Privacy Policy

App Name: GetBereit — German Exam Simulator Bundle ID (iOS) / Application ID (Android): com.oumari.getbereit

GetBereit is a single app that covers both the Austrian ÖIF integration exams and the ÖSD exams; you choose which exam to prepare for from within the app.

Last Updated: July 5, 2026 Contact: mooumari2@gmail.com

1. Overview

GetBereit is a German language exam preparation application designed to help users study for Austrian German exams — the ÖIF integration exams and the ÖSD exams (levels A1–C1). Both exams are covered within a single app; you select which one to study from inside the app. This Privacy Policy explains what information is collected, how it is used, and your rights regarding that information. By using GetBereit, you agree to the practices described in this policy.

We follow a data-minimisation principle: we collect and keep as little as possible, and your learning content stays on your device wherever it can.

2. Information We Collect

2.1 Data Stored Locally on Your Device

The large majority of app data is stored exclusively on your device and is never transmitted to or stored on our servers. This includes:

Learning progress — completed exercise IDs, session history (exercise scores, accuracy, timestamps), and daily streak count
Writing tasks and their feedback — the texts you write for Schreiben (writing) tasks and the AI feedback you receive are kept only on your device (see Section 2.3). We do not store them
Selected level — your chosen exam level (A1–C1)
Spaced repetition state — flashcard review schedules, buckets, and due dates for Values & Orientation (Werte & Orientierung) cards
App preferences — theme mode (light/dark/system), language preference (German/English/Arabic), and onboarding completion status
Exercise cache — a local copy of exercises fetched from our database, cached for up to 7 days to improve performance and enable offline use

This data is held in SharedPreferences on your device. It is not backed up to any cloud service by us and is deleted when you uninstall the app or clear app data.

2.2 Anonymous Sign-In

To use server-backed features (currently the AI writing feedback described in Section 2.3), the app signs you in anonymously using Firebase Anonymous Authentication. This happens silently in the background — there is no registration, no login screen, and no name, email, or password.

Anonymous sign-in creates a random user ID (UID) that lets our server recognise repeat requests from the same installation (for example, to count how many free gradings remain). This UID is a pseudonymous identifier: it is not linked to your real-world identity and is not associated with your name, email, or any account credentials. If you uninstall the app or clear its data, the link to that anonymous identity is lost.

The only data we store on our server against this anonymous UID is usage-limit bookkeeping — namely how many writing gradings you have used (to enforce the free allowance and the Pro daily limit) and whether you hold an active Pro subscription. We do not store your name, email, learning progress, or the text of anything you write.

2.3 AI-Assisted Writing Feedback

When you submit a text for a Schreiben (writing) task, the app sends the following to our secure backend (a Google Cloud Function) so it can be evaluated:

The text you wrote
The task prompt and scoring rubric for that exercise
Your chosen feedback language (German, English, or Arabic)

Our backend forwards your text and the task details to Google's Gemini AI model (via the Gemini API), which generates the written feedback (a score, criteria assessment, corrections, and tips). The feedback is returned to your device and shown to you.

We do not store your writing. Your text is held in memory only for the few seconds it takes to grade it and is then discarded. It is never written to our database and never written to our logs. The text and its feedback are saved only on your device (Section 2.1). If you uninstall the app, they are gone.

Google processes the text solely to produce the feedback for that request. Google's handling of data sent to the Gemini API is governed by Google's API terms and privacy policy (see Section 4).

Please avoid including personal details (real names, addresses, ID numbers, etc.) in practice writing texts — the exam tasks never require them, and this keeps your submissions free of personal data.

2.4 Data Collected Automatically

When you use the app, the following data is collected automatically through third-party services (described in Section 4):

Usage Analytics (Firebase Analytics)

In-app events such as: exercise started, exercise completed, exercise reviewed, Values & Orientation quiz started/completed, flashcard session started, writing task submitted, level changed, and onboarding completed
Event parameters such as exercise type, exam type, level, skill, score, total questions, and pass/fail status
Device information: device model, operating system version, app version, language, and country/region
Session information: session duration and frequency of use
A randomly assigned analytics identifier (not linked to your name or email)

App Integrity (Firebase App Check)

To prevent abuse of our backend, the app produces a device-integrity token using Apple's App Attest (iOS) or Google's Play Integrity (Android). This token confirms the request comes from a genuine, untampered copy of the app. It does not identify you and contains no personal information.

No analytics event or integrity token contains your exercise answers, your writing, or any personal content.

