Privacy policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Suraj Kumar Giri
Email: devkeyapps@gmail.com

2. What the app does not do

• It has no account and no login.
• It contains no analytics, tracking, advertising or crash-reporting services, and no third-party software that sends data.
• It does not use an advertising identifier (IDFA) and does not ask for App Tracking permission.
• It does not access your location, contacts, photos, camera or microphone.
• We receive no data about your learning, so we cannot pass it on or sell it.

All questions, explanations, translations, pictures and the glossary are inside the app. Practice, exams, flashcards, readiness and listen mode work offline.

3. What is stored on your device

• What: your answers, practice exams, flashcard ratings, bookmarks, your streak, achievements and your settings (for example federal state, language, daily goal, exam date, reminder time).
• Where: in the app's storage on your device. So that the widgets can show your progress, part of it sits in a shared app storage (an app group) used by the app and its widgets. Only the app and its widgets on this device read it.
• Backups: like the data of other apps, your progress can be part of a backup of your device (iCloud Backup, a backup made through a computer) if you have turned one on. The operating system does this. The backup lives in your own Apple account or on your own computer, not with us. The app's own iCloud sync, which you turn on yourself, is separate from this (section 4).
• Export file: if you choose "Export progress" ("Fortschritt exportieren"), a file with your learning history is created. It stays wherever you save or send it. Treat it like any other personal file.
• Deleting: in the app under Profile › Settings › Your data › "Reset all progress", or by deleting the app. Backups you made earlier remain until you delete them. With iCloud sync on, a reset applies to all your devices; deleting the app removes nothing from iCloud (section 4).

4. iCloud sync (optional)

With iCloud sync you study on iPhone and iPad with the same progress, as long as the devices are signed in with the same Apple Account. It is off until you turn it on yourself: Profile › Settings › Sync › "iCloud sync". The app asks first, and the line under the switch always tells you what is happening.

• Where: in your own private iCloud database (Apple CloudKit), under your Apple Account. It counts towards your iCloud storage. Apple provides it, under Apple's privacy policy. We, the developer, have no access to it: we cannot see it, read it or delete anything in it. Apple stores it like your other iCloud data, encrypted in transit and on its servers (not end-to-end encrypted). There is no server of ours involved.
• Legal basis: the transfer to your iCloud happens only at your request, to provide the sync to you (Art. 6(1)(b) GDPR). Apple is responsible for storing it in iCloud under your iCloud terms.
• What is synced: your answers, flashcard ratings, finished practice exams, the dates and results of your real exams, bookmarked questions and the settings that belong to you: federal state, test type, content language, how the translation is shown, exam date, daily goal, answer shuffling, what happens after a correct answer, and how much of Hedi you want to see. Each entry carries a time and a random code the app makes up for each device, so that changes arrive in the right order. That code says nothing about you or your device.
• What stays on the device: reminders and their time, sound, haptics, reading aloud, speaking speed, text size, appearance, the flashcard controls, a practice session or exam you have started, and the result of the Apple Ads request (section 5). Each device works out your streak, readiness and achievements from your answers itself.
• Turning it on: what is already on the device is added to what is in your iCloud. Nothing is lost or counted twice.
• Turning it off: at any time, in the same place. Your progress stays on the device, and your other devices keep what they already have. What is in iCloud stays there until you delete it.
• Reset and import: with sync on, they apply to all your devices. The app tells you so before you confirm. After a reset, only your settings remain in iCloud, no learning progress.
• Deleting from iCloud: you delete everything Hedi has stored in your iCloud in the Settings app: your name › iCloud › "Storage" or "Manage Account Storage" › Hedi. Sync then turns itself off, and the progress on your devices is kept.
• Signals between your devices: so that a device learns about changes on your other devices, iCloud sends the app silent signals through Apple's push service. They do not appear as notifications, and we send nothing through them.

5. The one request of its own: Apple Ads attribution

This is the only network request the app makes of its own; iCloud sync (section 4) runs only if you turn it on. The request exists to find out whether an install came from an ad in Apple Ads (formerly Apple Search Ads).

• When: once, on first launch. If Apple's record is not ready yet (this can happen shortly after an install) or you are offline, the app repeats the request on later launches, eight attempts in total at most. After Apple has answered, it never asks again. If your device does not produce a token, the app sends nothing.
• What is sent: a single token that iOS generates for this purpose (Apple AdServices). We add nothing: no learning data, no identifier of ours, no advertising identifier. What iOS puts into the token is up to Apple. The request goes straight from your device to Apple's server (api-adservices.apple.com), not to us.
• What comes back: Apple answers whether the install is attributed to an Apple Ads campaign. If it is, the answer includes campaign details (campaign, ad group and keyword numbers, country or region, click date, download or re-download).
• What the app does with it: it stores the result once on your device. It is not linked to your learning progress and is not sent to us or to anyone else.
• Also read locally: the app reads the country of your App Store account from iOS and, only if the install was attributed to an ad, the original purchase date of the app (StoreKit). That tells a new purchase from a reinstall. These are operating-system queries; the app sends these details nowhere.

The app states the same thing under Profile › About this app: "This app makes one request of its own: Apple's ad attribution check on first launch. With iCloud sync on, your progress also goes to your own private iCloud storage. Nothing else leaves your device."

6. Purchase

You buy Hedi in the App Store. Apple processes payment and account data; we do not receive them. Like every developer, we receive summarised sales and usage reports from Apple (for example downloads by country). Usage statistics come only from people who agreed in their device settings to share app analytics with developers. These reports do not identify you.

7. Notifications and speech

• Reminders are optional. The app asks for permission to send notifications only when you turn reminders on. They are scheduled locally on your device. There is no push server of ours.
• Reading aloud and listen mode use the voices on your device. The audio is produced on the device; nothing is sent for it.

8. Links you tap

Some places in the app open another app or page when you tap them: your email app ("Report a problem", "Email support"), the browser (for example the page of the Federal Office under "About the test", and this support and privacy site) or the share sheet (export). After that, the rules of that app or page apply.

9. If you write to us

"Report a problem" opens your email app with a prepared message: the question ID and catalogue version in the subject, and in the body the question text, the app version and the content language you chose. Nothing is sent automatically; you can edit the text or cancel. If you send the email, we receive your email address and your text. We use them to reply and to check the question (Art. 6(1)(f) GDPR), and we delete them when we no longer need them.

10. This website

These pages set no cookies and load no fonts, scripts or images from other servers. Like any web server, the server processes technically necessary connection data when you visit (among other things IP address, time, page requested, browser details) in log files. They serve the operation and security of the website (Art. 6(1)(f) GDPR). Hosting: Vercel Inc., USA.

11. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can complain to a data protection supervisory authority (Art. 77). Write to us at devkeyapps@gmail.com. You delete the data in the app and in your iCloud yourself (sections 3 and 4); we do not hold it.

12. Changes

If what data the app or the website processes changes, we will update this policy. The date at the top shows the current version.