Privacy Policy

Your privacy is important to us

1. Data Controller

The data controller for this app is:
Philipp Crocoll, CubiqMinds GmbH
Wallonenstraße 4, 76297 Stutensee, Germany
privacy@cubiqminds.com

2. Data Collected

2.1 Camera Access

The app uses the camera solely to scan the Magic Cube and provide the AR functionality. No images or video data are stored or transmitted to servers. All processing is done locally on the device.

2.2 Log Files (Voluntary)

Users can voluntarily upload log files to report errors or help improve the app. These log files contain no personal data, only technical information such as:

  • Device type / model
  • Android version
  • App version
  • Internal error codes or other technical details
  • Usage flow

The data is used solely to analyze issues and improve the app. Logs cannot be linked to individual users, so there is no way to delete them on a per-user basis. Logs may be stored long-term to track technical developments and changes in app functionality over time.

2.3 Feedback Form (Voluntary)

Users can submit feedback through a form. No personal data is required, and all information is provided voluntarily. The data is used solely to improve the app and may be stored long-term to compare feedback over time.

2.4 Firebase Analytics

The app uses Firebase Analytics (Google Ireland Limited) for anonymized analysis of app usage. Firebase collects, among other things:

  • Technical device information (e.g., model, OS version)
  • App interactions (e.g., features used, session duration)
  • Approximate location (country/region)

Firebase Analytics is used without a user ID and without cross-device tracking. Data is processed in pseudonymous form only. Google may also use the data to improve its services.

Users can opt out of certain Firebase features through the settings on their mobile devices, such as through the advertising settings for mobile devices.

More information: https://firebase.google.com/support/privacy

2.5 AdMob (Advertising)

The app uses Google AdMob, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to display advertisements.

Depending on user consent, AdMob may process personal data such as advertising ID, IP address, device information, or ad interactions to provide personalized or non-personalized ads.

Users are shown a consent dialog provided by the Google User Messaging Platform (UMP) before ads are displayed. Users can choose between personalized ads or only non-personalized ads. This choice can be reset by clearing app data.

More information: https://policies.google.com/technologies/ads

Legal Basis:
Art. 6(1)(a) GDPR — User consent for personalized advertising
Art. 6(1)(f) GDPR — Legitimate interest in non-personalized advertising and app funding

3. Purpose of Data Processing

  • Provision of scan and AR features
  • Error analysis and technical improvement of the app
  • Long-term analysis of technical developments
  • Anonymized usage statistics to optimize the app
  • App funding through advertising (AdMob)

4. Legal Basis

  • Art. 6(1)(b) GDPR — Fulfillment of app functions (camera, AR)
  • Art. 6(1)(a) GDPR — User consent (advertising, voluntary log uploads, feedback)
  • Art. 6(1)(f) GDPR — Legitimate interest in anonymized usage analysis and app optimization (Firebase Analytics)

5. Data Sharing

Personal data is only shared with the following service providers:

  • Google Ireland Limited (Firebase, AdMob)

Data transfer is based on data processing agreements under Art. 28 GDPR and, where required, on the EU Standard Contractual Clauses.

6. Data Retention

  • Log files: Long-term, fully anonymous, without personal data
  • Feedback data: Stored long-term for app improvement
  • Firebase Analytics: Stored according to Google’s standard policies
  • AdMob data: According to Google’s privacy policies

7. Transfer of Data to Third Countries

Data is transferred to countries outside the EU/EEA only if an adequate level of data protection is ensured (e.g., through the EU Commission’s Standard Contractual Clauses or Binding Corporate Rules).

Please note that when using U.S. services (such as Google), a certain level of risk cannot be ruled out, particularly regarding potential access by U.S. authorities.

8. User Rights

Users have the following rights regarding their personal data under the GDPR:

  • Right to access stored data and its processing
  • Right to rectify inaccurate or incomplete data
  • Right to erasure, where legally permitted (“right to be forgotten”)
  • Right to restrict processing
  • Right to object to certain processing activities
  • Right to lodge a complaint with a competent data protection authority

Requests can be sent to the contact address provided above.

9. Changes to This Privacy Policy

This privacy policy may be updated if app features or legal requirements change. The current version is always accessible within the app.