Privacy policy

Controller

Christian Hermann & Martina Hermann GbR
An Rainen 3
72525 Münsingen
Germany
Represented by Christian Hermann and Martina Hermann
Email: apps@bitbeans.de

Data in the app

Depending on how you use the app, we process sign-in data, particularly email address and sign-in identifier, as well as learning progress, quiz results, settings and started exercises. These are processed locally or linked to the signed-in account. To verify and restore purchases, we process the product identifier, store platform and technical receipt data. If you contact us voluntarily, we process your message and contact details. Necessary connection and security data arise when operating online services.

Optional AI features

If you use the AI coach or an AI evaluation, the question you entered or relevant answers and learning material are sent through our backend to xAI (Grok, api.x.ai) to generate a response. Account and payment data are not sent for this purpose. Please do not enter personal data in free-text fields.

Purposes and legal bases

We process data to provide the app, enable sign-in and learning progress, verify purchases, fix technical issues, protect the service and respond to enquiries. Depending on the activity, the legal bases are Article 6(1)(b) or (f) GDPR; where consent is requested, Article 6(1)(a). You may withdraw consent for the future.

Delivery of this website

When you visit this site, Cloudflare processes technically necessary access data, particularly your IP address, time, requested URL, browser information and HTTP status. This supports secure delivery and abuse prevention under Article 6(1)(f) GDPR. Security logs are kept only as long as needed for operation and protection.

Audience measurement with Umami

This website uses Umami on our OVHcloud server in Frankfurt, Germany. It measures pages visited, referrer, country of origin, device type, screen size, browser and operating system, plus clicks on App Store and Google Play buttons. Store-click events transmit only the store and app. Umami sets no cookies and does not store IP addresses; a daily rotating, non-reversible hash helps count visits. We do not build advertising profiles or share analytics data with third parties. The data is deleted after 14 months. The legal basis is Article 6(1)(f) GDPR. We respect browser Do Not Track settings. You can also object by emailing apps@bitbeans.de.

Recipients and international transfers

We use Cloudflare for backend, database, media and security; Firebase/Google for sign-in; Apple and Google for store services; and xAI only when you use optional AI features. Apple and Google generally act as independent controllers for store purchases. Some providers may process data outside the EU/EEA. Where there is no adequacy decision, we use appropriate safeguards, particularly EU standard contractual clauses, or applicable legal exceptions.

Retention and your rights

We generally keep account and learning progress data until deletion. Purchase data may need to be kept longer for legal evidence or retention obligations. Technical logs and enquiries are retained only as long as needed for security, operation or follow-up. Subject to legal conditions, you have rights of access, rectification, erasure, restriction, portability and objection. You may also complain to a data protection authority; the authority for our registered location is the LfDI Baden-Württemberg. See Delete data for removal steps.