Privacy Policy for Sternensammler

In short

Sternensammler sends nothing. The app has no internet permission — technically it cannot send anything, not even by accident. Everything you enter stays on the device.

There is one exception, and it does not come from the app: Android includes the data of installed apps in the user’s Google backup if the user has switched that on for their device. More on this below.

Controller

Contact for privacy requests

kontakt@bergdererste.de

Data collected and processed

The device stores the family’s entries and the progress derived from them. The app collects nothing on its own: no hardware device identifier, no advertising ID, no location, no usage statistics.

The device also stores routines (ordered task IDs), reward vouchers with an agreed date and an enjoyed date, and room decorations purchased with coins. A local recovery point keeps the previous family state before restoring or merging; it is not part of an exported backup. It disappears when the app’s data is cleared. Backups from Plus retain random family and replica IDs and task revision counters for deliberate offline merging. These IDs are generated by the app, not read from the phone’s hardware.

Stored data also includes medal finds, seen and celebrated records, and three favourite medals for the wall. Reading tasks have a marker; completions keep a record of whether the task was marked at that time. A brave step may contain a date, a personal note and the name of the person recording it.

Album pages and parent notes, room worlds and costume ownership imported from Plus remain in file backups. The free app does not display the album or interactive animal worlds and does not create new album pages. These data remain available for a later return to Plus.

The parent code is not stored in clear text, only a value derived from it. Anyone inspecting the app’s storage cannot read it from there.

It still is what it is: four digits that keep children out of the parent area. It is not a password — anyone who has the derived value and is willing to try ten thousand possibilities will get there. So do not use a code you use anywhere else.

Purposes and legal bases

The data in the app is processed by you, on your device – not by us. We do not receive it and cannot see it: the app has no server, no account and no permission to go online. If you use the app privately within your family, the GDPR does not apply to this processing (Art. 2 (2) (c) GDPR, purely personal or household activity). We are the controller within the meaning of the GDPR for what actually reaches us – your e-mail, for instance.

Should we nevertheless be held responsible for the data on the device because of how the app is designed, we base it on Art. 6 (1) (f) GDPR; that is why this basis is listed below for every type of data. The legitimate interests are yours and your family’s in managing tasks, stars and rewards with the app you chose for it, and ours in providing that app to you. Your children’s interests carry particular weight. They are served by a first name being enough, by everything staying on the device and by nothing being analysed or passed on.

Storing these entries on your device is strictly necessary for the function you want to use; no consent is required for it (Section 25 (2) no. 2 TDDDG). You can object at any time by deleting entries in the app or uninstalling it – we hold nothing that we would have to delete.

• Optional days away: Account for days without tasks when a child is away from home — Legal basis: Art. 6 (1) (f) GDPR (legitimate interests)
• Children’s first names and the chosen animal picture: Assigning tasks, stars and rewards to a child — Legal basis: Art. 6 (1) (f) GDPR (legitimate interests)
• Tasks with their star value: Tasks children can complete and tick off — Legal basis: Art. 6 (1) (f) GDPR (legitimate interests)
• Completions: Showing a child’s star balance — Legal basis: Art. 6 (1) (f) GDPR (legitimate interests)
• Rewards and redemptions: Rewards children can redeem their stars for — Legal basis: Art. 6 (1) (f) GDPR (legitimate interests)
• Optional parent code: Hides the parent area from the children — Legal basis: Art. 6 (1) (f) GDPR (legitimate interests)

Recipients, third parties and SDKs

Nowhere — the app has no server, no user account, no synchronisation and no permission to go online.

Android backup is enabled. This means: if backup to Google is switched on for the device, Android includes this app’s data — so that the collected stars survive a change of device. The operating system does this, not the app; the data is then stored encrypted in the user’s Google account and is subject to Google’s privacy terms. If you do not want this, switch off backup in the Android settings (usually under “System → Backup”).

The backup you create yourself

In the parent area everything can be saved as a file. You decide where it goes: the device opens its share dialogue, and the file goes wherever you send it — into an email to yourself, into a cloud, into the device’s storage.

The app itself sends nothing. It puts the file into its own cache and hands it to the dialogue; it needs no permission for that.

⚠️ What you pass on is complete. The file contains the children’s first names, their stars, tasks and rewards — and the derived value of the parent code. A backup in someone else’s cloud sits under their terms, not ours.

The app contains no analytics tool, no crash reporting SDK and no advertising. There are no in-app purchases. No data is passed on to third parties or sold.

The fonts used are bundled with the app as well. The app does not load anything from third-party servers — in particular no fonts from Google Fonts, which would otherwise transmit the device’s address on every start.

Analytics, crash reports, advertising, purchases

• Analytics or statistics services: no
• Crash reporting: no
• Advertising: no
• In-app purchases: no

Android backup: The app allows Android backup. If backup is enabled on the device, the operating system may include the app data in the user’s Google backup.

Transfers to third countries

The controller does not transfer personal data to countries outside the EU or the EEA.

The controller transfers personal data to countries outside the EU or the EEA only where this is explicitly stated in the “Recipients” section. In that case the section also states the basis on which the transfer takes place.

Retention period

• Optional days away: Until deleted by the user (uninstalling the app or clearing its storage); possibly a copy in the user’s Android backup
• Children’s first names and the chosen animal picture: Until deleted by the user (uninstalling the app or clearing its storage); possibly a copy in the user’s Android backup
• Tasks with their star value: Until deleted by the user (uninstalling the app or clearing its storage); possibly a copy in the user’s Android backup
• Completions: Until deleted by the user (uninstalling the app or clearing its storage); possibly a copy in the user’s Android backup
• Rewards and redemptions: Until deleted by the user (uninstalling the app or clearing its storage); possibly a copy in the user’s Android backup
• Optional parent code: Until deleted by the user (uninstalling the app or clearing its storage); possibly a copy in the user’s Android backup

Deletion of account and data

The app does not use a user account with the provider.

All data lives in the app’s storage on the device. It disappears completely when the app is uninstalled or its storage is cleared (Android settings → Apps → Sternensammler → Storage → Clear data). Nothing remains, because there is nothing anywhere else.

If Android backup was used, a copy is still there. It is deleted via the user’s Google account settings.

Permissions

The app requests no permissions. Not internet, not location, not camera, not microphone, not contacts, not storage.

Your rights

With regard to personal data concerning you, you have the following rights against the controller:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7 (3) GDPR)

An e-mail to the contact address given above is sufficient to exercise these rights.

Right to object (Art. 21 GDPR): Where processing is based on Art. 6 (1) (f) GDPR, you may object to it at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for the controller is the supervisory authority of the German state of Rhineland-Palatinate:

Irrespective of this, Art. 77 GDPR also entitles you to lodge a complaint with the supervisory authority of your habitual residence, your place of work or the place of the alleged infringement.

Children and families

The app is also directed at children.

The app is meant for families: parents set up children, tasks and rewards; children tick things off and see their score. Nothing is collected or transmitted in the process either.

Where an app is aimed at families or children, the statements in this policy apply without restriction to children’s data as well. No data about children is processed beyond what is listed in the “Data collected” section.

Changes

If what the app does changes, this text changes with it. The date at the top says when it was last touched.