Privacy policy
Last updated: 17 September 2026
Controller
Christian Hermann & Martina Hermann GbR
An Rainen 3
72525 Münsingen
Germany
Represented by Christian Hermann and Martina Hermann
Email: support@hufschlag.app
Data we process
Depending on your use, we process account data (especially email address and sign-in identifier), learning data (quiz results, progress, accuracy, streaks and settings), purchase data (product identifier, platform and technical receipt data), voluntary feedback and necessary connection, device and security data.
Purposes and legal bases
We process data to provide the app, sign users in, store learning progress, verify purchases, troubleshoot, protect the service and answer voluntary requests. Depending on the activity, the legal bases are Article 6(1)(b), (f) and, where explicitly requested, (a) GDPR.
Delivery of this website
When you access the site, Cloudflare processes technically necessary access data, particularly the IP address, time, requested URL, browser information and HTTP status. This supports secure, fast delivery and abuse prevention on the basis of Article 6(1)(f) GDPR. Security logs are retained only as long as required for operation and protection.
Store links lead directly to Apple or Google. We count a click on a store link; only the store and the app are transmitted, nothing about you personally. Quiz answers are never sent. This website sets no analytics cookies and creates no advertising profiles. The technical operational logs described above are unaffected.
Recipients and providers
We may use Firebase/Google, Cloudflare, Apple, Google Play and the relevant AI provider for sign-in, hosting, databases, media, purchase verification and optional AI features. Apple and Google generally act as independent controllers for store purchases.
International transfers
Some providers may process data outside the EU/EEA. Where there is no adequacy decision, we rely on appropriate safeguards, in particular EU standard contractual clauses, or applicable legal exceptions.
Advertising and tracking
Hufschlag is ad-free. We do not create advertising profiles or use advertising tracking. To spot purchase problems, the app reports a few fixed events to our backend without any sign-in, account or device identifier: technical purchase steps (such as purchase page shown, purchase started, cancelled or failed) and whether a rating request was possible or requested, each with only platform, app version and app language. We delete individual reports after seven days and daily counts after 120 days at most. The legal basis is Article 6(1)(f) GDPR; you can object at any time at support@hufschlag.app. This website does not set analytics or marketing cookies. For reach measurement we use Umami on our own server in Frankfurt am Main, Germany (analytics.bitbeans.de). It processes the page visited, referrer, country of origin, device type, screen size, browser and operating system; visits are distinguished by a daily rotating, non-reversible hash value and the IP address is not stored. We also count clicks on the App Store and Google Play buttons; only the store and the app are transmitted. No user profiles are created and the data is not shared with third parties. The legal basis is Article 6(1)(f) GDPR; the measurement data is deleted after 14 months. The analytics server is hosted by OVHcloud in Frankfurt am Main, Germany and operated exclusively within the EU. If your browser sends “Do Not Track”, the visit is not measured. You can also object to the measurement at any time at support@hufschlag.app.
Retention
We generally keep account data and learning progress until deletion. Purchase data is retained where legal evidence or retention duties apply. Technical logs and requests are kept only as long as needed for security, operation and follow-up.
Your rights
Subject to legal requirements, you have rights of access, rectification, erasure, restriction, portability and objection. You can withdraw consent for the future. You may also complain to a data protection authority; the authority responsible for our place of business is the LfDI Baden-Württemberg.