Teselora App privacy policy

Controller

At a glance

• No account, no registration, no login.
• No server of our own. Nothing you enter in the app is sent to us.
• No advertising, no tracking, no analytics tools, no third-party SDKs.
• No purchases. Version 1.0 is free and has no in-app purchases.
• No access to location, contacts, camera, microphone or photos.
• Your data stays on your device and, if you use iCloud, in your own iCloud.

What the app stores

Everything a parent sets up in Teselora, and what the child does with it:

• about your child: a nickname, the chosen animal companion and its name, a colour
• cards with their steps, times of day, weekdays and points
• rewards in the shop, redemptions and the history of all points
• pauses such as holidays, and the times of the reminders
• settings such as calm mode and sound

The app does not ask for your child's real name, date of birth or email address. It has no field for health information, so no health data within the meaning of Art. 9 GDPR is stored. Please do not enter any in cards or rewards either.

Where the data is kept

On your device, in the app's protected storage area. Other apps cannot access it.

If you are signed in to iCloud on the device, the app also keeps a copy in the private database of your iCloud account (CloudKit). This lets your data come back after a device change or a reinstall. The storage counts towards your iCloud storage. iCloud is a service from Apple that you use with your Apple Account. Apple's terms and privacy policy apply to it. We have no access to your iCloud.

If you do not use iCloud, the data stays only on the device. The app works fully without iCloud. In that case, please make a backup now and then using the export (see “Your rights”).

Syncing and silent notifications

To keep the copy in iCloud up to date, the app receives silent notifications from Apple's push service (Apple Push Notification service) when something has changed in your iCloud. You do not see these notifications. They contain no message and no advertising, and we do not send any notifications ourselves.

PIN and recovery code

The parent area is protected by a four-digit PIN. The app does not store the PIN itself, only a check value (hash) of it. The value and the recovery code are kept in the keychain of your device. If you use iCloud Keychain, Apple syncs both to your other devices with end-to-end encryption. We never see the PIN or the code.

Reminders

Reminders only exist if a parent turns them on in the parent area. The app then asks for permission to send notifications, separately on each device. Reminders are local notifications: they are scheduled on the device and are not sent through any server.

The texts contain no names and no numbers, for example “Have a look at what is due this morning.” Reminders that are due are marked as time-sensitive, so they can also appear during a Focus. You can change or withdraw the permission at any time in your device's settings.

Permissions the app does not request

The app does not ask for location, contacts, camera, microphone, photos or Screen Time. That is why it contains no purpose string for any of these permissions. Sounds such as the alarm at the end of a timer are only played, never recorded.

Settings on your device

The app saves a few settings on the device, such as calm mode, and a time reference point it uses to notice if the device clock has been changed. This storage is strictly necessary for the service you asked for (§ 25 (2) no. 2 TDDDG). There is therefore no consent dialog. Nothing is read for other purposes.

Crash reports

Teselora contains no crash or analytics tool of its own. If you have turned on “Share With App Developers” in your device's settings, Apple can provide us with crash reports and technical usage statistics about the app. You decide this in the settings of iOS or iPadOS, and you can turn it off there at any time. Apple is responsible for this processing. Details are in Apple's privacy policy.

Children and consent

Teselora is set up exclusively by a parent or guardian. There is no child account and no registration. Consent therefore always lies with the adult who sets up the app, regardless of the age from which a child could consent on their own in a given country.

For children there is a short version in simple words: Privacy for children.

United States (COPPA)

The app is built so that the developer never, at any time, receives or has access to a child's data. No backend, no SDK, no analytics, storage exclusively on the device and in the parent's iCloud. Setup is done exclusively by a parent or legal guardian.

Your rights

Because no data from the app reaches us, you exercise your rights directly in the app, behind the PIN under Settings, section “Data”:

• Access and data portability (Art. 15 and 20 GDPR): “Export all data” saves everything, including the full points history, as a readable JSON file. You choose where it is stored.
• Restore: “Restore a backup” imports a saved file. It replaces everything that is currently in the app.
• Erasure (Art. 17 GDPR): “Delete all of my child's data” removes everything completely, on this device and in your iCloud, and therefore on all devices. The PIN is deleted too. If the device is offline, the data disappears from iCloud as soon as it is back online. This cannot be undone.

You also have the right to rectification (Art. 16), restriction of processing (Art. 18) and to object (Art. 21). You can change all entries in the app yourself. We cannot provide information about app data from our side, because we do not have any. If you have questions, an email to us is enough.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin, Germany. You may equally contact the authority in the country where you live. List of German supervisory authorities

There is no automated decision-making or profiling.

How long data is kept

The data stays until you delete it. The points history is never shortened, so the points balance can always be traced back.

If you only delete the app from the device, the copy in your iCloud and the PIN in the keychain remain. If you reinstall, the app finds them again. To remove everything, use “Delete all of my child's data” in the app first.

Contact by email

If you write to us, for example via support, we process your email address and your message to answer you. Legal basis: Art. 6 (1) (f) GDPR. We delete the messages once your request has been dealt with, unless we are legally required to keep them. Please do not send us a backup file or any information about your child. We do not need either to help you.

This website

This page and the other pages about the app are part of our website. What happens when you open them (for example server log files at our hosting provider) is described in the website privacy policy.

Changes

We update this policy before the app handles data differently, for example with a new feature or a new permission. The current version is always available at /en/app/privacy/.