Legal
Privacy Policy
In short
This app has no user account and no server of its own. Your cards, your quiz results and your settings stay on your device and — if you are signed in to iCloud — in your own private iCloud. The developer has no access to any of it.
Only in one place does anything leave your device: purchases are handled through a service provider (RevenueCat). Nothing that names you is transmitted — no name, no email address, no advertising identifier. Section 5 sets out exactly what arrives there.
There are no ads, no cross-app tracking and no sale of data to anyone.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Felix Leitenberger
Kreuzenstr. 32
82041 Furth
Germany
Email: info(at)crabucate.de
2. What the app processes
The app stores only what comes into being while you play:
- Your cards — which card you own and when you unlocked it
- Quiz results — which questions you answered correctly for which animal
- Credit — how many unlocks from a purchased pack are still open
- Settings — whether onboarding has run and whether you want the daily reminder
The app asks for no personal details: no name, no email address, no date of birth, no address, no phone number. It does not access location, camera, microphone, photos, contacts, calendars or health data.
The day your series begins is not stored separately; it is worked out from the timestamp of your oldest card.
3. Where that data lives
On your device
Everything listed above is stored locally in a protected area of the app that the operating system shields from other apps.
In your iCloud
If you are signed in to iCloud on the device, the same entries are additionally stored in the private database of your iCloud account (Apple CloudKit). This serves only to sync your collection between your own devices — and to bring it back after you change device.
That database belongs to your Apple Account. The developer technically cannot see into it: there is no access to users' private CloudKit databases, and there is no server of the developer's to which this data is sent.
You control syncing through iCloud in your device's system settings. Processing inside your iCloud is otherwise governed by Apple's privacy policy.
Not on a server of the developer's
There is none. Cards, photographs and quiz questions all ship inside the app and are never downloaded. Apart from the iCloud connection and the purchase handling described in section 5, the app makes no network connection at all.
4. Purchases through the App Store
All purchases run through the App Store. Your contract for a purchase is with Apple, not with the developer. Payment details are processed by Apple alone; the developer learns neither your name nor your means of payment.
Apple provides the developer with aggregated reports only — sales figures per country, for instance. They do not allow any conclusion about an individual person.
5. RevenueCat — verifying purchases
So the app can tell whether a purchase is valid and whether a subscription is still running, it uses RevenueCat (RevenueCat, Inc., 300 Delaware Ave, Suite 210 #4453, Wilmington, DE 19801, USA). RevenueCat checks the receipt against Apple and answers the app's question of what is unlocked.
The following is processed:
- a randomly generated identifier that the app creates on first launch and that is linked to nothing about you (anonymous app user ID)
- the receipt from Apple, with the product, the time of purchase, the transaction identifier, the storefront country and the status of a subscription
- device and system details such as device model, operating system version, app version, language and time zone
- the IP address of the request, which RevenueCat uses to determine the country and to prevent abuse
- five counts from your progress: how many cards you own, how many single cards you have bought, how much credit is left, how many days you have missed and how many quiz rounds you have played
Those five counts decide which purchase option you are offered — someone who has missed three days sees the archive offer rather than a single card. They contain nothing about the contents of your collection and say nothing about which animals you own.
No tracking, no advertising. RevenueCat receives no advertising identifier (IDFA), nothing is joined across devices, and none of it goes to advertising networks.
The legal basis is Art. 6(1)(b) GDPR: without this check a purchase could not be delivered and a subscription could not be unlocked. For choosing which offer to show, it is Art. 6(1)(f) GDPR (legitimate interest in presenting a sensible purchase option).
Transfer to the USA: RevenueCat processes this data in the United States. A data processing agreement is in place that incorporates the European Commission's Standard Contractual Clauses. Further detail is in RevenueCat's privacy policy.
Retention: purchase history is kept for as long as it is needed to unlock what you bought. If you delete the app, the anonymous identifier remains behind without a device; it cannot be attributed to a person.
6. Notifications
If you would like a daily reminder about the new card, the app asks once for permission to send notifications. It only asks after you have unlocked your first card — before that you would not know what you were agreeing to.
Those reminders are created and scheduled on your device. No message is sent from a server and nothing is transmitted to one. You can withdraw the permission at any time in your device's system settings.
Separately, the app registers for silent system notifications through which iCloud announces changes to your collection. Those come from Apple, carry no visible text and serve syncing alone.
7. No tracking
No tracking within the meaning of Apple's App Tracking Transparency framework takes place. The app uses no advertising identifier, builds no cross-provider usage profiles, and contains no ad networks, no third-party analytics frameworks (such as Google Analytics, Firebase or Crashlytics) and no tracking libraries. Accordingly it never asks for tracking permission.
8. Apple's role
Independently of this app, Apple processes data on its own responsibility:
- When you download the app from the App Store and with every purchase (Apple Account, payment, device information)
- When syncing through iCloud, if you are signed in
- As aggregated statistics that Apple makes available to the developer through App Store Connect — download figures or crash reports, for instance. Those reports are aggregated; they do not allow the developer to draw conclusions about individuals. Whether you take part is up to you under Settings → Privacy & Security → Analytics & Improvements.
Apple's privacy policy applies.
9. Getting in touch
If you write to the developer by email — with a question or a bug report — the details you send (email address, content of the message) are processed to deal with your request and deleted once they are no longer needed and no statutory retention period stands in the way. The legal basis is Art. 6(1)(f) GDPR.
10. Your rights
Under the GDPR you have the following rights against the controller:
- Access to the data processed (Art. 15)
- Rectification of inaccurate data (Art. 16)
- Erasure (Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Objection to processing (Art. 21)
- Complaint to a supervisory authority (Art. 77)
A practical note: the developer holds no data that names you. He can neither disclose nor delete anything about your collection — it is yours and it is with you. You control it directly:
- Your collection goes away when you delete the app from the device and remove the app's data in the iCloud settings of your Apple Account.
- The record held by RevenueCat can be deleted on request — write to the developer. The anonymous app user ID is needed to find it; it is shown in the app's settings.
The competent supervisory authority follows from the controller's place of establishment (see section 1).
11. Children
The app is rated 4+ and contains nothing unsuitable for children. No data from children is knowingly collected — no data that names any person is collected at all. Purchases in the App Store can be restricted or switched off entirely using Apple's Screen Time settings.
12. Changes to this policy
This policy will be adjusted when the app or the legal situation changes. The version published here is the one that applies; the date above states when it was last revised.