Privacy Policy - Deutsch Prüfung

1. Introduction

Deutsch Prüfung operates the website deutsch-pruefung.de and the mobile application "German Exam Prep" available on Android (Google Play Store) and iOS (Apple App Store) (collectively, the "Service"), providing German language exam preparation materials for TELC and Goethe certifications.

This Privacy Policy applies to all platforms and describes how we collect, use, and protect your personal information in compliance with:

General Data Protection Regulation (GDPR) for EU users
California Consumer Privacy Act (CCPA) for California residents
Google Play Developer Program Policies
Apple App Store Review Guidelines
Children's Online Privacy Protection Act (COPPA)
Other applicable data protection laws

Platform Coverage: This single Privacy Policy covers our website (deutsch-pruefung.de), Android app (Google Play), and iOS app (Apple App Store). Platform-specific details are clearly marked throughout this document.

2. Data Controller

Service Name: Deutsch Prüfung

Website: deutsch-pruefung.de

Contact Email: support@deutsch-pruefung.de

3. Information We Collect

3.1 Account Information (Website Only)

When you register on our website, we collect:

Email address
Name (optional)
Password (encrypted)

Note: Our mobile apps (Android & iOS) do NOT require account registration. All data is stored locally on your device.

3.2 Practice Data

Your answers to practice questions
Test scores and completion times
Learning progress and study patterns

3.3 Technical Information (All Platforms)

Website:

IP address and browser type
Device information (screen size, operating system)
Usage analytics (via Google Analytics 4 and Microsoft Clarity)
Session interaction data (clicks, scroll depth, navigation patterns)
Cookies and local storage data

Mobile Apps (Android & iOS):

Device model, manufacturer, and operating system version
App version and build number
Device identifiers (Android ID, IDFV for iOS)
App usage data (screens viewed, features used, session duration)
Performance data (crash logs, error reports, app load times)
Network information (WiFi vs cellular, connection quality)

3.4 Mobile App Specific Data

Both Platforms (Android & iOS):

Push Notification Tokens: Device tokens for sending practice reminders (Firebase for Android, APNs for iOS)
App Activity: Practice sessions, mock test attempts, scores, progress tracking
Notification Preferences: Your notification settings, reminder times, and notification history
Offline Data: Downloaded content for offline access (stored locally on your device)
App Settings: Language preferences, theme selection, audio settings

Android-Specific:

Google Play Purchases: In-app purchase receipts and subscription status
Google Advertising ID: For ad personalization (can be reset in Settings → Google → Ads)
Firebase Analytics: App usage events, screen views, and user engagement
Firebase Crashlytics: Crash reports and stack traces for debugging
AdMob Data: Ad impressions, clicks, and performance metrics

iOS-Specific:

Apple App Store Purchases: In-app purchase receipts and subscription status
IDFA (Identifier for Advertisers): Only collected if you grant tracking permission via App Tracking Transparency (ATT) prompt
IDFV (Identifier for Vendors): Used for analytics and crash reporting
App Analytics: App usage events (respects your iOS privacy settings)
StoreKit Data: Purchase validation and subscription management

Important: We do NOT collect personal information such as your name, email, phone number, precise location, contacts, photos, camera/microphone data, or any other sensitive device information. The mobile apps work without requiring account registration.

iOS Privacy: On iOS 14.5+, we respect your App Tracking Transparency (ATT) choice. If you deny tracking permission, we will not collect your IDFA or use it for advertising purposes.

4. How We Use Your Information

We use collected data across all platforms to:

Provide personalized exam practice and track your progress
Improve our platform and develop new features
Send service notifications and support responses
Analyze website and app usage to enhance user experience
Display relevant advertisements (Google AdSense on web, Google AdMob on Android, Apple Search Ads on iOS)
Process in-app purchases and manage premium subscriptions (Google Play for Android, Apple App Store for iOS)
Send push notifications for daily practice reminders (with your permission)
Prevent fraud and ensure security
Diagnose and fix technical issues (crash reports, error logs)
Comply with legal obligations

Platform-Specific Usage:

Website: Session replays via Microsoft Clarity (non-sensitive screens only)
Android: Firebase Analytics for app usage tracking, AdMob for advertising
iOS: App Analytics (respects iOS privacy settings), Apple Search Ads attribution

5. Legal Basis for Processing (GDPR)

Consent: For analytics and advertising cookies
Contract: To provide our exam preparation services
Legitimate Interest: For platform improvement and security

6. Cookies and Tracking Technologies

Cookies are small text files that help us operate the platform, understand which lessons are most helpful, and keep your experience secure. We only load optional cookies after we obtain your consent.

