1. Controller
The controller responsible for data processing on this website and in the “Camaroon” app within the meaning of the General Data Protection Regulation (GDPR) is:
Zulfi Ismailov-Demiri
Richardstr. 14
26725 Emden, Germany
Email: [email protected]
2. Summary
- The Camaroon app does not collect any personal data and does not send any data to us.
- Photos, titles, descriptions and the parent PIN are stored only locally on your device.
- The app contains no advertising, no analytics or tracking tools and requires no user account.
- This website sets no cookies and uses no analytics services. Fonts are served from our own server.
- Data you send us through the contact form is used only to handle your request.
3. The Camaroon app
3.1 No data collection by us
Camaroon runs entirely on your iPhone or iPad. The app does not operate its own servers, does not require registration and sends neither content nor usage or device data to us or to third parties. We therefore have no access to the learning cards, photos or any other content you create in the app.
3.2 Content stored locally
The learning cards you create (photo, title, description, creation and modification date), the parent PIN and app settings are stored only in the app’s protected storage on your device. The app does not sync via iCloud or any other service. You can delete individual cards at any time in the parent area. Deleting the app removes all of its content from your device. Whether app data is included in a device backup (e.g. iCloud Backup or a backup on your computer) depends on your Apple device settings.
3.3 Camera and photo library
The app accesses the camera or your photo library only when you actively take or choose a photo for a learning card in the parent area and have allowed access in iOS. Only the photo you choose is stored in the app. You can revoke access at any time in the iOS Settings.
3.4 Apple Intelligence, image recognition and Image Playground
To suggest a title and description, the app uses the iOS image recognition (Vision) and the Apple Intelligence language model running on your device. The starter cards on first launch are created with Apple’s Image Playground. This processing is performed by operating system features on your device; the app does not send any data to us in the process. Apple’s privacy policy applies to processing by Apple: apple.com/legal/privacy.
3.5 Read aloud
Cards are read aloud using the speech synthesis built into iOS with the voices installed on your device.
3.6 Face ID, Touch ID and device passcode
When you reset the parent PIN, the app asks iOS to confirm your identity with Face ID, Touch ID or your device passcode. The check is performed entirely by iOS. The app only learns whether the confirmation succeeded and has no access to biometric data or your passcode.
3.7 Children
Camaroon is designed for preschool children but is set up and managed by parents. The app does not collect personal data from children and contains no advertising and no analytics tools.
3.8 Apple App Store
The app is distributed through the App Store operated by Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. When you download the app, Apple processes data such as your Apple Account and purchase information under its own responsibility, which we cannot influence. Apple may provide us with anonymized, aggregated statistics (e.g. number of downloads) and – only if you have agreed to this in the iOS Settings – crash reports. These do not allow us to identify you.
4. Server log files and Cloudflare
When you visit this website, our hosting provider automatically collects information in so-called server log files that your browser transmits automatically. These are: browser type and version, operating system, referrer URL, host name of the accessing computer, time of the server request and IP address. This data is not merged with other data sources. The legal basis is Art. 6 (1) (f) GDPR, based on our legitimate interest in the technically error-free presentation and security of our website.
Access to this website is routed through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”). Cloudflare forwards your browser’s requests to our server over an encrypted connection and protects the website against attacks and overload. In doing so, Cloudflare processes technically necessary connection data such as your IP address, the requested address, date and time, and browser and system information. Cloudflare does not set any cookies on this website. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in providing the website securely and reliably. We have concluded a data processing agreement with Cloudflare under Art. 28 GDPR. Cloudflare is certified under the EU-U.S. Data Privacy Framework; transfers to the USA are based on the European Commission’s adequacy decision (Art. 45 GDPR) and additionally on the EU Standard Contractual Clauses. More information: cloudflare.com/privacypolicy.
5. Contact form and email
If you send us a question, feedback or a support request via the contact form or by email, we process the data you provide (name, email address, topic, your message) solely to handle your request and any follow-up questions. The data is transmitted to us by email. The legal basis is Art. 6 (1) (b) GDPR if your request relates to entering into or performing a contract, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering requests). Providing the data is voluntary but necessary to handle your request. The form is not submitted without your consent via the checkbox.
6. No cookies, no analytics
This website does not set cookies, does not use your browser’s local storage for tracking and does not embed any analytics, advertising or social media services. Fonts and images are served from our own server, so no data is sent to third parties such as Google when you visit the site.
7. Retention period
Data submitted via the contact form remains with us until you ask us to delete it, withdraw your consent, or the purpose for storing it no longer applies (e.g. once your request has been handled). Mandatory statutory retention periods, in particular under tax law, remain unaffected.
8. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption to transmit confidential content such as the details you send via the contact form. You can recognize an encrypted connection by the “https://” prefix in your browser’s address bar.
9. Your rights
You have the right at any time to obtain information about your stored personal data, its origin and recipients and the purpose of processing (Art. 15 GDPR), and where applicable the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and to object to processing (Art. 21 GDPR). You can withdraw any consent given at any time with effect for the future. To do so, contact [email protected].
10. Right to lodge a complaint
You also have the right to lodge a complaint with the data protection supervisory authority responsible for us if you believe that the processing of your personal data violates the GDPR. The authority responsible for us is the Data Protection Commissioner of Lower Saxony (Die Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany.
This is a translation for convenience. The German version is legally binding.
Last updated: September 2026
Back to home