BeatboxingBeatboxingHow we handle personal data on beatboxing.app and in the Beatboxing app for iOS and Android.
This privacy policy explains which personal data we process when you visit beatboxing.app and when you use the Beatboxing app for iOS and Android, why we do it, and which rights you have. We collect as little as possible: you don't need an account, and your workouts stay on your phone.
The controller under the EU General Data Protection Regulation (GDPR) is:
Peter Bogner & Christoph Märkl GdbR
Prüfeninger Schlossstraße 30b
93051 Regensburg, Germany
Email: mail@appwickler.com
For any question about data protection, just write to this address.
The website runs on our own servers in a data center of Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany), which acts as our processor. Every time a page or file is requested, the web server automatically records technical data: your IP address, date and time, the requested address, the referring page, the status code, the amount of data transferred, and your browser and operating system (user agent). The server also uses your browser's language setting to send you to the matching language version.
We need this data to deliver the website, keep it stable and secure, and investigate errors and attacks. The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Log data is deleted as soon as it is no longer needed for these purposes.
To understand how the website is used and to improve it, we use Matomo, an open-source analytics tool that we run on our own server (matomo.caprover.appwickler.com). No data goes to third parties. Matomo is configured to work without cookies. It records the pages you view, the time of your visit, the referring website, technical details of your device (browser, operating system, screen resolution, language), your IP address and clicks on the download buttons for the App Store and Google Play.
The legal basis is our legitimate interest in analyzing and improving our website (Art. 6(1)(f) GDPR). You can object at any time, for example by blocking JavaScript from matomo.caprover.appwickler.com in your browser or by writing to us.
The home page shows a preview image of our gameplay video. The image is stored on our own server, so nothing is loaded from YouTube while you browse. Only when you click play is the video embedded from YouTube in privacy-enhanced mode (youtube-nocookie.com). From that moment, your browser connects to servers of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), which receives at least your IP address and information about your browser and may store information on your device. Google may also transfer data to the USA.
The legal basis is your consent, which you give by clicking play (Art. 6(1)(a) GDPR). More information is available in Google's privacy policy.
All fonts and images are served from our own server. The website does not load any content from font services or other content delivery networks.
Links to the App Store, Google Play and Instagram are plain links. Data is only transferred to Apple, Google or Meta when you click one of them and leave our website. Their own privacy policies apply from then on.
The app's home screen shows small promotional cards that it loads from this website. These requests are recorded in the server log files described above. The cards contain no analytics.
You can use Beatboxing without creating an account. Your workout results, progress, training plans, achievements and settings are stored only locally on your device. They are deleted when you uninstall the app.
The app uses your phone's front camera to recognize your punches. The camera images are analyzed directly on your device using Google ML Kit pose detection; they are not uploaded to us or to Google. According to Google, ML Kit may send anonymous usage and performance metrics (for example device model and app version) to Google. During a workout, the app can save a few photos taken at the moment of a punch so that you can look at them later in your progress. These photos are also stored only on your device. You can revoke camera access at any time in your device settings, but the workouts need it.
Processing is necessary to provide the app's core function (Art. 6(1)(b) GDPR).
To find out which features are used and where players get stuck, the app sends usage events to our own Matomo server (matomo.caprover.appwickler.com): screens opened, actions such as starting or finishing a workout or viewing the Pro offer, the app version and the operating system. To recognize repeat use, the app creates a random installation ID that is not linked to your name, email address or advertising ID. Your IP address is transmitted with each request. No data goes to third parties.
The legal basis is our legitimate interest in improving the app (Art. 6(1)(f) GDPR). If you object, write to us; uninstalling the app also deletes the installation ID.
When the app crashes or runs into an error, it sends a technical error report to our own error tracking server (Bugsink, compatible with Sentry, at bugsink.caprover.appwickler.com). The report contains the error message and stack trace, device model, operating system and app version, and the time of the error. Your IP address is transmitted in the process. We use these reports only to fix errors, on the basis of our legitimate interest in a stable app (Art. 6(1)(f) GDPR), and delete them once they are no longer needed for this purpose.
The free version of the app shows ads delivered by Google AdMob, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). To deliver ads, measure them and, where permitted, personalize them, Google processes your device's advertising ID (IDFA on iOS, Advertising ID on Android), your IP address, information about your device and app, and your interactions with ads. Google may transfer data to the USA. Pro users don't see ads, and the app does not request ads for them.
Where the law requires your consent for this processing, the legal basis is your consent (Art. 6(1)(a) GDPR); otherwise it is our legitimate interest in financing the free version of the app (Art. 6(1)(f) GDPR). You can reset your advertising ID or limit personalized advertising in your device settings at any time (iOS: Settings → Privacy & Security → Tracking / Apple Advertising; Android: Settings → Google → Ads). More information is available in Google's privacy policy and at How Google uses information from sites or apps that use its services.
Purchases of Beatboxing Pro are processed entirely by Apple (App Store) or Google (Google Play); we never receive your payment details. To verify purchases and unlock Pro on your devices, we use RevenueCat, a service of RevenueCat, Inc. (USA). RevenueCat processes an anonymous user ID created by the app, your purchase and subscription history from the store, and technical information about your device and app. The legal basis is the performance of the purchase contract (Art. 6(1)(b) GDPR). More information is available in RevenueCat's privacy policy.
Training reminders are scheduled as local notifications on your device; we don't use a push service for this. If you export a training plan to your calendar, the app asks for calendar access and writes the workouts as events into the calendar you choose. The app only reads your list of calendars so that you can choose one. Your calendar provider may sync these events according to its own terms. Both features are optional and can be disabled at any time in the app or in your device settings.
When you share a workout result, the app opens your phone's share menu, and you decide where the content goes. If you rate the app, the rating dialog is provided by Apple or Google. If you send us feedback from the app, your email app opens; we use your message and email address only to answer you.
We only share personal data with the service providers named in this policy, who process it on our behalf or under their own responsibility. Google and RevenueCat may process data in the USA. Such transfers are based on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework where the recipient is certified under it, and otherwise on the EU Standard Contractual Clauses.
We store personal data only as long as it is needed for the purpose for which it was collected, or as long as statutory retention periods require. Data stored on your device remains under your control and is removed when you uninstall the app.
You have the right to access your personal data (Art. 15 GDPR), to have it corrected (Art. 16) or deleted (Art. 17), to restrict its processing (Art. 18), to data portability (Art. 20) and to withdraw any consent you have given with effect for the future (Art. 7(3)).
Right to object: Where we process data on the basis of our legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).
To exercise your rights, write to mail@appwickler.com. Because the app works without an account, we may need details from you (for example the time of a crash) to find data relating to you.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.
We update this privacy policy when our website, our app or the law changes. The current version is always available on this page.