App Privacy Policy (Android)

Last updated: August 2026

1. Controller

Levin Köhler (sole proprietor) Talstr. 13/1, 74579 Fichtenau, Germany. Email: contact@prog-app.com / support@prog-app.com

2. Purpose of this policy

This policy describes the processing of personal data when using the mobile app PROG for Android. Information about visiting our website can be found separately in the website privacy policy.

3. What data does PROG process?

3.1 Local content data (on your device only)

Journal entries, goals, tasks, routines, learning progress, and app settings are stored exclusively locally on your device. There is no server upload, no cloud sync, and no developer access.

3.2 Notifications

PROG can schedule local reminders on your device. No push tokens are transmitted and no data is sent to any server.

3.3 Purchase and subscription management (RevenueCat)

PROG uses RevenueCat (RevenueCat, Inc., USA), built on top of Google Play Billing, to handle purchases and subscriptions. RevenueCat processes the following data: an anonymous user ID (automatically generated, not linked to your identity), the type of subscription chosen (e.g. monthly, yearly, lifetime), and a creator code if voluntarily entered. No names, email addresses, or usage habits are collected.

Purpose: subscription management and fair creator compensation. Legal basis: performance of the usage agreement (Art. 6(1)(b) GDPR) and legitimate interest (Art. 6(1)(f) GDPR). Privacy policy: https://www.revenuecat.com/privacy

3.4 Usage analytics (Firebase Analytics)

PROG uses Firebase Analytics (Google Ireland Limited or Google LLC, USA) to analyze general app usage, for example how often the app is opened. We do not currently log any individual events manually – only Firebase's default automatic collection applies (including app instance ID, device and app information, session duration). This automatic collection may also include your device's advertising ID, unless you have disabled or reset it in your Android settings.

Purpose: understanding general app usage to improve the product. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Transfer to Google in the US takes place on the basis of EU Standard Contractual Clauses or the EU-US Data Privacy Framework. Privacy policy: https://firebase.google.com/support/privacy. You can reset your advertising ID or opt out of personalized advertising under Android Settings → Google → Ads.

3.5 Operating system diagnostic data (optional)

If you have enabled sharing of diagnostic and usage data in the Google Play Store or your Android system settings, Google may collect anonymous crash and stability data (e.g. via Android Vitals). We do not receive any personal raw data. Google alone is responsible for this processing.

No cookies. External SDKs: RevenueCat (purchase and subscription management) and Firebase Analytics (usage analytics, see 3.4).

4. Purposes and legal bases

  • App functionality (local storage): performance of the usage agreement (Art. 6(1)(b) GDPR)
  • Local notifications: performance of the usage agreement (Art. 6(1)(b) GDPR)
  • Purchase and subscription management: performance of the usage agreement and legitimate interest in fair partner compensation (Art. 6(1)(b) and (f) GDPR)
  • Support contact (email): handling your inquiry (Art. 6(1)(b) GDPR)
  • Usage analytics (Firebase Analytics): legitimate interest in improving the app (Art. 6(1)(f) GDPR)
  • Google diagnostic data: Google alone is responsible; our legitimate interest is limited to anonymized stability information (Art. 6(1)(f) GDPR)

5. Storage location and duration

All content data remains on your device until you delete it or uninstall the app. Support emails are retained only as long as necessary to handle your request and to meet legal obligations. Purchase data is stored by RevenueCat according to their privacy policy (https://www.revenuecat.com/privacy).

6. Recipients / disclosure

  • No disclosure of your app data to third parties
  • RevenueCat (RevenueCat, Inc., USA): processes anonymized purchase data as a data processor. Standard Contractual Clauses are in place.
  • Google (Firebase Analytics, Google Ireland Limited or Google LLC, USA): processes usage and device data for app analytics. Transfer takes place on the basis of EU Standard Contractual Clauses or the EU-US Data Privacy Framework.
  • Support emails are processed by our email provider (data processor)
  • No transfer of personal data to third countries through app functionality, except RevenueCat and Firebase Analytics as described above

7. Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict processing, receive a copy of your data (data portability), and object to certain processing. You may also lodge a complaint with a data protection supervisory authority (e.g. LfDI Baden-Württemberg).

Contact for privacy matters: contact@prog-app.com

8. Use by children and teenagers

The PROG app can generally be used by people of any age. We do not collect personal data via any server and do not perform age verification or profiling. Parents or guardians should make sure children handle their personal entries responsibly.

9. Security

The app stores data exclusively locally. Please protect your device (e.g. PIN, pattern, or fingerprint) and use encrypted device backups regularly.

10. Changes

This privacy policy may be updated if features or legal requirements change. The current version is always available at https://prog-app.com/en/datenschutzerklarung-app-android