Privacy Policy
Last updated: May 19, 2026
1. Introduction
Deutsch Prüfung operates deutsch-pruefung.de and the “German Exam Prep” mobile application for Android (Google Play Store) and iOS (Apple App Store), together referred to as the “Service”. The Service provides preparation materials for TELC, Goethe, and DTZ German-language certifications.
This Privacy Policy applies to all platforms and explains how we collect, use, and protect personal information in accordance with:
- General Data Protection Regulation (GDPR) for EU users
- California Consumer Privacy Act (CCPA) for California residents
- Google Play Developer Program Policies
- Apple App Store Review Guidelines
- Children’s Online Privacy Protection Act (COPPA)
- Other applicable data-protection laws
Platform Coverage: This single Privacy Policy covers our website, Android app, and iOS app. Platform-specific details are identified throughout this document.
2. Data Controller
Service Name: Deutsch Prüfung
Website: deutsch-pruefung.de
Contact Email: support@deutsch-pruefung.de
3. Information We Collect
3.1 Account Information (Website Only)
When you register on our website, we collect:
- Email address
- Name (optional)
- Encrypted password for email/password authentication
- Firebase User ID for account identification
Mobile Apps: Our Android and iOS apps do not require or support account registration. App use is anonymous (guest mode), and data is stored locally on your device.
3.2 Practice Data
- Your answers to practice questions
- Test scores and completion times
- Learning progress and study patterns
3.3 AI Chatbot Data (Website Only)
When you use our AI tutor chatbot “Frau Schmidt”, we collect:
- Messages you send to the AI tutor
- AI-generated chatbot responses
- Chat-session metadata such as titles and timestamps
How it works: Your messages are sent to Google’s Gemini API to generate personalized tutoring responses. We store chat history in your account so you can continue conversations. Sessions are limited to 5 for free users and 20 for premium users; older messages beyond 50 per session are automatically deleted.
3.4 Technical Information (All Platforms)
Website:
- IP address and browser type
- Device information such as screen size and operating system
- Usage analytics through Google Analytics 4 and Microsoft Clarity
- Session interactions such as clicks, scroll depth, and navigation patterns
- Cookies and local-storage data
- Security and anti-abuse logs, including request timing, rate-limit events, suspicious access patterns, and protected-content access events
Mobile Apps (Android & iOS): Device model, manufacturer, OS version, app version and build number, device identifiers (Android ID and IDFV), app usage (screens viewed, features used, and session duration), performance data (crash logs, error reports, and app load times), and network information (WiFi or cellular connection and connection quality).
3.5 Mobile App Specific Data
Both Platforms (Android & iOS):
- Push-notification tokens for practice reminders (Firebase on Android, APNs on iOS)
- App activity, including practice sessions, mock-test attempts, scores, and progress
- Notification preferences, reminder times, and notification history
- Downloaded content for offline access, stored locally
- Language, theme, and audio settings
- Android: Google Play purchase receipts and subscription status
- Android: Google Advertising ID for ad personalization; it can be reset in your Google advertising settings
- Android: Firebase Analytics app usage events, screen views, and user engagement
- Android: Firebase Crashlytics crash reports and stack traces for debugging
- Android: AdMob ad impressions, clicks, and performance metrics
- iOS: Apple App Store purchase receipts and subscription status
- iOS: IDFA (Identifier for Advertisers), collected only with App Tracking Transparency (ATT) permission
- iOS: IDFV (Identifier for Vendors) for analytics and crash reporting
- iOS: App Analytics usage events, respecting your iOS privacy settings
- iOS: StoreKit data for purchase validation and subscription management
Important: Our mobile apps do not collect your name, email address, phone number, precise location, contacts, photos, or camera/microphone data. The apps do not support account registration; use is anonymous and practice data remains local. On iOS 14.5 and later, we respect your App Tracking Transparency choice and do not collect IDFA or use it for advertising when permission is denied.
3.6 Contact and Inquiry Forms (Website Only)
When you submit a contact form or online-class/tutoring inquiry, we collect:
- Full name
- Email address
- Country of residence for tutoring inquiries
- Current and target German levels for tutoring inquiries
- Target-exam details for tutoring inquiries
- Preferred schedule and time zone for tutoring inquiries
- Message content and learning goals
- Screenshots or images you attach to a contact form
This information is processed solely to handle and respond to your request or inquiry.
