Privacy policy

Last updated: August 2026

Controller

Christian Hermann & Martina Hermann GbR
An Rainen 3
72525 Münsingen
Germany
Represented by Christian Hermann and Martina Hermann
Email: support@hufschlag.app

Data we process

Depending on your use, we process account data (especially email address and sign-in identifier), learning data (quiz results, progress, accuracy, streaks and settings), purchase data (product identifier, platform and technical receipt data), voluntary feedback and necessary connection, device and security data.

Purposes and legal bases

We process data to provide the app, sign users in, store learning progress, verify purchases, troubleshoot, protect the service and answer voluntary requests. Depending on the activity, the legal bases are Article 6(1)(b), (f) and, where explicitly requested, (a) GDPR.

Delivery of this website

When you access the site, Cloudflare processes technically necessary access data, particularly the IP address, time, requested URL, browser information and HTTP status. This supports secure, fast delivery and abuse prevention on the basis of Article 6(1)(f) GDPR. Security logs are retained only as long as required for operation and protection.

Recipients and providers

We may use Firebase/Google, Cloudflare, Apple, Google Play and the relevant AI provider for sign-in, hosting, databases, media, purchase verification and optional AI features. Apple and Google generally act as independent controllers for store purchases.

International transfers

Some providers may process data outside the EU/EEA. Where there is no adequacy decision, we rely on appropriate safeguards, in particular EU standard contractual clauses, or applicable legal exceptions.

Advertising and tracking

Hufschlag is ad-free. We do not create advertising profiles or use advertising tracking. This website does not set analytics or marketing cookies.

Retention

We generally keep account data and learning progress until deletion. Purchase data is retained where legal evidence or retention duties apply. Technical logs and requests are kept only as long as needed for security, operation and follow-up.

Your rights

Subject to legal requirements, you have rights of access, rectification, erasure, restriction, portability and objection. You can withdraw consent for the future. You may also complain to a data protection authority; the authority responsible for our place of business is the LfDI Baden-Württemberg.