2.5 Data Processed by Third Parties

Subscription Data (RevenueCat) When you subscribe to GetBereit Pro, the following data is processed by RevenueCat to validate and deliver your subscription:

Apple App Store or Google Play Store transaction receipts and purchase history
Your anonymous app user ID (the same pseudonymous UID from Section 2.2 — not linked to your name or email)
Device type, operating system version, and app version
Subscription status, plan type, and entitlements

RevenueCat does not have access to your name, email address, or payment card details — those remain with Apple or Google. No learning data (exercise progress, scores, flashcard state) or writing content is shared with RevenueCat.

2.6 Data We Do NOT Collect

GetBereit does not collect or process any of the following:

Your name, email address, phone number, or account credentials (there is no registered account — only an anonymous, pseudonymous ID as described in Section 2.2)
Precise location data (GPS or Wi-Fi location). Firebase Analytics derives an approximate country/region from your IP address to produce aggregate usage statistics; Google does not retain your IP address for Analytics, and we never receive or store your precise location
Contacts, photos, camera, microphone, or other device sensor data
Advertising identifiers for ad targeting purposes
Health, fitness, or biometric data
A stored copy of anything you write in the app

3. How We Use This Information

| Purpose | Data Used | |---------|-----------| | Provide the core learning experience | Exercise content fetched from Cloud Firestore (read-only) | | Track learning progress locally | Session records, completed exercise IDs, streak (stored on device) | | Enable offline learning | Cached exercises and Values & Orientation questions (stored on device) | | Personalise the experience | Selected level, language, and theme preferences (stored on device) | | Grade your writing and give feedback | The text you submit + task rubric, processed transiently by Google Gemini; feedback stored on your device only | | Enforce fair-use limits and subscription access | Anonymous UID + grading counts + Pro status (stored on our server) | | Protect the backend from abuse | App Check device-integrity token | | Understand which features are used | Usage events (Analytics) | | Process and validate subscriptions | Transaction receipts (RevenueCat) | | Play audio exercises | Audio files streamed from Firebase Cloud Storage |

We do not sell, rent, or share your data with advertisers or any third party for marketing or commercial purposes. We do not display advertisements in the app. We do not use your writing to train any AI model of our own.

4. Third-Party Services

GetBereit integrates the following third-party services. Each has its own privacy policy linked below.

Firebase (Google LLC)

The app uses the following Firebase products:

Firebase Authentication (Anonymous) — creates a silent, anonymous user ID so the backend can recognise repeat requests and enforce usage limits. No name, email, or password is involved. Privacy policy: https://firebase.google.com/support/privacy
Cloud Functions — our secure backend that receives a writing submission, enforces usage limits, calls the AI grader, and returns the feedback. It does not store your text. Privacy policy: https://firebase.google.com/support/privacy
Cloud Firestore — stores exercise content and Values & Orientation questions (which the app reads to display exercises), and stores the anonymous usage-limit bookkeeping described in Section 2.2. It does not store your writing or your learning progress. Privacy policy: https://firebase.google.com/support/privacy
Firebase Cloud Storage — hosts audio files for listening exercises. Audio is streamed to your device on demand. No personal data is transmitted. Privacy policy: https://firebase.google.com/support/privacy
Firebase App Check — produces a device-integrity token (via App Attest / Play Integrity) to confirm requests come from the genuine app. Contains no personal data. Privacy policy: https://firebase.google.com/support/privacy
Firebase Analytics — collects anonymised usage events to help us understand how the app is used and which features are most valuable. Privacy policy: https://policies.google.com/privacy Opt-out: You can limit analytics collection through your device's advertising and tracking settings or by contacting us.

Firebase services are operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Data may be processed in the United States and other countries where Google operates infrastructure.

Google Gemini API (Google LLC)

Used to evaluate your writing and generate feedback. When you submit a writing task, the text and the task rubric are sent to Google's Gemini model, which returns the assessment. Google processes this data to fulfil the request. We do not store the text; the feedback is stored only on your device.

Gemini API terms: https://ai.google.dev/gemini-api/terms Google privacy policy: https://policies.google.com/privacy

RevenueCat

Used to manage in-app subscriptions (GetBereit Pro). RevenueCat processes transaction receipts and subscription status to determine your entitlements. It does not receive your name, email, payment details, or any learning or writing data from the app.

Google Fonts

The app uses the Google Fonts package to render the Plus Jakarta Sans typeface. Font files are bundled with the app and loaded locally; no network requests are made to Google Fonts servers at runtime.