4. How We Use Your Information
We use data collected across our platforms to:
- Provide personalized exam practice and track progress
- Improve our platform and develop features
- Send service notifications and support responses
- Analyze website and app usage to improve the user experience
- Display advertisements through Google AdSense on the web, Google AdMob on Android, and Apple Search Ads on iOS
- Process in-app purchases and manage premium subscriptions through Google Play and the Apple App Store
- Send daily-practice push notifications with your permission
- Prevent fraud, scraping, automated extraction, account misuse, and unauthorized redistribution of protected content
- Diagnose and fix technical issues using crash reports and error logs
- Comply with legal obligations
Protected Content Security: Protected images may include visible watermark codes derived from account identifiers using a server-side secret. We may use these codes, access logs, and anti-abuse signals to investigate scraping, automated extraction, or unauthorized redistribution. Watermark codes are not stored as separate profile fields.
Platform-Specific Usage: Website session replays use Microsoft Clarity on non-sensitive screens only; Android uses Firebase Analytics and AdMob; iOS uses App Analytics in line with iOS privacy settings and Apple Search Ads attribution.
5. Legal Basis for Processing (GDPR)
- Consent: analytics, advertising, and affiliate-referral cookies
- Contract: providing our exam-preparation services
- Legitimate interests: platform improvement and security
6. Cookies and Tracking Technologies
Cookies are small text files that help us operate the platform, understand which lessons are useful, and keep your experience secure. We load optional cookies only after obtaining your consent.
Essential Cookies
Required for secure sign-in, load balancing, and remembering dismissed consent prompts.
- NextAuth session tokens that keep you signed in
- Security cookies that help prevent fraudulent access
- Preference flags that prevent repeated consent prompts
Analytics Cookies
Used by Google Analytics and Microsoft Clarity to capture anonymous usage trends that guide improvements.
- Traffic attribution and page-engagement metrics
- Aggregated Clarity session replays limited to non-sensitive screens
- Conversion tracking to identify valuable study features
Advertising Cookies
Set by Google AdSense and Endorsely when you opt in. They support personalized advertising and affiliate attribution.
- Select ads relevant to language learners
- Limit repeated ads
- Support non-personalized ads when consent is declined
- Store an affiliate referral identifier to apply an advertised partner discount and calculate commission after an eligible subscription
Functional Storage (Local Only)
We use localStorage and IndexedDB for study progress, bookmarked questions, language preferences, and mock-test history. This information stays in your browser and is removed when local site data is cleared.
🔒Google Consent Mode v2 Compliance
We use Google Consent Mode v2 with a Google-certified CMP (Funding Choices). Google Analytics and AdSense remain disabled by default and activate only after explicit consent; your privacy choices are communicated to Google in real time.
6.1 Manage Your Cookie Choices
You remain in control of optional cookies. To update or withdraw consent:
- Review the cookie banner and adjust analytics and advertising choices
- Use your browser settings to block, clear, or automatically delete cookies
- Install the Google Analytics Opt-out extension for permanent analytics opt-out
- Update ad-personalization preferences in Google Ads Settings
- Use private browsing when you do not want optional cookies stored
6.2 Retention & Withdrawal
- Essential authentication cookies expire after 30 days or when you sign out
- Google Analytics data is anonymized and retained for 14 months before automatic deletion
- Microsoft Clarity session recordings are retained for up to 30 days
- Google AdSense cookies may persist for up to 24 months; clearing cookies or disabling personalized ads removes them sooner
- Endorsely referral attribution is kept for the configured affiliate-program period and used only for eligible subscription attribution and partner commission
- Local study progress disappears when you clear localStorage or reset app data
You can withdraw consent at any time through the choices above or by emailing support@deutsch-pruefung.de. We honor opt-out signals such as clearing cookies, browser preferences, and ad-personalization settings.
