Privacyverklaring

1. Controller

The controller for the processing of personal data under the General Data Protection Regulation is Pangolin UG (haftungsbeschränkt), Hansestraße 3, 59590 Geseke, Germany, represented by its managing director Tobias Stöber.

No data protection officer has been appointed, as the legal conditions for that do not apply.

In case of doubt, the German version of this text applies.

2. This website

The website belg.app is served as a static site by Cloudflare Pages. It sets no cookies, loads no fonts from third-party servers and contains no analytics or advertising tools. There is no contact form.

When the site is requested, the delivery network processes technically necessary connection data such as the IP address, in order to deliver the page at all and to fend off attacks. The legal basis is Art. 6(1)(f) GDPR.

3. What the app processes

Belg is a service for households. A household's data is tied to that household and separated from other households at database level (row level security).

The following is processed:

• Account data: the email address of the adults, for signing in by magic link or passkey. Children are created by their parents and sign in without an email address of their own.
• Household data: names of members, roles, missions, prices, shop entries and the balance of the currency together with its entries.
• Photo proofs: pictures children upload for a mission. They are shown only to the adults of the same household.
• School data: WebUntis credentials, timetable, homework and tests of the respective child, if you set up the school connection.
• Learning data: vocabulary, learning progress, reading class and arithmetic levels.
• AI chats: transcripts of conversations with BelgAI, including the homework chats. The transcripts stay with us inside your household, the individual request goes to the AI provider to be answered.
• Technical data: push tokens of the devices, error reports and server logs.

4. Purpose and legal basis

Processing serves the provision of the service you agreed with us. The legal basis is Art. 6(1)(b) GDPR (performance of a contract).

To prevent misuse, to find errors and to keep the system secure, we process log data on the basis of Art. 6(1)(f) GDPR. Our legitimate interest is the secure operation of the service.

The school connection is set up by you, and whether your children may use BelgAI is your decision. As long as you do not release it, no data is processed for it.

5. Children's data

Children cannot sign themselves up for Belg. An adult of the household creates them and assigns their role. The decision about processing a child's data therefore sits with those holding parental responsibility.

Adults of the same household see their children's content, including the chats with BelgAI. This is deliberate and is not hidden from the children in the app.

6. Who else sees the data

We pass data on only as far as operation requires. In use are:

• Hetzner Online GmbH, Gunzenhausen, for servers and database. The servers are located in Germany.
• Apple Distribution International, for delivery of the app, for notifications on the device and for billing the subscription.
• WebUntis, operated by Untis GmbH, if you set up the school connection. Transferred is what is needed to fetch the timetable and to file a sick note.
• The AI provider (Anthropic), if you use BelgAI. Transferred is the respective request together with the context needed for the answer. If you do not use BelgAI, nothing is transferred there.

7. How long

We store a household's data for as long as the household exists. If you delete your household, the associated data is removed.

Server logs are deleted after a short period. Statutory retention periods under commercial and tax law remain unaffected, but concern billing rather than the contents of your household.

8. Your rights

You have the right to information about the data stored about you, to rectification, to erasure, to restriction of processing, to data portability and to object to processing based on a legitimate interest.

In the app, under settings, you will find a deletion request that removes the household with all its content. You can also request deletion from us informally.

You also have the right to complain to a supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.