Privacy Policy — Mein B1 Deutsch

Last updated: August 4, 2026

1. Data Controller

Abdulkadir Poşul
Email: meinb1deutsch@gmail.com

2. Overview

Mein B1 Deutsch is a learning app for preparing for the German B1 exam. We designed the app to process as little personal data as possible:

• No account with email or name required. The app automatically creates an anonymous account (random identifier).
• Your learning progress stays on your device. Quiz results, vocabulary progress, streaks, and settings are stored locally only.
• No ads, no sale of data, no advertising trackers.

Only the AI features (writing and speaking evaluation) require server-side processing, described in detail below.

3. Data Stored Locally on Your Device

The following data is stored exclusively on your device and is not accessible to us:

• Learning progress (lessons, quizzes, vocabulary, practice exercises, mock exams)
• Speaking evaluation results and transcripts
• App settings (language, exam date, streak)

This data is deleted when you uninstall the app.

4. Anonymous Account

On first launch, the app creates an anonymous account with our hosting provider Supabase (server location: Frankfurt, EU). A random identifier (user ID) is generated — no email address, name, or other details.

Purpose: Providing the AI features and preventing abuse (usage limits).
Legal basis: Art. 6(1)(b) GDPR (performance of contract).

5. AI Writing Evaluation

When you use the writing evaluation, your written text is transmitted to our servers and stored there (text, evaluation, score). To produce the evaluation, the text is sent to our AI provider Anthropic PBC (USA).

• The transfer to the USA is based on EU Standard Contractual Clauses (SCC) under a data processing agreement.
• By default, Anthropic does not use content submitted via its API to train AI models.
• Please do not write real names, addresses, or sensitive personal information in your practice texts. The exercises do not require this.

Legal basis: Art. 6(1)(b) GDPR (you actively request the evaluation).

6. AI Speaking Evaluation and Conversation Simulation

When you use a speaking exercise with AI evaluation:

• Your audio recording is sent to OpenAI (USA, Whisper service) for transcription. The recording is not stored — neither by us nor permanently by the provider; it is used only for immediate conversion to text.
• The transcript is sent to Anthropic (USA) for evaluation.
• The transcript and evaluation results are stored only locally on your device.
• In the conversation simulation, the AI partner's reply is generated using OpenAI's text-to-speech service.

Transfers to the USA are based on EU Standard Contractual Clauses (SCC).

Legal basis: Art. 6(1)(b) GDPR.

7. Usage Logs and Device Identifier

To control costs and prevent abuse of the AI features, we store:

• Usage logs: timestamp, type of AI feature, and internal cost per request, linked to your anonymous user ID.
• Device identifier (hash): to limit free AI quotas, we store a SHA-256 hash of a device identifier. The original identifier never leaves your device; the hash cannot be traced back to your device.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest: operational and cost security).

8. Premium Waitlist (Optional)

In Settings, you can voluntarily leave your email address to be notified when premium features become available.

• Legal basis: Art. 6(1)(a) GDPR (consent).
• Withdrawal: At any time — simply delete the email address in Settings (clearing the field and saving removes the entry entirely) or write to us.

9. Crash Reports (Sentry)

To keep the app stable, we use Sentry (EU hosting). If a crash occurs, technical data is transmitted (device model, OS version, error log). Content such as your practice texts is not transmitted (request bodies are stripped before sending).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest: bug fixing).

10. Usage Analytics (PostHog)

To understand which features are used and to improve the app, we use PostHog (EU hosting, Frankfurt). We collect pseudonymous usage events — e.g. "quiz completed" or "practice test started" — linked to your anonymous user ID (no name or email).

• No content: your practice texts, recordings, and evaluations are never sent to PostHog.
• No ad tracking: no advertising profiles, no sharing with ad networks, no cross-app tracking.
• Opt-out: you can turn usage analytics off at any time in the app settings.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest: product improvement).

11. Recipients and Processors

Data is not sold and not shared for advertising purposes.

12. Retention Period

Server-side data (writing texts, evaluations, usage logs) is stored as long as your anonymous account exists. When the account is deleted, all linked data is deleted automatically.

13. Your Rights

Under the GDPR, you have the right to:

• Access (Art. 15) your stored data
• Rectification (Art. 16)
• Erasure (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Objection (Art. 21)
• Lodge a complaint with a data protection authority (Art. 77)

Deleting your data: Directly in the app under Settings → Delete account — all server-side data is removed automatically. The settings also let you export a copy of your data as a file (Art. 20). Alternatively, write to meinb1deutsch@gmail.com.

14. App Permissions

• Microphone: Only for speaking exercises; recording runs exclusively while you hold the record button.
• Internet: For AI features, audio downloads for listening exercises, and crash reports.

15. Children

The app is aimed at adult German learners and is not directed at children under 16.

16. Changes to This Policy

We update this policy when the app or the legal situation changes. The current version is always available at this address; the date above shows the last revision.