FenniKids Privacy Policy

Last updated: June 2026

FenniKids (the 'App') helps children practice German at home. This policy describes the personal data processed when using the parent web dashboard. Protecting children's data is our top priority; we comply with the EU GDPR.

1. Data we collect

Parent account: the identifier (subject) and email address from Google or Apple sign-in.
Child profile: a display name chosen by the parent (no real name required) and grade.
Learning records (text only): exercise item id, the child's typed/selected text answers, correctness, hint use, week, and timestamp.

2. Data we do NOT collect

Voice recordings/audio: recordings from speaking/reading tasks stay 100% on the child's device and are never sent to the server.
Location, advertising identifiers, device identifiers (e.g. IDFA).
Tracking/analytics data (no ad SDKs or tracking tools).

★ A child's pronunciation/recordings are reviewed by the parent directly on the device. Only text answers appear on the web.

3. Purpose

So parents can review the child's records/progress on the web dashboard and get learning material for mistakes (PDF).
Syncing learning records across devices.

4. Legal basis

Children's data is processed based on the parent's explicit consent (GDPR Art. 6(1)(a) and Art. 8). Consent can be withdrawn anytime in the app settings; syncing then stops.

5. Storage location

All data is stored in Cloudflare data centers in the European Union (D1/R2 jurisdiction=EU). No data is transferred outside the EU.

6. Retention and deletion

Learning records are automatically deleted about 1 year(s) (365 days) after the last activity. Parents can permanently delete a child's records or the entire account anytime from the dashboard.

7. Third parties / processors

Cloudflare, Inc. — data storage/server hosting (Data Processing Agreement, DPA).
Google / Apple — used only for parent sign-in (authentication). Learning records are not shared.
No selling or sharing with any other third party.

8. Protection of children's data

The App is intended for children under 16; all processing occurs with parental consent and supervision. We do not collect a child's real name, contact details, or voice.

9. Parent (data subject) rights

Access: view stored records directly in the dashboard.
Deletion: delete a child's records or the account/all data permanently (GDPR Art. 17).
Withdrawal: withdraw sync consent anytime in app settings.
Other GDPR rights (rectification, restriction, objection) via the contact below.

10. Contact

Privacy inquiries/rights: privacy@dazgrundschule.org