Essential Cookies

Required for secure sign-in, load balancing, and remembering that you dismissed consent prompts.

Session tokens from NextAuth to keep you signed in
Security cookies that prevent fraudulent access
Cookie preference flags so we do not ask for consent repeatedly

Analytics Cookies

Used by Google Analytics and Microsoft Clarity to capture anonymous usage trends that guide product improvements.

Traffic attribution and page engagement metrics
Aggregated session replays (Clarity) limited to non-sensitive screens
Conversion tracking to understand which study features are valuable

Advertising Cookies

Set by Google AdSense when you opt into personalised ads so we can keep most study materials free.

Helps select ads relevant to language learners
Prevents showing the same ad too often
Supports non-personalised ads if you decline consent

Functional Storage (Local Only)

We rely on localStorage and IndexedDB to keep your study progress, bookmarked questions, language preferences, and mock test history on your device. This information never leaves your browser and is cleared if you delete local site data.

🔒Google Consent Mode v2 Compliance

We implement Google Consent Mode v2, ensuring that Google services (Analytics and AdSense) respect your cookie preferences. This means tracking and advertising features are disabled by default and only activate after you provide explicit consent. Your privacy choices are communicated to Google in real-time, ensuring full GDPR compliance.

6.1 Manage Your Cookie Choices

You remain in control of optional cookies at all times. To update or withdraw consent:

Review the cookie banner when it appears and adjust the toggles for analytics and advertising.
Open your browser settings to block, clear, or schedule automatic deletion of cookies.
Install the Google Analytics Opt-out extension if you prefer permanent analytics opt-out.
Update ad personalisation preferences in Google Ads Settings to control AdSense cookies across the web.
Use private or incognito browsing sessions whenever you want to study without storing optional cookies on your device.

6.2 Retention & Withdrawal

Essential authentication cookies expire after 30 days or when you sign out.
Google Analytics data is anonymised and retained for 14 months before automatic deletion.
Microsoft Clarity session recordings are retained for up to 30 days.
Google AdSense cookies can persist for up to 24 months; clearing your cookies or disabling personalised ads removes them sooner.
Local study progress stored in your browser disappears when you clear localStorage or reset the app data.

You can withdraw consent at any time by changing the options above or emailing us at support@deutsch-pruefung.de. We honour opt-out signals such as clearing cookies, browser-level preferences, and ad personalisation settings.

7. Third-Party Services

We use the following third-party services:

Google Analytics

For website usage analytics and performance monitoring. Google Privacy Policy

Microsoft Clarity

For session analytics, heatmaps, and user experience insights. Microsoft Privacy Statement

Google AdSense (Website)

We partner with Google AdSense to display relevant educational advertisements on our website. When you consent to advertising cookies, Google may use your browsing data to show personalized ads. AdSense helps us keep the majority of our study materials free for all users. You can control ad personalization through Google Ads Settings. Learn more: Google Ads Policy

Google AdMob (Android App)

Our Android app uses Google AdMob to display advertisements to free users. AdMob collects device identifiers and advertising IDs to show relevant ads. Premium subscribers enjoy an ad-free experience. AdMob data is used for analytics, advertising, and fraud prevention.AdMob Privacy

Firebase Services (Android App)

We use Firebase Cloud Messaging for push notifications, Firebase Analytics for app usage tracking, and Firebase Crashlytics for crash reporting. These services help us improve app stability and send you helpful reminders.Firebase Privacy

Google Play In-App Billing (Android)

In-app purchases and subscriptions on Android are processed securely through Google Play. We receive only purchase confirmation and subscription status - we never see your payment information. Google Play handles all payment processing, refunds, and billing management.Google Payments Privacy

Apple Services (iOS App)

Our iOS app uses Apple Push Notification Service (APNs) for push notifications, StoreKit for in-app purchases, and App Analytics for usage tracking (respects your iOS privacy settings). All purchases are processed through Apple App Store. We never see your payment information.Apple Privacy Policy

App Tracking Transparency (iOS 14.5+)

On iOS, we respect your App Tracking Transparency (ATT) choice. If you deny tracking permission, we will not collect your IDFA or use it for cross-app tracking or advertising purposes. You can change this setting anytime in Settings → Privacy & Security → Tracking.

