Privacy Policy

Last updated: October 18, 2026

At Schulte Table Training, we take your privacy seriously. This policy explains how we handle your data in compliance with GDPR and other privacy regulations.

Summary - What You Need to Know

  • ✓Account creation is optional - you can use the app as a guest without registering
  • ✓Guest users: data stored locally only. Registered users: data synced securely to cloud
  • ✓We collect only your email address if you choose to create an account
  • ✓We use Umami Analytics - a privacy-focused, cookie-free analytics tool
  • ✓No tracking cookies or third-party advertising
  • ✓You can delete your data anytime - locally via "Clear History" or request full account deletion

1. What Data We Collect

1.1 Local Storage Data (Guest Users)

When you use our Schulte Table training app without an account, we store the following information locally on your device using browser localStorage:

  • Game results (round number, numbers reached, time taken)
  • Training history and timestamps
  • Your training progress statistics

This data never leaves your device and is stored locally in your browser. We cannot access it, and it's only used to show your personal training progress.

1.2 Account Data (Optional Registration)

If you choose to create an account, we collect:

  • Email address (for authentication purposes)
  • Account creation date

We do NOT collect:

  • Your name, phone number, or physical address
  • Payment information (our service is free)
  • Profile picture or other personal media

Your email is used solely for account authentication and password reset functionality.

1.3 Cloud Data Storage (Registered Users)

When you create an account, your training data is stored securely in our cloud database:

  • Game results (time, score, grid size, training mode)
  • Training session history
  • Progress statistics

This allows you to:

  • Access your data from any device
  • Never lose your training history
  • Sync progress across devices

Data is linked to your account via a unique user ID. We cannot access your training data without your consent.

1.4 Analytics Data

We use Umami Analytics, a privacy-focused, open-source analytics platform, to collect basic, anonymized data:

  • Page views and session duration
  • Device type (mobile, desktop, tablet)
  • Browser type and operating system
  • Country/region (based on IP address, anonymized)
  • Traffic sources (where visitors come from)

Umami does not use cookies, does not collect personal data, and does not track users across websites. All data is anonymized and aggregated. See Umami's Privacy Policy.

1.5 What We DON'T Collect

We explicitly do NOT collect:

  • Personal identification beyond email (no name, phone number)
  • Payment or financial information
  • Precise location data
  • Browsing behavior across other websites
  • Any sensitive personal data
  • Your password (we store only secure hashes)

2. How We Use Your Data

2.1 Local Data Usage (Guests)

Your training data stored in localStorage is used exclusively to:

  • Display your personal training history
  • Show your progress statistics
  • Enable you to track your cognitive improvement over time

2.2 Account & Cloud Data Usage (Registered Users)

If you register an account, your data is used to:

  • Authenticate your identity when signing in
  • Sync your training progress across devices
  • Provide personalized training statistics
  • Enable data recovery if you switch devices

We will NEVER: Share your email with third parties, send marketing emails without consent, or use your training data for advertising.

2.3 Analytics Usage

Anonymized analytics data helps us:

  • Understand which features are most useful
  • Identify and fix technical issues
  • Improve the app's user experience
  • Optimize performance for different devices

Legal Basis (GDPR)

Under GDPR Article 6(1)(f), we process analytics data based on our legitimate interest in improving our service. Local storage data is processed under Article 6(1)(b) as necessary for the functionality of the application you requested. Account data (email) is processed under Article 6(1)(b) - contractual necessity for providing the service you requested.

3. Cookies and Tracking

We do not use tracking cookies or third-party advertising networks.

Essential Storage Only

We use browser localStorage (not cookies) to store guest training data. For registered users, authentication tokens are stored securely. This is essential for the app to function and does not require consent under GDPR.

Umami Analytics (Privacy-Focused)

We use Umami Analytics, an open-source, privacy-focused analytics platform that:

  • Does not use cookies
  • Does not collect personal data
  • Does not track users across websites
  • Is fully GDPR, CCPA, and PECR compliant
  • All data is anonymized and aggregated

4. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR) and similar privacy laws, you have the following rights:

Right to Access

Guest users: Your training data is stored locally on your device and is accessible at all times. Registered users: You can view all your data through the app interface, or request a full export by contacting us.

Right to Deletion (Right to be Forgotten)

Guest users: Click "Clear History" in the app to immediately delete all local data.

Registered users: You can delete your account and all associated data by contacting us at privacy@schultetable.app. Upon request, we will delete your user profile and all training history within 48 hours.

Right to Data Portability

Guest data is stored in standard JSON format in your browser's localStorage. Registered users can request a full export of their data by contacting us.

Right to Object

You can stop using the app at any time. Guest data remains private on your device. Registered users can request account deletion at any time.

5. Data Security

We take data security seriously and implement industry-standard measures:

  • •
    Local Storage: Guest training data never leaves your device and is protected by your browser's security mechanisms.
  • •
    Cloud Database Security: Registered user data is stored in a SOC 2 Type II certified database infrastructure with encryption at rest and in transit.
  • •
    Row-Level Security: Your data is protected by database-level access controls ensuring only you can access your training history.
  • •
    HTTPS Encryption: All communication with our website is encrypted using industry-standard SSL/TLS protocols.
  • •
    Password Security: We never store your password in plain text. Only secure cryptographic hashes are stored.
  • •
    No Third-Party Access: We do not share, sell, or provide access to any data with third parties.

6. Children's Privacy

Our app is suitable for all ages. Guest mode does not require any personal information and is fully safe for children.

For registered accounts: Users under 16 should have parental consent before providing their email address, in accordance with GDPR Article 8.

Kids accounts: a parent or legal guardian creates a kids account with their own email address and confirms that they are the child's parent or guardian. For a kids account we store only:

  • the parent's email address and password (for signing in)
  • a nickname and an animal avatar chosen for the child (we ask for a first name or made-up name, not a full name)
  • game results: board size, time, wrong taps, level and the time between taps

Kids accounts have no access to the AI Coach, so a child's data is never sent to an AI model. Kids' results are not included in community statistics. The settings of a kids account sit behind a simple grown-ups check, where a parent can see the activity, change the nickname and avatar, and permanently delete the account with all of its data.

Parents can:

  • Use guest mode for children (no email required)
  • Create a kids account for their child
  • Supervise account creation for teenagers
  • Delete a kids account and all of its data in the account's Grown-ups zone, or by emailing us

7. International Data Transfers

Guest users: Your training data is stored locally on your device and never transmitted to our servers.

Registered users: Your data may be processed in various locations through our cloud infrastructure. All transfers comply with GDPR requirements and use appropriate safeguards including encryption and secure data centers.

Anonymized analytics data may be processed in various locations, but this data contains no personally identifiable information.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make changes, we will:

  • Update the "Last updated" date at the top of this page
  • Notify users of significant changes through the app interface
  • Maintain previous versions for your reference

We encourage you to review this policy periodically to stay informed about how we protect your privacy.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

Email: privacy@schultetable.app

Response Time: We aim to respond to all privacy inquiries within 48 hours.

For GDPR-related requests or account deletion, please include "GDPR Request" in your email subject line.

Legal Compliance

This Privacy Policy complies with:

  • EU General Data Protection Regulation (GDPR)
  • California Consumer Privacy Act (CCPA)
  • Children's Online Privacy Protection Act (COPPA)
  • ePrivacy Directive (Cookie Law)

We are committed to protecting your privacy and complying with all applicable data protection laws.