Privacy – Sachkunde Arzneimittel

Anonymous purchase and review statistics

So that we can see where a purchase fails and whether a review prompt could be shown, the app reports a few fixed events to our AppCore service operated on Cloudflare: technical purchase steps with fixed status and error codes, and whether a review prompt was possible, requested, postponed or failed. Each event contains only the event name, a fixed stage or reason, platform and app version; no learning content, no input and no purchase receipts, and we do not learn whether or how you rate the app. Like every online request, the app sends the event with its random session identifier; the event is stored without that identifier. We delete individual events after seven days. Daily totals of review prompts are deleted after at most 120 days; aggregate daily counters of purchase steps and purchase errors are kept without a fixed deletion date. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is finding errors and purchase problems and improving the app. You can object under Art. 21 GDPR at any time by emailing apps@bitbeans.de. A failed report has no effect on learning or purchases.

1. Controller

Christian Hermann & Martina Hermann GbR, An Rainen 3, 72525 Münsingen, Germany; email: apps@bitbeans.de.

2. Data processed

Learning goal, exam date, answers, learning progress, bookmarks, rounds and display options are stored locally; the optional daily reminder is scheduled on the device. There is no personal app account and no cloud backup of your learning progress.

For catalog updates, purchase verification and other online features we use our AppCore service; a random pseudonymous session identifier is used for technical assignment. To verify and restore the Complete unlock we process the product ID, store platform, technical receipt or transaction data and the unlock status. We do not receive payment details.

Only when you send a question to the optional AI study help do we transmit the question, topic and catalog version to AppCore; the question and matching texts from our knowledge base go to xAI (Grok, api.x.ai) to generate the answer. We record quota usage but do not store a conversation history. To select matching catalog texts, we also send the question and candidate catalog excerpts to TypeSafe (api.typesafe.ai); TypeSafe does not generate text. Please do not enter health data or information about other people.

“Send feedback” transmits your message, an optional reply address, app version, platform and the screen it was sent from to AppCore; we store the feedback for handling.

3. Purposes and legal bases

We process data to provide the app, verify purchases, deliver online features you actively use, maintain security, resolve errors and answer voluntary requests. Depending on the operation, the legal bases are Article 6(1)(b), (f) or, where expressly requested, (a) GDPR.

4. Recipients and service providers

We use Cloudflare for backend, database, media and security, and Apple and Google for store and purchase services. xAI (Grok) is used only when you use the optional AI study help. The app does not use Firebase sign-in.

5. International transfers

Some providers may process data outside the EU or EEA. Where no adequacy decision applies, transfers rely on appropriate safeguards, in particular EU Standard Contractual Clauses, or on applicable statutory exceptions.

6. Advertising and tracking

The app contains no third-party advertising. We do not create advertising profiles, sell personal data or use advertising tracking.

7. Retention and security

Local data remains on the device until it is removed in the app or through system settings. Server data is retained only for as long as required for the respective function, security and statutory evidence. Transfers are encrypted.

8. Delete data and account

Local data can be removed in the app or through the device’s system settings. Where an account or cloud data exists, deletion can be requested in the app or by emailing apps@bitbeans.de. Store purchases are managed separately by Apple or Google.

9. Your rights

Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction, portability and objection. Consent can be withdrawn for the future. You may also lodge a complaint with a data-protection authority; the LfDI Baden-Württemberg is the authority responsible for our registered office.