changes

When the app or the law changes, we update this policy. The version published here applies.