Data Privacy

Link to the Legal Notice

Provider information:
Andreas Budde Farman-Strasse 53 8152 Glattpark (Opfikon) Switzerland Kontakt: info [at] drinkwateraquarium [dot] com

Data Privacy

Age requirement

Collection, processing and use of data

• Firebase

  To better understand the use of our app and improve the app, we use Google Firebase to collect information about the app's usage and report on app activity.
  
  In addition, it also allows us to use other features, such as sending notifications (for example, when new content is available) or settings in the app without having to release a new update using Firebase Remote Config (for example, if we want to turn on or off certain features) or A/B tests to test changes in the app, as well as a deeper analysis using Google Analytics and BigQuery, optimization and analysis of ads and retargeting
  
  Google operates global infrastructure, and personal data may be processed outside Switzerland and the European Economic Area, including in the United States. Where required, transfers to certified recipients in the United States rely on the EU-U.S. or Swiss-U.S. Data Privacy Framework. Where those frameworks do not apply, Google provides transfer safeguards including applicable Standard Contractual Clauses under its data processing terms.
  
  Further information: Privacy and Security in Firebase, Firebase Data Processing and Security Terms, Google's data transfer frameworks, and Google Privacy Policy.
  
  This service is only enabled after given consent.
  
  Stop processing (opt-out):
  In our app, you have the option to disable Analytics tracking. This setting is retained even after an app update, but not during a reinstallation. For a new installation you have to switch off the options again.

• Crashlytics

  We use Crashlytics in real-time crash reports to obtain detailing codes and device information, which facilitates the maintenance and improvement of the app. Crashlytics is a real time crash reporting service from Google.
  Further information: Privacy and Security in Firebase and Firebase Crashlytics documentation.
  This service is only enabled after given consent.
  
  Stop processing (opt-out):
  In our apps, you have the option to disable Crash tracking under the settings. This setting is retained even after an update, but not during a reinstallation. When reinstalling, you'll need to turn off the options again.
  

• Firebase Performance Monitoring

  With your consent, we use Firebase Performance Monitoring, a service provided by Google, to measure and improve the speed, stability and technical reliability of our Android and iOS apps. The service records technical performance information such as app startup, foreground and background times, screen-rendering performance, and the duration and outcome of HTTP/S network requests.

  The information processed may include a Firebase installation ID and session ID, app version and package or bundle identifier, device model, operating-system version, orientation, locale and language, RAM and disk size, CPU usage, carrier and network type, foreground or background state, country derived from the IP address, performance durations, and network URLs without URL parameters or request or response content. For network requests, response codes, payload sizes and response times may also be processed. We do not intentionally add names, email addresses, hydration history or other user-entered content to performance traces.

  Where the GDPR applies, the legal basis is your consent under Article 6(1)(a) GDPR. Performance Monitoring is disabled by default and remains disabled until you consent. When the displayed privacy message explicitly lists Performance Monitoring, choosing “Agree all” also includes consent to this service. If supported by your app version, you can enable or disable Performance Monitoring independently at any time in the app's privacy settings. Withdrawing consent stops future collection but does not recall data already transmitted.

  According to Firebase, Performance Monitoring retains events associated with IP addresses for 30 days and installation-associated and de-identified performance data for 60 days before beginning removal from live and backup systems. Google operates global infrastructure, so data may be processed outside Switzerland and the European Economic Area, including in the United States, subject to the transfer safeguards described in the Firebase terms.

  Your in-app choice is retained after an app update but may be reset if you reinstall the app. Further information: Privacy and Security in Firebase, Firebase Performance Monitoring, Firebase Data Processing and Security Terms, Google's data transfer frameworks, and Google Privacy Policy.

• AdMob advertising and consent management

  Our free applications use Google AdMob, the Google Mobile Ads SDK and Google's User Messaging Platform (UMP) to display and manage advertising. In the Android app, while PRO or another ad-free entitlement is active, the app does not request AdMob ads.

  Depending on your device, region, privacy choices and Google's configuration, Google and its advertising partners may process technical and advertising data. This may include your IP address, a device advertising identifier such as the Android advertising ID or Apple IDFA when available and permitted, a rotating SDK instance ID or publisher first-party identifier, app and device information, approximate location derived from the IP address, ad requests, ad views and interactions, and diagnostic, security and fraud-prevention information. These data may be used to deliver ads, limit how often an ad is shown, measure and report ad performance, prevent invalid traffic and, where permitted, personalize advertising.

  Personalized ads are enabled only where the required consent has been obtained. Non-personalized ads are not based on past user behaviour, but they may still use identifiers or local storage for purposes such as frequency capping and aggregated reporting. Limited ads avoid personalization and features requiring local identifiers, but technical data such as an IP address may still be processed to deliver and secure an ad.

  UMP determines whether a consent or privacy-options form is required and whether Google currently permits ad requests. Where Google requires a privacy-options entry point, you can reopen it from the app's settings and change your choices. You can also manage advertising settings through your device or Google account.

  Further information: How Google uses information from sites or apps that use its services, Google advertising technologies, Google ad settings, and Google Privacy Policy.

• Tenjin attribution and marketing measurement

  With your consent, we use Tenjin, Inc. (United States) to understand which advertising campaigns lead to app installations and purchases and to measure campaign performance and advertising revenue.

