Privacy Policy for Sternensammler Plus

In short

Star Chart Plus stores everything on the device: no servers, no account, no sign-in, no adverts, no analytics.

Plus costs a one-off price, paid in the Play Store before the app is installed. What happens in the process is described under “The purchase” below.

Controller

Contact for privacy requests

kontakt@bergdererste.de

Data collected and processed

The device stores the family’s entries and the progress derived from them. The app collects nothing by itself: no hardware device identifier, no advertising ID, no location, no usage statistics.

The device also stores routines (ordered task IDs), reward vouchers with an agreed date and an enjoyed date, and room decorations purchased with coins. A local recovery point keeps the previous family state before restoring or merging; it is not part of an exported backup. It disappears when the app’s data is cleared. Backups from Plus retain random family and replica IDs and task revision counters for deliberate offline merging. These IDs are generated by the app, not read from the phone’s hardware.

Stored data also includes medal finds, seen and celebrated records, and three favourite medals for the wall. Reading tasks have a marker; completions keep a record of whether the task was marked at that time. A brave step may contain a date, a personal note and the name of the person recording it.

The collection album keeps memory pages with milestones, dates where known and texts added by parents. Room worlds store ownership and selection. Animal movements create no additional stored family data. A yearbook contains selected album pages and pictures as an HTML file. It is created locally and passed only to the storage or share destination you choose; nothing is sent to us.

The parent codes are not stored in clear text, only a value derived from them. Anyone inspecting the app’s storage cannot read them from there.

They still are what they are: four digits that keep children out of the parent area. That is not a password — anyone who has the derived value and is willing to try ten thousand possibilities will get there. So do not use a code you use anywhere else.

Purposes and legal bases

The data in the app is processed by you, on your device – not by us. We do not receive it and cannot see it: the app has no server, no account and no permission to go online. If you use the app privately within your family, the GDPR does not apply to this processing (Art. 2 (2) (c) GDPR, purely personal or household activity). We are the controller within the meaning of the GDPR for what actually reaches us – your e-mail, for instance. Google Play handles the purchase (see “The purchase”).

Should we nevertheless be held responsible for the data on the device because of how the app is designed, we base it on Art. 6 (1) (f) GDPR; that is why this basis is listed below for every type of data. The legitimate interests are yours and your family’s in managing tasks, stars and rewards with the app you chose for it, and ours in providing that app to you. Your children’s interests carry particular weight. They are served by a first name being enough, by everything staying on the device and by nothing being analysed or passed on.

Storing these entries on your device is strictly necessary for the function you want to use; no consent is required for it (Section 25 (2) no. 2 TDDDG). The app asks for the camera and notifications only when you switch on the feature they belong to. You can object at any time by deleting entries in the app or uninstalling it – we hold nothing that we would have to delete.

• Optional days away: Account for days without tasks in the streak, weekly chest, weekly goal, reminder and report — Legal basis: Art. 6 (1) (f) GDPR (legitimate interests)
• Children’s first names and the chosen animal picture: Assigning tasks, stars, rewards and medals to a child — Legal basis: Art. 6 (1) (f) GDPR (legitimate interests)
• Tasks with their star value, their time and their weekly goal: Tasks children can complete and tick off — Legal basis: Art. 6 (1) (f) GDPR (legitimate interests)
• Completions: Showing a child’s star balance, the report and the certificate — Legal basis: Art. 6 (1) (f) GDPR (legitimate interests)
• Rewards and redemptions: Rewards children can redeem their stars for — Legal basis: Art. 6 (1) (f) GDPR (legitimate interests)
• Medals a child has earned: Showing the medals and their celebration — Legal basis: Art. 6 (1) (f) GDPR (legitimate interests)
• Optional parent accesses, each with their own code, and a log of who changed a star by hand: Hides the parent area from the children and shows which parent made a change — Legal basis: Art. 6 (1) (f) GDPR (legitimate interests)

Recipients, third parties and SDKs

The purchase

Plus is bought once. No subscription, no follow-up costs, no in-app purchases.

Google Play handles the purchase, not this app. Payment happens in the Play Store before the app reaches the device; the app itself contains no payment flow and knows nothing of the purchase — it runs because it is installed.

We see no payment data. No card number, no bank details, no billing address, no name, no email address. None of it reaches this app or its developer.

What Google processes as part of the purchase — Google account, payment method, purchase history — is governed by Google’s terms and lies outside this app. The developer receives only settlement summaries from Google, without details about the buyer.

The entered data

Nowhere — the app has no server, no user account and no automatic synchronisation. The first names, stars, tasks and rewards do not leave the device; they are not part of the purchase either.

The Android backup is switched on. That means: if backup to Google is enabled on the device, Android takes this app’s data along — so the collected stars survive a change of device. That is done by the operating system, not by the app; the data then sits encrypted in the user’s Google account and is subject to their terms. Anyone who does not want this switches the backup off in the Android settings (usually under “System → Backup”).

The backup to another phone

In the parent area the data can be handed to another phone — through the share sheet (Quick Share, for instance) or as a QR code on the screen that the other phone scans in its app. Either way the data goes directly from device to device; no server is involved. The QR code contains the complete data, compressed — whoever photographs it has the data. Show it only to the phone that is meant to receive it.

Deliberate offline merging and the home screen widget

Parents can share completed tasks using a separate QR code or file. It contains a random shared family ID, task and child IDs, dates, star values, removal markers and random replica IDs with revision counters. It contains no parent PIN, reward purchases or settings. Only devices set up from a shared backup can merge; conflicting changes require a choice. There is no server or automatic transmission. Show the QR code only to the intended recipient.

