Skip to content
bergdererste.de

Privacy Policy for Sternensammler

Last updated:

This privacy policy applies to the app Sternensammler. The provider and controller within the meaning of the GDPR is Sven Augstein.

In short

Sternensammler sends nothing. The app has no internet permission — technically it cannot send anything, not even by accident. Everything you enter stays on the device.

There is one exception, and it does not come from the app: Android includes the data of installed apps in the user’s Google backup if the user has switched that on for their device. More on this below.

Controller

Sven Augstein
Kaufhausgasse 6
55411 Bingen am Rhein
Deutschland
sternensammler@bergdererste.de

Contact for privacy requests

sternensammler@bergdererste.de

Data collected and processed

The only data stored on the device is what parents enter themselves. The app collects nothing on its own: no device identifier, no advertising ID, no location, no usage statistics.

The parent code is stored unencrypted in the app’s storage. It keeps children out of the parent area, nothing more. It is not a password and does not protect anything against someone who has access to the unlocked device. So do not use a code that you use anywhere else.

Data category Purpose Stored
Children’s first names and the chosen animal picture
A first name is enough; the app does not ask for a surname, date of birth or photo.
Assigning tasks, stars and rewards to a child on the device
Tasks with their star value Tasks children can complete and tick off on the device
Completions
Which task was ticked off on which day.
Showing a child’s star balance on the device
Rewards and redemptions
When which child redeemed stars for a reward.
Rewards children can redeem their stars for on the device
Optional parent code
Stored unencrypted in the app’s storage.
Hides the parent area from the children on the device

Purposes and legal bases

  • Children’s first names and the chosen animal picture: Assigning tasks, stars and rewards to a child — Legal basis: ❗TODO: Rechtsgrundlage festlegen – Verarbeitung ausschließlich lokal auf dem Gerät, der Anbieter erhält keine Daten (GitHub #17)
  • Tasks with their star value: Tasks children can complete and tick off — Legal basis: ❗TODO: Rechtsgrundlage festlegen – Verarbeitung ausschließlich lokal auf dem Gerät, der Anbieter erhält keine Daten (GitHub #17)
  • Completions: Showing a child’s star balance — Legal basis: ❗TODO: Rechtsgrundlage festlegen – Verarbeitung ausschließlich lokal auf dem Gerät, der Anbieter erhält keine Daten (GitHub #17)
  • Rewards and redemptions: Rewards children can redeem their stars for — Legal basis: ❗TODO: Rechtsgrundlage festlegen – Verarbeitung ausschließlich lokal auf dem Gerät, der Anbieter erhält keine Daten (GitHub #17)
  • Optional parent code: Hides the parent area from the children — Legal basis: ❗TODO: Rechtsgrundlage festlegen – Verarbeitung ausschließlich lokal auf dem Gerät, der Anbieter erhält keine Daten (GitHub #17)

Recipients, third parties and SDKs

Nowhere — the app has no server, no user account, no synchronisation and no permission to go online.

Android backup is enabled. This means: if backup to Google is switched on for the device, Android includes this app’s data — so that the collected stars survive a change of device. The operating system does this, not the app; the data is then stored encrypted in the user’s Google account and is subject to Google’s privacy terms. If you do not want this, switch off backup in the Android settings (usually under “System → Backup”).

The app contains no analytics tool, no crash reporting SDK and no advertising. There are no in-app purchases. No data is passed on to third parties or sold.

The fonts used are bundled with the app as well. The app does not load anything from third-party servers — in particular no fonts from Google Fonts, which would otherwise transmit the device’s address on every start.

Analytics, crash reports, advertising, purchases

  • Analytics or statistics services: no
  • Crash reporting: no
  • Advertising: no
  • In-app purchases: no

Android backup: The app allows Android backup. If backup is enabled on the device, the operating system may include the app data in the user’s Google backup.

Transfers to third countries

The controller does not transfer personal data to countries outside the EU or the EEA.

The controller transfers personal data to countries outside the EU or the EEA only where this is explicitly stated in the “Recipients” section. In that case the section also states the basis on which the transfer takes place.

Retention period

  • Children’s first names and the chosen animal picture: Until deleted by the user (uninstalling the app or clearing its storage); possibly a copy in the user’s Android backup
  • Tasks with their star value: Until deleted by the user (uninstalling the app or clearing its storage); possibly a copy in the user’s Android backup
  • Completions: Until deleted by the user (uninstalling the app or clearing its storage); possibly a copy in the user’s Android backup
  • Rewards and redemptions: Until deleted by the user (uninstalling the app or clearing its storage); possibly a copy in the user’s Android backup
  • Optional parent code: Until deleted by the user (uninstalling the app or clearing its storage); possibly a copy in the user’s Android backup

Deletion of account and data

The app does not use a user account with the provider.

All data lives in the app’s storage on the device. It disappears completely when the app is uninstalled or its storage is cleared (Android settings → Apps → Sternensammler → Storage → Clear data). Nothing remains, because there is nothing anywhere else.

If Android backup was used, a copy is still there. It is deleted via the user’s Google account settings.

Permissions

The app requests no permissions. Not internet, not location, not camera, not microphone, not contacts, not storage.

Your rights

With regard to personal data concerning you, you have the following rights against the controller:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing (Art. 21 GDPR)
  • Withdrawal of consent with effect for the future (Art. 7 (3) GDPR)

An e-mail to the contact address given above is sufficient to exercise these rights.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for the controller is the supervisory authority of the German state of Rhineland-Palatinate:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
(State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate)
Hintere Bleiche 34
55116 Mainz
Germany
Phone: +49 6131 8920-0
poststelle@datenschutz.rlp.de
www.datenschutz.rlp.de

Irrespective of this, Art. 77 GDPR also entitles you to lodge a complaint with the supervisory authority of your habitual residence, your place of work or the place of the alleged infringement.

Children and families

❗TODO: Play-Console-Einstufung – Zielgruppe / „Für Familien“ (GitHub #5)

The app is meant for families: parents set up children, tasks and rewards; children tick things off and see their score. Nothing is collected or transmitted in the process either.

Where an app is aimed at families or children, the statements in this policy apply without restriction to children’s data as well. No data about children is processed beyond what is listed in the “Data collected” section.

Changes

If what the app does changes, this text changes with it. The date at the top says when it was last touched.