  For this purpose, Tenjin may process device and app identifiers, including an advertising identifier where available and permitted, IP address, device and app information, campaign and install-referrer information, app-open data and advertising revenue.

  The legal basis is your consent. You can change or withdraw your consent in the app under Settings > Legal notice & Data Privacy > Change Data Protection Consent.

  Tenjin processes data in the United States. Where required, international transfers are protected by applicable contractual safeguards. Further information: Tenjin Privacy Policy and Tenjin Data Processing Addendum.

• Google AdWords and Google Remarketing

  
  Google AdWords conversion tracking is an analytics service provided by Google Inc. that connects data from the Google AdWords advertising network with actions performed on our apps. For measuring conversion with Google AdWords, a conversion tracking cookie is placed when a user clicks on an advertisement delivered by Google (“Ads”). In order to opt-out of Google use of cookies for this kind of service see https://support.google.com/adwords/answer/2549063?hl=en and to see the full data privacy here: https://www.google.com/intl/en/policies/privacy/
  AdWords Remarketing is a Remarketing and Behavioral Targeting service provided by Google. It connects the activity on our apps with the AdWords advertising network and the Doubleclick Cookie. You can opt out of the cookie tracking here: https://support.google.com/ads/answer/2662922 You can find more information about Google AdWords here: https://support.google.com/adwords/topic/3121763?hl=en&ref_topic=3119071
  This service is only enabled after given consent.
  

• iCloud

  iOS users of a PRO subscription can backup and sync their data using Apple iCloud. The data is stored securely in your iCloud account, out of our own reach. You can find out more about iCloud security and privacy overview at https://support.apple.com/en-us/HT202303

• RevenueCat and store purchases

  We use RevenueCat, Inc. (United States) as a processor for purchases and subscriptions. The RevenueCat SDK is initialized only when you open the purchase/paywall screen, request purchase restoration, or the app already knows locally that you have an active subscription and needs to refresh your entitlement.

  RevenueCat creates a random anonymous App User ID and processes product information, purchase history, Google Play purchase tokens or App Store receipts, subscription status and entitlement status. Purposes: presenting offers, validating purchases, restoring purchases and maintaining access to PRO features. Where GDPR applies, this processing is necessary to perform the purchase or subscription contract and to provide requested restoration and entitlement functions.

  If Firebase Analytics is enabled based on your privacy choice, the Android app also provides the Firebase App Instance ID to RevenueCat. This allows purchase and subscription activity to be associated with the consented analytics instance. If Analytics is disabled or consent is withdrawn, the app stops providing this identifier and instructs the RevenueCat SDK to clear it.

  Google Play or the Apple App Store processes payment credentials directly. We do not receive card numbers, bank-account details or other payment credentials. The app and RevenueCat receive only the purchase, receipt, subscription and entitlement information required to provide and restore access.

  RevenueCat processes data in the United States. Where required, transfers are protected by RevenueCat's Data Processing Addendum and applicable Standard Contractual Clauses. Further information: RevenueCat Privacy Policy, RevenueCat Data Processing Addendum, and Google Privacy Policy.

• Cloudflare — website hosting and delivery

  We use Cloudflare, Inc. (United States) to host our website through Cloudflare Pages and provide DNS, content delivery and security services. This includes delivering help pages and other website content requested from within our apps.

  When you access this content, Cloudflare processes technical request information, which may include your IP address, the requested URL, the date and time of access, browser or app information, and referring-page information where transmitted. This processing supports content delivery, availability, troubleshooting and protection against malicious traffic.

  Where the GDPR applies, the necessary hosting and security processing is based on our legitimate interests in providing a reliable and secure website and making help content available to users, pursuant to Article 6(1)(f) GDPR.

  Cloudflare operates a global network, and personal data may be processed outside Switzerland and the European Economic Area, including in the United States. Where required, international transfers are subject to the safeguards set out in Cloudflare's Data Processing Addendum, including applicable Standard Contractual Clauses.

  Further information: Cloudflare Privacy Policy and Cloudflare Data Processing Addendum.

• Amazon Web Services

  In order to be able to offer our service, data related to the apps/website is stored and processed both on the user's smartphone and on the other hand in the Amazon cloud of Amazon Web Services, Inc. and other Amazon companies. This can also be done on servers in the USA. The user expressly agrees to the data processing in the USA. Details on the Amazon Cloud can be found in the corresponding data protection regulations of Amazon https://aws.amazon.com/en/privacy/
  

No liability for websites and Privacy Policy partners

Data Security

Your Data Protection Rights Under General Data Protection Regulation (GDPR)

• The right to access, update or to delete the information we have on you. Whenever made possible, you can access, update or request deletion of your Personal Data directly within your account settings section. If you are unable to perform these actions yourself, please contact us to assist you.
• The right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete.
• The right to object. You have the right to object to our processing of your Personal Data.
• The right of restriction. You have the right to request that we restrict the processing of your personal information.
• The right to data portability. You have the right to be provided with a copy of the information we have on you in a structured, machine-readable and commonly used format.
• The right to withdraw consent. You also have the right to withdraw your consent at any time where we relied on your consent to process your personal information.

California Privacy Rights (CCPA)

Changes