Privacy Policy

Last updated: November 25, 2025 Valid for: Tellorino App (Mobile App) and associated Backend API § 1 Controller Controller of the App/Website: Centraltec GmbH Blütenstraße 15 80799 Munich Email: andre.scheffer@centraltec.de § 2 Purposes and Legal Bases of Processing We process personal data for the following purposes: 2.1 Provision of the App and Story Functions - Creation and management of user accounts - Generation, storage and management of stories, story sessions and decisions Legal basis: Art. 6 para. 1 lit. b GDPR (Contract performance) 2.2 Authentication and Login - Verification of access credentials, protection against unauthorized access Legal basis: Art. 6 para. 1 lit. b GDPR (Contract performance) For social logins additionally: Art. 6 para. 1 lit. a GDPR (Consent to transmission to the respective provider) 2.3 Use of Google Gemini API for Story Generation - Generation of stories, continuations, characters and decision options Legal basis: Art. 6 para. 1 lit. b GDPR (Contract performance) and Art. 6 para. 1 lit. a GDPR (Consent to transmission to Google/Gemini) 2.4 In-App Purchases (Premium Features) - Management of subscription status (e.g. free/premium) - Verification of purchase status via Google Play Legal basis: Art. 6 para. 1 lit. b GDPR (Contract performance) 2.5 Feedback and Support - Evaluation of voluntary feedback (e.g. via Google Forms) Legal basis: Art. 6 para. 1 lit. a GDPR (Consent) 2.6 Security, Error Analysis and Abuse Prevention - Logging of technical processes, error and security logs Legal basis: Art. 6 para. 1 lit. f GDPR (Legitimate interest in secure operation and error analysis) § 3 Processed Data We process the following categories of personal data: - Contact data: Email address, optional full name - Authentication data: Password (hashed), for social login: email address and user ID of the provider - Profile data: Subscription status, child's age, language settings, font size settings - Story data: Titles, contents, categories, topics, decisions, characters, reading statistics - Progress data: Number of completed stories, pages read, points - Feedback data: Voluntarily provided email address and feedback text § 4 Third Parties and Data Transfers to Third Countries We transfer personal data to the following third parties: - Hetzner Online GmbH (Hosting, Germany/EU) – Processing of all data stored in the backend - Google LLC (Gemini API, USA) – Transfer of story and preference data for story generation. Basis: EU-US Data Privacy Framework. Further information: Google Privacy Policy - Google Ireland Limited / Google LLC (OAuth, In-App Purchases, Google Forms) – Data transfer to USA possible - Apple Inc. (Apple Sign-In, USA) § 5 Storage Duration Personal data is stored: - User account and profile data: For the duration of app usage. Upon account deletion, all associated data is deleted. - Story data: As long as the account exists or until you delete individual stories or remove the account. - Subscription status: As long as a subscription is active and for a reasonable period thereafter, as far as required for documentation obligations. - Feedback data: Until processing and evaluation, thereafter only as long as a legitimate interest exists or until you request deletion. § 6 Your Rights You have the following rights: - Right of access (Art. 15 GDPR): You can request information about your processed personal data. - Right to rectification (Art. 16 GDPR): You can request the rectification of inaccurate or completion of incomplete data. - Right to erasure (Art. 17 GDPR): You can request the erasure of your personal data. You can delete your account at any time via the app function "Delete account" or by email. - Right to restriction of processing (Art. 18 GDPR): You can request the restriction of processing of your data. - Right to data portability (Art. 20 GDPR): You can receive your data in a structured, commonly used and machine-readable format. - Right to withdraw consent (Art. 7 para. 3 GDPR): You can withdraw a given consent at any time. - Right to object (Art. 21 GDPR): You can object to the processing of your data for reasons arising from your particular situation. - Right to lodge a complaint (Art. 77 GDPR): You can lodge a complaint with a supervisory authority. Contact: andre.scheffer@centraltec.de Last updated: November 25, 2025