Privacy – Krautbytes

1. Controller

Julian Röckl
Brieger Straße 14
80997 Munich
Germany

Privacy enquiries: contact@krautbytes.de

2. Visiting krautbytes.de

The website is delivered through Firebase Hosting. When it is opened, technically necessary connection data is processed, particularly the IP address, time, requested address, and browser and device information.

Purpose: Secure and reliable delivery of the website and detection of abuse and errors.
Legal basis: Article 6(1)(f) GDPR. Our legitimate interests are the secure and reliable operation of the service.
Recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as the provider of Firebase.
Retention: According to the provider, Firebase Hosting retains IP data for a few months.

This website uses no analytics, advertising or profiling services, externally hosted fonts, or contact form. It sets no analytics or marketing cookies. When you use an email link, your chosen email provider processes the message under its own terms.

3. Skillovo: core principle

Skillovo works locally and does not require registration. Skills, progress, and settings leave your device only when you explicitly use an optional cloud or sharing feature.

Necessary connection and security data is nevertheless processed when the web app is opened and when Firebase interfaces are protected. Skillovo uses no analytics, advertising, tracking, or profiling services.

4. Local processing in Skillovo

Skill definitions and categories, criteria and steps, notes, levels and targets, practice tasks and repetition counts, activities, and language, display, and notification settings are stored locally.

Purpose: Providing the app, storing learning progress, and displaying personal recommendations and reminders.
Legal basis: Article 6(1)(b) GDPR where processing is necessary for the app features you request.
Retention: Until you delete data in Settings, clear the app data, or remove the app from your device.

Device, browser, or operating-system backups may retain local copies under their own rules. Skillovo cannot access those backups.

In the LLM-assisted workflow, the topic, prompt, and pasted JSON response are processed exclusively on the device. Skillovo does not connect to an AI provider. If you independently transmit content to an external provider, that provider's privacy rules apply.

5. Hosting and technical security

When the web app is opened, Firebase Hosting processes the IP address, time, requested URL, and browser and device information. Depending on the platform, Firebase App Check processes technical integrity attestations and short-lived security tokens.

Services: Firebase Hosting and App Check; depending on the platform, reCAPTCHA Enterprise, Play Integrity and, for appropriately prepared iOS releases, App Attest or DeviceCheck.
Purpose: Delivery, stability, abuse prevention, and protection of Authentication and Firestore from unauthorized clients.
Legal basis: Article 6(1)(f) GDPR. The legitimate interests are secure, reliable operation and protection of user data.
Retention: Hosting IP data is retained for a few months according to the provider. App Check does not retain the attestation material itself; Skillovo security tokens are valid for about one hour.

6. Accounts and sign-in

A durable account is created only when you enable cloud synchronization and connect Google or, where available, Apple. Skillovo may first create an anonymous Firebase session when a share code is created or loaded.

Data: Firebase user ID, sign-in state, provider identifier, where available name, email address and profile image, authentication and session tokens, IP address, and user agent.
Purpose: Secure sign-in, assignment of private cloud data, and protection against access by other accounts.
Legal basis: Article 6(1)(b) GDPR to provide the account, synchronization, or sharing feature you explicitly request.
Retention: Until the Skillovo account link is deleted. Firebase states that logged authentication IPs are retained for a few weeks and other deleted Auth data is removed from live and backup systems within up to 180 days.

Google and Apple also process data under their own responsibility when you use the selected sign-in method. Skillovo never receives your Google or Apple password.

7. Optional cloud synchronization

Synchronization is off by default. Once enabled, Skillovo processes skills including your text, notes, criteria, steps, levels, targets, practice and time information, activities, and technical synchronization metadata.

Purpose: Private backup, restoration, and cross-device synchronization.
Legal basis: Article 6(1)(b) GDPR to provide the cloud backup you request.
Location: Cloud Firestore at the permanently selected European multi-region location eur3.
Retention: Until you use “Delete cloud data”. Disabling synchronization only stops further syncing and does not delete an existing cloud copy.

Instructions and an external request route are available under Delete your account and cloud data .

After your explicit action, Skillovo creates a random twelve-character share code. Anyone who knows the code can load the shared skill definition while it is valid. Public listing is technically blocked.

The skill name, description, categories, levels, criteria, reusable practice definitions, and creation and expiry times are shared. Progress, notes, activities, targets, account data, creator identity, and internal source IDs are not shared.

Purpose: Time-limited sharing of a reusable skill definition with people you choose.
Legal basis: Article 6(1)(b) GDPR to perform the sharing feature you request.
Retention: Access ends automatically after 30 days. Expired documents are no longer delivered and are deleted during operational cleanup no later than 90 days after expiry.

9. Local notifications

Reminders are off by default. Once enabled, only the device processes the chosen weekday, time, and reminder interval. Skillovo uses no push or Firebase messaging.

The legal basis is Article 6(1)(a) GDPR based on your voluntary activation and operating-system permission. You can withdraw consent at any time by disabling reminders. The settings remain until they are disabled, the app data is cleared, or the app is uninstalled.

10. Recipients and international transfers

Google Ireland Limited generally provides Firebase as a processor. Google LLC and published subprocessors may participate in technical service delivery.

Firestore content is stored at the eur3 location in Europe.
According to the provider, Firebase Authentication is operated exclusively from data centers in the United States.
Firebase Hosting and App Check use global infrastructure.

Where data is processed outside the European Economic Area, Google relies as applicable on adequacy decisions, including the EU-US Data Privacy Framework, and the European Commission's Standard Contractual Clauses. Firebase transfers data over HTTPS and also encrypts, among other services, Firestore, Authentication, and App Check data at rest.

11. Provision of data and automated decision-making

Local skill data is required for the core features you request. Accounts, synchronization, sharing, and notifications are voluntary. Without the associated data, the local core remains available and only the optional feature is unavailable.

Skillovo makes no solely automated decisions with legal or similarly significant effects and creates no profile for advertising, analytics, or scoring.

12. Your privacy rights

Subject to the GDPR, you have rights including access, rectification, erasure, restriction of processing, data portability, and, where applicable, objection. You may withdraw consent at any time with effect for the future.

To exercise your rights, email contact@krautbytes.de. We may request reasonable proof of identity to securely match your request.

Under Article 77 GDPR, you may lodge a complaint with a data protection supervisory authority. The authority particularly responsible for the controller is the Bavarian State Office for Data Protection Supervision :

Promenade 18
91522 Ansbach
Germany

13. Changes and further information

This notice is updated when features, providers, or the legal situation change. The current date appears above. We provide appropriate notice of material changes.

Privacy notice