Privacy Policy

This policy explains what data Monsty: Let's Practice Math handles, what leaves your device, who receives it, and why.

1. Scope

This policy applies to the mobile app “Monsty: Let's Practice Math” for iOS and Android.

2. Who is responsible

The controller responsible for processing personal data in connection with this app is:

Name: Patricia Sauer
Address: Tannenweg 3, D-16540 Hohen Neuendorf
Email: patricia@patricia-sauer.com
Website: www.patricia-sauer.com
Phone: +49 171 170 94 26

“Controller” means the person who decides how and why personal data is processed.

3. What stays on your device

Player profiles are stored only on your device: the name you enter, the chosen monster, settings, practice results and achievements. They are never sent to us, and we cannot see them. You can use a nickname instead of a real name.

4. What leaves your device

One thing leaves your device, and only on Android.

4.1 App integrity check (Android only)

On Android, released versions of the app ask Google’s Play Integrity service to confirm that the installed copy is unmodified and came from Google Play. The app sends the resulting token, which is issued and signed by Google, together with a random one-time number and the app’s package name to our own server, which verifies it with Google. Our server receives the package name and version, and Google’s verdicts on whether the app and the device are genuine and whether the installed copy is licensed. It receives no name, email address, account name or device identifier. These verdicts are used only to answer the app’s request and are not stored. The server records only that a check took place, for which app and version, and whether it passed. The IP address the request was sent from is used to deliver the response and is not recorded. The server runs in the European Union.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protecting the app against tampered copies). This check does not run on iOS.

4.2 Apple and Google

Apple and Google process data as independent controllers under their own privacy policies when you download and use apps from their stores, over which we have no influence.

5. What the app does not do

The app is made for children. It contains no advertising, no in-app purchases, no analytics or tracking SDK, and no crash reporting. It does not use advertising identifiers, does not track anyone across apps or websites, does not require an account, and never asks for a name, email address or any other personal information.

6. How long data is kept

A player's profile and all their results stay on your device until you delete the player in the app or uninstall the app. The technical log of the integrity check described in 4.1 contains no data about you and is deleted automatically after 30 days.

7. Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interest (Art. 15–21 GDPR).

In practice there is nothing for us to look up: we do not store any data about you individually, and the integrity check does not identify you. Under Art. 11 GDPR we are not required to collect extra data merely to make identification possible.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority responsible for our place of business in Brandenburg, Germany.

8. Changes to this policy

This policy will be updated if the app changes in a way that affects it. The date below shows when it last changed.

Last updated: October 2026