Privacy Policy

Last updated: April 18, 2026

This Privacy Policy describes how Carmen Grigore ("we", "our", or "us") collects, uses, and shares information when you use the DeutschTogether mobile app (the "App"). By using the App, you agree to the terms below. If you do not agree, please do not use the App.

1. Information we collect

1.1 Information you provide when you sign in

When you create an account using Google Sign-In or Sign in with Apple, we receive:

• Your email address
• Your display name (as provided by Google or Apple)
• Your profile photo URL (if provided by the identity provider)
• A unique user identifier assigned by Firebase Authentication

Sign in with Apple may relay a private email address. We never receive your Apple ID password or your raw Google password.

1.2 Information you create in the App

• A username you choose (public to other users)
• Your learning progress, XP, level, streaks, and earned badges
• Your friends list and friend requests you send or receive
• Challenge and game history (who you played, scores, results)
• Custom vocabulary you add via the "My Words" feature (premium)

1.3 Technical information

• Device push-notification token (from Expo/Firebase), so we can send notifications you've opted into
• Purchase and subscription status (managed by RevenueCat; see Section 3)
• Basic diagnostics produced by crashes or errors in the App

We do not collect your contacts, calendar, microphone, precise location, or health data. The App does not use tracking SDKs for advertising.

2. How we use your information

• To create and maintain your account and authenticate you
• To let you add friends, play real-time challenges, and appear on leaderboards
• To track your progress (XP, streaks, badges) across devices
• To send push notifications about friend requests and challenges you've opted into
• To process and validate in-app purchases and subscriptions
• To diagnose bugs and improve the App

3. Third parties we work with

We use a small number of third-party services to run the App. Each receives only the data it needs:

• Google Firebase (Authentication, Firestore, Realtime Database, Cloud Functions, Cloud Messaging) — stores your account, profile, friends, challenges, and progress. Data is stored in Google's europe-west1 region. See Firebase's privacy terms.
• Google Sign-In — used when you sign in with a Google account. See Google's privacy policy.
• Apple — used when you sign in with your Apple ID. See Apple's privacy policy.
• RevenueCat — manages in-app subscriptions on our behalf. Receives your Firebase user ID and subscription status. See RevenueCat's privacy policy.
• Expo — relays push notifications to your device. See Expo's privacy policy.

We do not sell your personal data. We do not share your data with advertisers.

4. How other users see your data

Certain information is visible to other users of the App by design:

• Your display name, username, and profile photo appear to friends and in leaderboards.
• Your XP, level, and streak count appear on leaderboards and to your friends.
• When you send or accept a friend request, that friend can see the information listed above and your challenge results against them.

5. Data retention and account deletion

We keep your data for as long as your account exists. You can delete your account at any time from inside the App:

Historical challenge results you played against other users remain visible to those users, but your identity is anonymized — your profile appears as "Deleted User" and your unique identifier is removed.

If you paid for a subscription, canceling it is done in your Apple App Store or Google Play subscription settings, not through us. Your subscription record is deleted from our systems along with your account; the subscription itself will expire at the end of its billing period according to Apple's or Google's terms.

6. Your rights

Depending on where you live, you may have rights to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your data (see Section 5 — you can do this yourself in the App)
• Object to or restrict certain processing
• Port your data to another service
• Lodge a complaint with your local data-protection authority

To exercise any of these rights, contact us at support@deutschtogether.app.

7. Children

The App is not directed at children under 13 years of age. We do not knowingly collect information from children under 13. If you believe a child under 13 has provided us with information, please contact us and we will delete it.

8. Security

We rely on Google Firebase's infrastructure to secure your data in transit (HTTPS/TLS) and at rest. No system is perfectly secure, but we take reasonable measures to protect your information.

9. International transfers

Your data is stored in Google Cloud's europe-west1 region (Belgium). If you use the App from outside this region, your data is transferred internationally to this region.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. For material changes, we'll provide a more prominent notice (for example, through an in-app notice).

11. Contact

Questions about this policy or your data? Contact:

• Email: support@deutschtogether.app
• Publisher: Carmen Grigore