Privacy Policy
Contents
1 Controller and contact
The controller responsible for processing your personal data in connection with the App is LVLUP Swiss (sole proprietorship / Einzelunternehmung; not yet registered in the commercial register).
Responsible person: Miro Senn
Address: Karstlernstrasse 11, 8048 Zürich, Switzerland
Contact: info@lvlup-swiss.ch
2 What data we process
We process the following categories of personal data:
| Category | Data points |
|---|---|
| Account data | Name, email address, password (stored by the authentication provider), optional profile image. |
| Learning progress | Learning items completed, streak and progress-related data (as applicable). |
| Technical data | Device information (e.g. OS version), app version, and basic logs needed to operate and secure the service. |
| Push notifications | Device push token (only if you enable notifications). |
3 Purposes and legal bases
- Service delivery: Provide and operate the App and your account (performance of contract).
- Security & troubleshooting: Maintain security, prevent abuse and troubleshoot issues (legitimate interests).
- Push notifications: Send notifications if enabled by you (device permissions; legitimate interests where applicable).
- Legal obligations: Comply with applicable legal obligations where required.
4 Processors and infrastructure (Firebase / Google)
We use Google Firebase services to run the App, including Firebase Authentication, Firestore database and Firebase Storage. Data may be processed on Google infrastructure.
Depending on configuration, data may be stored or accessed outside Switzerland. We rely on appropriate vendor security measures and standard contractual protections where applicable to safeguard data processed abroad.
5 Analytics and crash reporting
We currently do not intentionally enable Firebase Analytics or Crashlytics.
If we enable analytics or crash reporting in the future, we will update this Privacy Policy and, where required, offer controls within the App.
6 Sharing of data
We do not sell your personal data. We share data only in the following circumstances:
- With service providers (e.g. Firebase / Google) to operate the App.
- Where legally required by applicable law or a competent authority.
7 Data retention
We keep personal data as long as necessary for the purposes described in this Policy. When you delete your account, we delete or anonymize your personal data within 30 days, unless a longer retention is required for security, fraud prevention or legal obligations.
Certain records may be retained for a limited period where required for security, fraud prevention or legal obligations.
8 Your rights
Under Swiss data protection law (and, where applicable, other laws), you have the following rights regarding your personal data:
To exercise any of these rights, please contact us at info@lvlup-swiss.ch. Where technically feasible, you may request a copy/export of your data in a commonly used format.
You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC/EDÖB).
9 Security
We use reasonable technical and organizational measures to protect your data against unauthorized access, loss or misuse.
No method of transmission or storage is 100% secure. We encourage you to use a strong, unique password for your account.
10 Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The latest version will always be available within the App and on this page. If changes are material, we will make reasonable efforts to notify you in the App where feasible.