Repository: https://pub.dev/packages/google_fonts

5. In-App Subscriptions

GetBereit offers an optional auto-renewable subscription ("GetBereit Pro") that unlocks unlimited exercises across all levels, unlimited AI writing feedback (subject to a fair-use daily limit), and additional content. Non-subscribers receive a small number of free AI writing gradings.

Payment is processed entirely by Apple (App Store) or Google (Play Store). We never receive or store your payment card details, billing address, or Apple ID/Google account credentials.
Subscription management — you can view, change, or cancel your subscription at any time through your device's App Store or Play Store subscription settings.
Restore purchases — you can restore an active subscription on a new device or after reinstalling via the "Restore purchases" option in the app's settings or paywall.
Auto-renewal — your subscription automatically renews at the end of each billing period unless you cancel at least 24 hours before the renewal date.
Refunds — refund requests must be directed to Apple or Google, as they process all payments.

For details on subscription terms, see:

Apple: https://www.apple.com/legal/internet-services/itunes/dev/stdeula/
Google: https://play.google.com/about/play-terms/

6. Data Retention

Local app data (progress, preferences, flashcard state, your writing texts and their feedback) is retained on your device until you uninstall the app or clear app data through your device settings.
Writing submissions are not retained by us. Your text is processed to generate feedback and then discarded within seconds; it is never written to our database or logs.
Anonymous usage-limit data (your anonymous UID, grading counts, and Pro status) is retained on our server while the app is in use, so that free allowances and subscription access can be enforced. It contains no personal identifiers.
Exercise cache expires automatically after 7 days and is refreshed from Cloud Firestore.
Analytics data is retained by Google for up to 14 months, in accordance with Firebase Analytics' default retention policy.
Subscription data is retained by RevenueCat for as long as your subscription is active, plus a reasonable period afterwards for record-keeping and dispute resolution, in accordance with RevenueCat's data retention policy.

7. Children's Privacy

GetBereit is not directed at children under the age of 13 (or the applicable age of digital consent in your country). We do not knowingly collect personal information from children. If you believe a child has provided information through the app, please contact us at mooumari2@gmail.com and we will take steps to delete it.

8. Your Rights

Depending on your location, you may have the following rights:

Access — request a description of the data collected about you
Deletion — because we do not store your writing or learning content, the most complete way to delete your on-device data is to uninstall the app or clear app data. To request deletion of your analytics data, or of the anonymous usage-limit record tied to your app installation, contact us
Opt-out of analytics — disable Firebase Analytics through your device's advertising and tracking settings (iOS: Settings > Privacy & Security > Tracking; Android: Settings > Google > Ads)
Data portability — your local app data (progress, preferences, flashcard state, writing) is stored on your device and can be accessed by you at any time

To exercise any of these rights, contact us at mooumari2@gmail.com.

EU/EEA users (GDPR): The legal basis for processing analytics data is our legitimate interest in improving app quality and user experience (Article 6(1)(f) GDPR). The legal basis for processing your writing submission (transiently, to generate feedback) and for the anonymous usage-limit bookkeeping is the performance of a contract — delivering the feature you requested (Article 6(1)(b) GDPR). The legal basis for processing subscription data is likewise the performance of a contract (Article 6(1)(b) GDPR). You have the right to object to processing based on legitimate interest at any time.

California users (CCPA): We do not sell personal information. You have the right to know what data is collected and to request its deletion.

Austrian/German users (DSG/DSGVO): This app is designed for users preparing for Austrian ÖIF and ÖSD exams. The same GDPR rights and protections described above apply. Our contact for data protection inquiries is mooumari2@gmail.com.

9. Data Security

All data stored locally on your device is protected by your device's built-in security mechanisms (filesystem encryption, app sandboxing). Data transmitted between the app and our services (Firestore, Cloud Storage, Cloud Functions, Analytics) is encrypted in transit using TLS. Writing submissions sent for grading are transmitted over TLS, processed transiently, and not stored. Access to our backend is restricted by Firebase App Check to genuine copies of the app. Subscription data transmitted to RevenueCat is likewise encrypted in transit using TLS.

10. International Data Transfers

If you are located outside the United States, please be aware that data processed by Firebase (Google), the Google Gemini API, and RevenueCat may be transferred to and processed in the United States or other countries. These transfers are governed by Standard Contractual Clauses or other approved transfer mechanisms as required by applicable data protection law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this document. Continued use of the app after changes constitutes acceptance of the updated policy. For significant changes, we will make reasonable efforts to notify you through an in-app notice.

12. Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact:

Email: mooumari2@gmail.com

We aim to respond to all inquiries within 7 business days.