🇩🇪
Waffensachkunde Pro

Waffensachkunde Pro

Privacy Policy

Last Updated: June 18, 2026

This Privacy Policy informs you about the nature, scope, and purpose of the processing of personal data within our mobile application Waffensachkunde Pro (hereinafter referred to as "App" or "Service"). The protection of your personal data is of utmost importance to us. We treat your personal data confidentially and in accordance with the statutory data protection regulations (in particular, the EU General Data Protection Regulation GDPR) and this Privacy Policy.

1. Data Controller

The data controller responsible for processing your personal data through this App pursuant to Art. 4 No. 7 GDPR is:

MAtechnologies sp. z o. o.
Poland
Email: support@matechnologies.eu

2. Legal Bases for Processing

We process personal data only to the extent necessary to provide a functional App and our content and services. The processing is based on the following legal bases of the GDPR:

  • Art. 6 (1) (a) GDPR (Consent): If we obtain the consent of the data subject for processing operations.
  • Art. 6 (1) (b) GDPR (Performance of Contract): When processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract (e.g. providing App functions, purchase processing, restoring purchases).
  • Art. 6 (1) (c) GDPR (Legal Obligation): When processing is necessary for compliance with a legal obligation to which we are subject (e.g. statutory retention requirements for financial transactions).
  • Art. 6 (1) (f) GDPR (Legitimate Interest): When processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject (e.g. ensuring stability, security, and continuous improvement of the App).

3. Data Processing when Using the App

a) Local Storage of Application Data on Your Device

The App does not require or support the creation of a user account. All personal application data (such as learning progress, test results, exam statistics, and preferences) is stored exclusively local on your device. There is no transmission of this data to our servers or to any external backend services.

  • Purpose: Providing the core functionality of the App.
  • Legal Basis: Performance of a contract pursuant to Art. 6 (1) (b) GDPR.
  • Retention Period: The data remains on your device and is deleted when you uninstall the App or clear the App data in your operating system settings. We do not have access to this data at any time.

b) Usage Data and Diagnostics

When using the App, technical data necessary for system operation and security may be collected automatically. This includes:

  • Device information (e.g. device model, operating system version, unique device identifiers).
  • App information (e.g. App version, performance data).
  • IP address (collected in an anonymized or pseudonymized form).
  • Crash logs (if transmitted by the operating system).
  • Purpose: Ensuring stability, troubleshooting, and abuse prevention.
  • Legal Basis: Legitimate interest pursuant to Art. 6 (1) (f) GDPR.

4. In-App Purchases and Subscription Management

In-App purchases and subscriptions are processed via Apple's App Store and Google Play. We do not collect or store payment information (such as credit card details or bank account info) ourselves.

To verify premium status and manage subscriptions, we use the third-party service RevenueCat (RevenueCat, Inc., 1250 45th St. Suite 270, Emeryville, CA 94608, USA).

  • Processed Data: Transaction ID, purchase date, subscription status, and a pseudonymized user identifier.
  • Purpose: Verifying premium purchases and unlocking content across the user's devices.
  • Legal Basis: Performance of a contract pursuant to Art. 6 (1) (b) GDPR.
  • Third-Country Transfer: RevenueCat processes data in the USA. Transfers are based on EU Standard Contractual Clauses and the EU-US Data Privacy Framework to ensure an adequate level of data protection.

5. Disclosure of Data to Third Parties

We only share your personal data with third parties in the following scenarios:

  • Apple Inc.: For payment processing and App distribution via the App Store.
  • Google LLC: For payment processing and App distribution via the Google Play Store.
  • RevenueCat, Inc.: For managing and validating In-App purchases.
  • OpenRouter / DeepSeek: For automated evaluation and grading of free-text questions. The user's input answers are transmitted to the DeepSeek API via the OpenRouter interface. No additional personally identifiable information or user registration data is transmitted. This data is processed solely for grading and is not used for training AI models.
  • Law enforcement and legal obligations: If we are legally required to do so or by court order (Legal Basis: Art. 6 (1) (c) GDPR).

6. Data Retention Period

We process and store personal data only for the period necessary to achieve the purpose of storage, or as required by law (e.g. commercial or tax retention obligations under Polish/German law). Once the purpose is achieved or the statutory period expires (typically 10 years for tax-relevant transaction records), the corresponding data is routinely deleted.

7. Data Subject Rights (Your Rights)

As a data subject, you have the right to assert your rights against us at any time using the contact details in Section 1. You are entitled to the following rights under the GDPR:

  • Right of Access (Art. 15 GDPR): You have the right to request information about your personal data processed by us.
  • Right to Rectification (Art. 16 GDPR): You can request the correction of inaccurate or completion of incomplete personal data stored by us.
  • Right to Erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data stored by us, unless statutory retention obligations prevent it.
  • Right to Restriction of Processing (Art. 18 GDPR): You can request that the processing of your data be restricted.
  • Right to Data Portability (Art. 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to Object (Art. 21 GDPR): You can object to processing based on legitimate interests (Art. 6 (1) (f) GDPR).
  • Right to Withdraw Consent (Art. 7 (3) GDPR): You can withdraw any consent previously given to us at any time. This does not affect the lawfulness of the processing carried out up to the withdrawal.
  • Right to Lodge a Complaint (Art. 77 GDPR): You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your data.

8. No Automated Decision-Making

We do not perform automated decision-making or profiling as defined in Art. 22 GDPR.

9. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy to ensure it complies with current legal requirements or to reflect changes in our services. The new Privacy Policy will apply to your next visit.

10. Contact Us

If you have any questions about data protection or wish to exercise your data subject rights, you can contact us at any time by email at support@matechnologies.eu.