Privacy Policy

Last updated: [DATE]

Doch! (“we”, “us”, “our”) provides the Doch! mobile application (the “App”) to help learners prepare for Goethe-Institut German language exams. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using the App you agree to the collection and use of information as described here. If you do not agree, please do not use the App.

1. Information We Collect

1.1 Account Data

When you create an account, we collect the information needed to authenticate you and operate your account, including:

• Email address
• Password (stored securely by our authentication provider; we never see or store your password in plain text)
• Any profile details you choose to add (e.g. display name)

Account authentication is handled by [Amazon Cognito / AWS Amplify], a third-party identity provider. Their handling of your credentials is governed by [their own privacy terms — link if available].

1.2 Content You Submit for AI-Generated Feedback

The App's writing-practice feature lets you submit text you write (e.g. practice essays or letters) to receive feedback on your German. To generate that feedback, the text you submit is sent to a third-party AI provider, [AI PROVIDER NAME], for processing.

• We send only the submitted text (and any minimal context needed to score it, such as the exercise prompt) — not your account credentials.
• [AI PROVIDER NAME] processes this text under [its own data-handling terms — link if available] and [does / does not — confirm] use it to train their models. (Confirm the actual terms of your AI provider contract and update this sentence accordingly before publishing.)
• We retain your submitted texts and the feedback received in order to show you your practice history within the App. You can request deletion at any time (see Section 5).

1.3 Crash Reporting

To find and fix defects, the App uses Sentry, a crash- and error-reporting service operated by Functional Software, Inc. When the App crashes, hits an unexpected error, or a request to our servers fails, a report is sent to Sentry. A report may contain:

• Technical details of the failure: the error type and message, a stack trace, and the names of the screens and actions leading up to it
• Device and app information: device model, operating system and version, app version and build, language, screen size, free memory and storage, battery and connectivity state
• Network diagnostics for requests to our servers: the request path, method, status code, duration, and payload sizes — never the request or response contents, and never your sign-in token
• A random installation identifier, so that we can tell how many devices a problem affects, and which releases; this identifier is not derived from your account or your device's hardware identifiers
• Whether the App was in use, for session and stability statistics

We have configured Sentry not to collect personal data: reports carry no email address, display name, or IP address beyond what any internet connection transmits transiently, and they do not include the texts you write in the App. Sentry processes reports on our behalf under Sentry's privacy policy and data processing terms, and we keep reports for [90 days — confirm the retention configured in the Sentry project] before they are deleted automatically.

Analytics. As of this writing, the App collects no product-usage analytics (e.g. which features are used). If we add analytics in the future, we will update this policy before that collection begins and name the service used here.

1.4 Automatically Collected Technical Data

Standard technical data your device sends as part of normal app operation (e.g. IP address for network requests, device/OS type for compatibility) may be logged transiently by our backend infrastructure for security and debugging purposes, and is not linked to marketing or advertising profiles.

2. How We Use Your Information

We use the information described above to:

• Create and maintain your account
• Provide the core App functionality, including generating AI feedback on submitted writing
• Maintain your practice history within the App
• Secure the App and investigate misuse
• Communicate with you about your account (e.g. password resets)

We do not sell your personal information, and we do not use your submitted writing content for advertising purposes.

3. Third-Party Service Providers

We share data only with the service providers necessary to operate the App:

Each provider is contractually permitted to use this data only to provide services to us, not for their own independent purposes, except as they separately disclose in their own terms.

4. Data Retention

We retain your account data and submitted writing/feedback history for as long as your account is active. If you delete your account, we will delete or anonymize this data within [X days], except where retention is required by law.

5. Your Rights and Choices

Depending on where you live, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and associated data
• Export a copy of your data

To exercise any of these rights, contact us at [CONTACT EMAIL].

6. Children's Privacy

The App is not directed at children under [13/16 — confirm applicable age per your target markets], and we do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, contact us at [CONTACT EMAIL] and we will delete it.

7. Data Security

We use reasonable technical and organizational measures to protect your information, including encryption of data in transit. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. International Data Transfers

Your information may be processed in countries other than your own, including [PROVIDER HOSTING REGIONS — e.g. the United States], which may have different data protection laws than your country of residence.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you in the App or by other reasonable means before the changes take effect. The “Last updated” date above reflects the most recent revision.

10. Contact Us

Questions about this Privacy Policy? Contact us at:

[CONTACT EMAIL]
[COMPANY / LEGAL ENTITY NAME, ADDRESS — if applicable]