Privacy Policy

1. Data Controller and Contact

The data controller responsible for data processing is:

2. Types of Data Processed

When using the app, the following personal data is collected and processed:

• Email address used for login via Google Sign-In
• Authentication data required for login via Google
• Usage data, e.g., time and duration of use (automatically collected)
• Data on created and saved flashcards to secure learning progress
• Technical data such as device information and IP address for security and functionality purposes

3. Purposes of Data Processing

Data processing is carried out for the following purposes:

• Enabling secure authentication via Google Sign-In
• Managing user accounts and maintaining a personal user profile
• Storing and restoring flashcards to secure learning progress
• Improving the app through analysis of user behavior
• Ensuring technical security and stability of the application

4. Legal Basis

Processing is based on the following legal grounds:

• User consent (Art. 6 para. 1 lit. a GDPR)
• Contract fulfillment, as app provision is linked to successful registration (Art. 6 para. 1 lit. b GDPR)
• Legitimate interests (Art. 6 para. 1 lit. f GDPR), particularly to ensure functionality and continuous improvement of the app

5. Data Sharing

Personal data is only shared with third parties if this is necessary for the performance of the contractual relationship (e.g., transmission to Google as part of the Google Sign-In process) or if there is a legal obligation. No further sharing occurs without the explicit consent of the user.

6. Storage Duration

Data is stored as long as necessary to fulfill contractual or legal purposes. Flashcard data is stored until deletion (e.g., by the user or upon legal retention period) to ensure continuous learning progress.

7. User Rights

Users have the right to access, rectification, deletion, restriction of processing, and data portability. Additionally, objection to processing can be raised at any time. To exercise these rights, please contact the address mentioned above.

8. Data Security

Through the use of current technical and organizational security measures, it is ensured that personal data is protected against unauthorized access, loss, or misuse.

9. Use of Third-Party Services

For authentication, exclusively the Google Sign-In procedure is used. In coordination with Google, only data necessary for login is collected. Google's privacy policy applies, which is additionally displayed during the registration process.

10. Changes to the Privacy Policy

This privacy policy can be adapted as needed. Notification of significant changes will be provided within the app or via email.