Privacy in the Ausmal Club app

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) for the Ausmal Club app is:

Maximilian Vogl Maria-Montessori-Straße 24 40789 Monheim am Rhein Germany

This policy applies to the Ausmal Club app only. For the website www.ausmal.club, the privacy policy published there applies.

2. The principle: the app works offline

Ausmal Club collects no personal data, transmits no data to me and processes no data on a server. There is no server, no user account, no sign-in, no registration and no identifier by which a device or a person could be recognized again.

The app loads nothing from the internet and sends nothing to me. All the pictures, all the texts and all the sound recordings are part of the app and are never loaded afterwards. What your child does on the device I do not learn – I know neither which pictures are colored in, nor for how long, nor how often the app is opened.

There are two exceptions to that principle: the connection to the App Store or to Google Play that handles the subscription (section 5), and opening an internet address in your device’s browser (section 7). Purchases and links sit behind the parent gate; only the question whether a subscription exists is asked by the app itself at every start.

3. What is stored on the device

The app puts three things into the protected storage area of the app on your device. Neither I nor other apps can reach them.

Your child’s artwork. Every picture that has been started and every finished one is saved by itself, without anyone having to tap “Save”. What is stored is not the picture as such but a brief description – which area carries which color and where a stroke runs. A piece of artwork therefore takes up less than 200 bytes.
The settings you make under “For grown-ups”: the language, the painting time, the level of detail, the paper size and the switches for sounds, spoken hints, calm motion and printing.
The state of your subscription – that is, whether the full catalog is open and until when. This note comes from what the store reports and contains no payment details, no account number and no name.

None of this information leaves the device. It holds neither a name nor a date of birth nor an email address – the app never asks for anything of the kind.

A note on device backups: These files lie in the documents folder of the app and can therefore end up in the backup your device creates by itself (iCloud backup on Apple, automatic backup on Android). That is a function of your operating system which you control in the settings of your device; I have no access to these backups.

4. No advertising, no tracking, no accounts

No advertising. The app shows no advertising – neither anyone else’s nor my own. A locked picture is not even shown to a child as a grey tile, because that too would be an invitation to buy.
No analytics and no crash reporting libraries. No analytics tool, no ad network and no crash reporting service is built in. There is no profile, no usage statistic and no recognition across devices.
No advertising identifier. The app reads neither Apple’s advertising identifier (IDFA) nor Google’s (Advertising ID) and transmits no device identifiers.
No account and no sign-in. There is nothing to register and nothing to log into.
No sharing to social networks, no chat, no comments. These functions were deliberately not built.

5. Purchases through the App Store and Google Play

The subscription that unlocks all the pictures is handled exclusively through the store of your operating system – through the Apple App Store or through Google Play. The purchase screen sits behind the parent gate; a child does not reach it.

What reaches me in the process: no payment details, no name, no address, no email address and no account number. I do not learn who has bought anything. From Apple and Google I receive nothing but aggregated billing and sales reports that cannot be traced back to any individual person.

What the respective store processes: Apple or Google processes, on its own responsibility, the data of your store account, your payment details, the purchase and subscription history and the technical information needed to handle the transaction. I have no influence on this processing. The privacy policies of these providers apply:

What the app receives from the store: the prices for your country, the information as to whether the trial is still open for this device, and a confirmation that a purchase exists. On Apple devices the operating system checks this confirmation itself on the device; there is no channel back to me.

What Google Play also records on Android devices: On Android the app asks Google Play at startup whether a subscription exists. Google’s library that does this (the Google Play Billing Library) sends technical logs to Google: whether a request or a purchase succeeded and whether the connection to the store worked. According to Google, they are used to improve the library and to fix errors. They contain nothing about what your child paints and no advertising identifier. I do not receive these logs and cannot see them. This is why the Data safety section on Google Play lists them as “Diagnostics”. Apple devices send no such logs.

6. Printing, sharing and saving to Photos

All four ways out of the app sit behind the parent gate: printing the blank outline, printing the finished picture, sharing the picture as a PDF and saving the picture to Photos.

The PDF is created on your device. For printing and sharing, the app opens the print or share dialog of your operating system – where the file goes from there is decided by you alone in that dialog. Nothing is transmitted to me in the process.

For “Save to Photos” the app asks for the permission needed to do so. It is expressly limited to adding: the app may put a picture there, it may not see your photos and may not read them. The app requests no further permissions – no access to the camera, the microphone, your location, your contacts or your calendar.

7. Links that lead out of the app

In three places the app can open an internet address: this privacy policy, the terms of use and the subscription management of the store. All three links sit behind the parent gate and nowhere else.

The app does not call up these addresses itself; it hands them to your operating system, which then opens its browser. From that moment on, the privacy notice of the page called up applies – for my own pages, the privacy policy of www.ausmal.club.

8. Children

Ausmal Club is aimed at children of about three to eight years and meets the special requirements that Apple sets for the Kids Category and Google for the Families program.

No personal data of children is collected, stored or transmitted – no device identifiers and no location data either.
Children’s drawings can be personal data. That is precisely why they leave the device only when an adult expressly passes them on from behind the parent gate.
Every purchase, every permission request and every way out of the app sits behind the parent gate.
There is no advertising, no analysis by third parties, no communication function and no way to upload content.

Since I collect no data and the app records nothing about children, consent from a parent or guardian under Article 8 GDPR is not required in order to use the app. As for handling a subscription: contracts are entered into by adults, and the purchase screen is closed to children by the parent gate.

9. Deletion

You delete individual pieces of artwork in “For grown-ups” in the “Artwork” section. You delete all of the app’s data by removing the app from your device – artwork, settings and the subscription note then disappear completely, because none of it lies anywhere else. Check the backups of your device beforehand if you have created one.

An existing subscription does not end as a result. It is cancelled through the store (see terms of use, “Cancellation”).

10. Your rights

Under the GDPR you have the following rights towards the controller: the right of access (Article 15 GDPR), to rectification (Article 16 GDPR), to erasure (Article 17 GDPR), to restriction of processing (Article 18 GDPR), to data portability (Article 20 GDPR) and the right to object (Article 21 GDPR).

In practice, a request for information about the app is a short affair: I process no data about you or your child and can therefore neither give information about such data nor delete it – it does not exist with me. Write to me all the same if you have a question about it: kontakt@ausmal.club.

If your questions concern payments, invoices or your store account, please put them to Apple or to Google – that is where this data is held.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for me is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, www.ldi.nrw.de (opens in a new tab).

11. Changes to this policy

This policy describes the app as it stands today. If a function is added that processes data, I will change this policy beforehand – and write here what has changed. The version that applies at any given time is always available at this address; it can also be reached from inside the app.

Changed on 7 October 2026: section 5 now names the technical logs that Google Play records on Android devices.

Privacy in the app