The home screen widget keeps a private local copy of names, animal pictures, daily progress and next tasks. Adding the widget makes these visible on the home screen without the app’s parent PIN. It requests no permission.

The backup you create yourself

In the parent area everything can be saved as a file. You decide where it goes: the device opens its share dialogue, and the file goes wherever you send it — into an email to yourself, into a cloud, into the device’s storage.

The app itself sends nothing. It puts the file into its own cache and hands it to the dialogue; it needs no permission for that.

⚠️ What you pass on is complete. The file contains the children’s first names, their stars, tasks and rewards — and the derived values of the parent codes. A backup in someone else’s cloud sits under their terms, not ours.

The certificate

For every milestone in the star jar Plus issues a certificate. It is drawn on the device and handed to the share dialogue — where it goes is up to you. It carries the child’s first name, its animal picture and the date. It does not come to us.

The app contains no analytics tool, no crash reporting SDK and no adverts. No data is passed on to third parties or sold.

The fonts, too, are part of the program itself. The app loads nothing from external servers — in particular no fonts from Google Fonts, which would otherwise send the device’s address on every start.

Analytics, crash reports, advertising, purchases

• Analytics or statistics services: no
• Crash reporting: no
• Advertising: no
• In-app purchases: no

Android backup: The app allows Android backup. If backup is enabled on the device, the operating system may include the app data in the user’s Google backup.

Transfers to third countries

The controller does not transfer personal data to countries outside the EU or the EEA.

The controller transfers personal data to countries outside the EU or the EEA only where this is explicitly stated in the “Recipients” section. In that case the section also states the basis on which the transfer takes place.

Retention period

• Optional days away: Until deleted by the user (uninstalling the app or clearing its storage); possibly a copy in the user’s Android backup
• Children’s first names and the chosen animal picture: Until deleted by the user (uninstalling the app or clearing its storage); possibly a copy in the user’s Android backup
• Tasks with their star value, their time and their weekly goal: Until deleted by the user (uninstalling the app or clearing its storage); possibly a copy in the user’s Android backup
• Completions: Until deleted by the user (uninstalling the app or clearing its storage); possibly a copy in the user’s Android backup
• Rewards and redemptions: Until deleted by the user (uninstalling the app or clearing its storage); possibly a copy in the user’s Android backup
• Medals a child has earned: Until deleted by the user (uninstalling the app or clearing its storage); possibly a copy in the user’s Android backup
• Optional parent accesses, each with their own code, and a log of who changed a star by hand: Until deleted by the user (uninstalling the app or clearing its storage); possibly a copy in the user’s Android backup

Deletion of account and data

The app does not use a user account with the provider.

All data sits in the app’s storage on the device. It disappears completely when the app is uninstalled or its storage is cleared (Android settings → Apps → Star Chart Plus → Storage → Clear data). Nothing is left behind, because there is nothing anywhere else.

The purchase itself stays tied to your Google account; Plus can be installed again with it without paying twice. That is managed in the Play Store, not here.

If the Android backup was used, a copy of the entered data remains there. It is deleted through the user’s Google account settings.

Permissions

The app requests two permissions, each only when you use the feature it belongs to — never at start-up:

The camera, only when you scan a backup or task merge as a QR code from another phone in the parent area. It asks the first time you scan. The camera runs while the scan window is open and is switched off when it closes. No image is stored or sent: the app only looks for the code in the frames and discards them. If you refuse, you can send the backup through the share sheet instead.

Notifications, only when you turn on the evening reminder under Settings in the parent area. The phone then shows a message at the chosen time if a child has no star yet that day. The message is created on the device itself — the app sets itself an alarm; no server is involved, nothing is transmitted. So that the reminder survives a restart of the phone, the app may re-set its alarms after booting (Android calls this “run at start-up”). If you refuse or turn the reminder off, no message is shown; everything else works as before.

Nothing else: not internet, not location, not microphone, not contacts, not storage — and no permission for purchases either, because there are none inside the app.

• android.permission.CAMERA: Only for scanning a backup as a QR code from another phone in the parent area. Asked the first time you scan; no image is stored or sent.
• android.permission.POST_NOTIFICATIONS: Only for the optional evening reminder when parents enable it under Settings. The message is created on the device; no server is involved.
• android.permission.RECEIVE_BOOT_COMPLETED: Restores alarms for an enabled evening reminder after the phone restarts.

Your rights

With regard to personal data concerning you, you have the following rights against the controller:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7 (3) GDPR)

An e-mail to the contact address given above is sufficient to exercise these rights.

Right to object (Art. 21 GDPR): Where processing is based on Art. 6 (1) (f) GDPR, you may object to it at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for the controller is the supervisory authority of the German state of Rhineland-Palatinate:

Irrespective of this, Art. 77 GDPR also entitles you to lodge a complaint with the supervisory authority of your habitual residence, your place of work or the place of the alleged infringement.

Children and families

The app is also directed at children.

The app is meant for families: parents create children, tasks and rewards, children tick things off and see how they are doing. Nothing is collected and nothing is transmitted in the process either. There is nothing to buy inside the app — neither for children nor for parents.

Where an app is aimed at families or children, the statements in this policy apply without restriction to children’s data as well. No data about children is processed beyond what is listed in the “Data collected” section.

Changes

If what the app does changes, this text changes with it. The date above says when it was last touched.