Note: We do not sell your personal data to third parties.

8. Data Security

We protect your data using:

SSL/TLS encryption for data transmission
Encrypted password storage
Secure database hosting
Regular security updates

9. Data Retention

Website:

Account Data: Retained while your account is active
Practice Data: Deleted upon account deletion
Analytics Data: Anonymized after 14 months (Google Analytics default)
Session Analytics: Microsoft Clarity retains data for up to 30 days
Cookies: Vary by type (see Cookie section for details)

Mobile Apps (Android & iOS):

Local App Data: Stored on your device until you uninstall the app or clear app data
Analytics Data: Firebase Analytics retains data for 14 months
Crash Reports: Retained for 90 days
Purchase Receipts: Retained as long as subscription is active + 1 year for tax/legal compliance
Push Notification Tokens: Retained until you uninstall the app or disable notifications
Advertising Data: Managed by AdMob (Android) - up to 24 months

Data Deletion: You can delete your data at any time by:

Website: Delete your account in settings or contact support
Mobile Apps: Uninstall the app or clear app data in device settings
Request Deletion: Email support@deutsch-pruefung.de to request deletion of all your data

10. Your Privacy Rights

You have the following rights regarding your personal data:

Access: Request a copy of your personal data
Rectification: Correct inaccurate information
Erasure: Request deletion of your data
Portability: Receive your data in a portable format
Objection: Opt-out of certain data processing
Withdraw Consent: Withdraw consent for cookies and marketing

To exercise your rights, contact us at support@deutsch-pruefung.de. We will respond within 30 days.

11. Mobile Application

Our mobile application operates differently from the web platform and is designed with privacy in mind:

11.1 Local Data Storage

The mobile app stores all practice data locally on your device using AsyncStorage and does not require an account or authentication. This includes:

Practice history and progress
Question answers and scores
App preferences (language, theme, audio settings)
Ad display counters

Important: This data never leaves your device and is deleted when you uninstall the app or clear app data.

11.2 Mobile Advertising (Google AdMob)

The mobile app displays advertisements through Google AdMob to keep the app free. AdMob may collect:

Device identifiers (Advertising ID)
IP address and approximate location
Device information (model, OS version)
Ad interaction data (views, clicks)

We implement the following ad types:

Banner Ads: Displayed at the bottom of certain screens
Interstitial Ads: Full-screen ads shown after completing practice sessions or answering multiple questions
Rewarded Ads: Optional ads you can watch to unlock hints or explanations
Native Ads: Ads integrated into content lists

You can control ad personalization through your device settings:

Android: Settings → Google → Ads → Opt out of Ads Personalization
iOS: Settings → Privacy → Tracking → Limit Ad Tracking

Learn more: Google Ads Policy | AdMob Privacy

11.3 No Account Required

Unlike the web platform, the mobile app does not require account creation or authentication. All features are available offline, and no personal information is collected or transmitted to our servers.

11.4 Permissions

The mobile app may request the following permissions:

Internet Access: Required to load ads and download question content
Network State: To detect connectivity for ad loading
Storage: To save practice data locally on your device

We do not request access to your camera, microphone, contacts, or other sensitive device features.

12. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

Mobile App: While the mobile app does not collect personal information, parents should be aware that Google AdMob may collect device identifiers for advertising purposes. We recommend parents review Google's privacy policies and configure device-level ad settings appropriately.

13. Changes to This Policy

We may update this Privacy Policy occasionally. We will notify you of significant changes via email or prominent website notice. Continued use of the Service after changes constitutes acceptance.

14. Contact Us

For questions about this Privacy Policy or your personal data:

Email: support@deutsch-pruefung.de

Website: deutsch-pruefung.de

For EU residents: You have the right to lodge a complaint with your local data protection authority if you believe we have not addressed your concerns adequately.