7. Third-Party Services
We use the following third-party services:
Google Analytics
Website usage analytics and performance monitoring. Google Privacy Policy
Microsoft Clarity
Session analytics, heatmaps, and user-experience insights. Microsoft Privacy Statement
Google AdSense (Website)
Displays educational advertisements. With advertising-cookie consent, Google may use browsing data for personalized ads. You can control personalization in Google Ads Settings. Google Ads Policy
Endorsely (Affiliate Referral Tracking)
Operates our influencer and affiliate program. When you accept advertising cookies and visit through an affiliate link, it may store a referral identifier to attribute an eligible subscription, apply an offered discount, and calculate commission. We share the referral identifier and completed-subscription metadata, not study answers or practice content. Endorsely Privacy Policy
Google AdMob (Android App)
Displays advertising to free users and processes device identifiers and advertising IDs for advertising, analytics, and fraud prevention. Premium subscribers receive an ad-free experience. AdMob Privacy
Firebase Services (Android App)
Firebase Cloud Messaging sends push notifications, Firebase Analytics measures app use, and Firebase Crashlytics provides crash reports. Firebase Privacy
Google Play In-App Billing (Android)
Processes Android purchases and subscriptions, refunds, and billing. We receive purchase confirmation and subscription status but not payment information. Google Payments Privacy
Apple Services (iOS App)
APNs provides notifications, StoreKit processes purchases, and App Analytics measures usage according to iOS privacy settings. All purchases are processed through the Apple App Store. We do not see payment information. Apple Privacy Policy
App Tracking Transparency (iOS 14.5+)
We respect your ATT choice. If you deny tracking, we do not collect IDFA or use it for cross-app tracking or advertising. You can change this in iOS privacy settings.
Google Gemini API (Website)
Generates responses from our “Frau Schmidt” chatbot. Your message and recent conversation history are transmitted to Google for processing under its API data-use terms. Gemini API Terms
Note: We do not sell your personal data to third parties.
8. Data Security
We protect your data using:
- SSL/TLS encryption for data transmission
- Encrypted password storage
- Secure database hosting
- Regular security updates
9. Data Retention
Website:
- Account data is retained while your account is active
- Practice data is deleted when your account is deleted
- Google Analytics data is anonymized after 14 months
- Microsoft Clarity session analytics are retained for up to 30 days
- Cookie retention varies by type as described above
- AI chat sessions and messages are retained while your account is active; messages beyond 50 per session are pruned, and all chat data is deleted with the account
Mobile Apps (Android & iOS):
- Local app data remains until you uninstall the app or clear app data
- Firebase Analytics data is retained for 14 months
- Crash reports are retained for 90 days
- Purchase receipts are retained while the subscription is active plus one year for tax and legal compliance
- Push-notification tokens remain until the app is uninstalled or notifications are disabled
- AdMob advertising data may be retained for up to 24 months
Data Deletion: You can delete data at any time by:
- Website: Delete your account in settings or contact support
- Mobile Apps: Uninstall the app or clear app data in device settings
- Request Deletion: Email support@deutsch-pruefung.de to request deletion of all your data
10. Your Privacy Rights
You have the following rights regarding personal data:
- Access: request a copy of your personal data
- Rectification: correct inaccurate information
- Erasure: request deletion of your data
- Portability: receive your data in a portable format
- Objection: opt out of certain processing
- Withdraw Consent: withdraw cookie and marketing consent
To exercise your rights, contact support@deutsch-pruefung.de. We will respond within 30 days.
11. Mobile Application
Our mobile application operates differently from the website and is designed with privacy in mind:
11.1 Local Data Storage
The app stores practice data locally through AsyncStorage and requires no account or authentication.
- Practice history and progress
- Question answers and scores
- Language, theme, and audio preferences
- Ad-display counters
Important: This data never leaves your device and is removed when you uninstall the app or clear app data.
11.2 Mobile Advertising (Google AdMob)
The app uses Google AdMob to remain free. AdMob may collect:
- Advertising ID and other device identifiers
- IP address and approximate location
- Device model and OS version
- Ad views and clicks
- Banner, interstitial, rewarded, and native-ad interactions
You can control ad personalization through Android or iOS privacy and advertising settings.
11.3 Permissions
The app may request:
- Internet access to load ads and download questions
- Network-state access to detect connectivity
- Storage access to save practice data locally
We do not request access to your camera, microphone, contacts, or other sensitive device features.
Learn more: Google Ads | AdMob
Privacy by Design: Because the apps require no account, practice data remains on your device and is not transmitted to our servers.
12. Children’s Privacy
Our Service is not intended for children under 16. We do not knowingly collect personal information from children. Contact us immediately if you believe we have collected a child’s data.
Mobile App: Although the app does not collect personal information, Google AdMob may collect device identifiers for advertising. Parents should review Google’s privacy policies and configure device-level advertising settings.
13. Changes to This Policy
We may update this Privacy Policy occasionally. We will notify you of significant changes by email or a prominent website notice. Continued use of the Service after changes constitutes acceptance.
14. Contact Us
For questions about this Privacy Policy or your personal data:
Contact Email: support@deutsch-pruefung.de
Website: deutsch-pruefung.de
EU residents may lodge a complaint with their local data-protection authority if they believe we have not adequately addressed their concerns.
