Privacy Policy

for Untixx – timetable, homework and exams.

Last updated: [INSERT DATE]

⚠️ Complete before publishing Every entry in square brackets must be replaced with real information. Without complete controller details this policy is not valid under the GDPR.

1. Who is responsible?

The controller under the General Data Protection Regulation (GDPR) is:

[FULL NAME OR COMPANY]
[STREET AND NUMBER]
[POSTAL CODE, CITY, COUNTRY]
Email: [CONTACT EMAIL, e.g. support@untixx.com]

No data protection officer has been appointed; this is not required for an offering of this size. [IF ONE EXISTS, LIST THEM HERE.]

2. The short version

Untixx has no server of its own. There is no Untixx database your data flows into. Everything you enter stays either

on your device, or
in your own private iCloud (Apple CloudKit, private database) – if you use syncing.

We, as the provider, have no access to your private iCloud. We cannot read or hand over your timetable, homework, exams, profile picture or messages.

Untixx contains no advertising, no tracking, no analytics software and no sharing with third parties.

3. What data is processed – and why?

3.1 Sign in with Apple (optional)

Untixx can be used entirely without an account. Timetable, homework and exams work without any sign-in.

If you choose to sign in with Apple, Untixx receives from Apple:

an anonymous user identifier (a random string that is specific to Untixx),
your name, if you share it – and only the very first time you sign in.

Untixx does not request your email address. It is therefore neither transmitted nor stored. Should a future version ask for it, the same rule applies: at sign-in you decide yourself whether to share your real address or use Apple’s Hide My Email.

Purpose: associating your data with you, syncing across devices and the parent connection.
Legal basis: Art. 6(1)(b) GDPR (performance of the user agreement) and Art. 6(1)(a) (consent), since signing in is voluntary.
Where it is stored: on your device and – if syncing is on – in your private iCloud.

3.2 What you enter yourself

timetables, lessons, subjects, teachers, rooms, times, class name
homework and exams including notes and dates
your name and your profile picture
photos or screenshots of your timetable that you scan

Purpose: displaying and reminding – exactly what you use the app for.
Legal basis: Art. 6(1)(b) GDPR.
Where it is stored: on your device and – if syncing is on – in your private iCloud.

About scanning: text recognition runs entirely on your device (Apple’s Vision framework). The image is not uploaded and is not transmitted to us.

3.3 Parent mode (optional)

When you connect a parent, an iCloud share is created between your Apple account and theirs. Only what you explicitly share is transferred – you switch timetable, homework and exams on and off individually.

A copy of the shared entries is created. Your original data stays with you.
Messages and nudges only ever run between you and the parent you invited yourself. There is no public content and there are no strangers.
You can end the connection at any time under Settings → Parent access → Disconnect. From that moment your parent sees nothing new.

This data also lives in the private and shared iCloud areas of the Apple accounts involved. We have no access to it.

Legal basis: Art. 6(1)(a) GDPR (consent), given by inviting and by the individual sharing switches, and revocable at any time.

3.4 Notifications

Reminders for homework and exams are created by your own device. For messages and nudges from parent mode, Untixx registers with Apple’s push service. The content travels through Apple, not through us.

3.5 Purchases: none

Untixx is currently completely free. There are no in-app purchases and no subscriptions, so no payment or billing data is created either – neither by us nor through the app.

3.6 Apple Watch

The iPhone sends the watch a reduced copy of the timetable over Apple’s device connection. It does not leave the pair of devices.

4. Recipients: none

Your data is not shared with third parties and not sold. There are no ad networks, no analytics providers and no processors other than Apple.

Apple Inc. and Apple Distribution International Ltd. provide iCloud, the push service and the App Store. Apple’s own privacy policy applies to those services (apple.com/legal/privacy). Any transfer to third countries takes place under Apple’s own safeguards; we transfer nothing ourselves.

5. How long is data kept?

On the device: until you delete it in the app or remove Untixx from the device.
In your private iCloud: until you delete it in the app. Apple keeps deleted data for a short time depending on your backup settings – you control this in the iOS Settings under iCloud.
At the parent’s end: the copy disappears as soon as the connection is ended.

Since we hold no copy, there is nothing on our side that could be retained.

6. Your rights – and how to exercise them

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may withdraw consent at any time with effect for the future.

Deletion – the fastest route

Because we hold no copy of your data, you delete it yourself, completely, without having to ask us:

In the app: Settings → Account → Delete account. This removes your account, all data on the device, the data in your private iCloud, any existing parent connection, all messages and all settings. If iCloud does not respond, the app tells you explicitly what was left open.
Additionally possible: remove Untixx under iCloud → Manage Storage in the iOS Settings, and delete the app from your device.

For anything else you can reach us at [CONTACT EMAIL]. Please note: we can only give information about what we hold – and that is nothing.

You also have the right to lodge a complaint with a data protection supervisory authority, either where you live or where the controller is based. [IF APPLICABLE, NAME THE COMPETENT AUTHORITY AND ITS ADDRESS.]

7. Children and young people

Untixx is aimed at school students and is therefore used predominantly by minors. We take that seriously:

Untixx collects no data for its own purposes, runs no advertising and does no profiling. There is nothing a child could be targeted or recognised by.
There is no public content, no search for other users and no contact with strangers. Messages are only possible between a child and the parent that child invited.
The child decides individually and for itself what parents can see, and can end the connection at any time.
The app can be used without an account. Anyone who does not sign in discloses no personal data at all.

Where processing requires consent and the person using the app has not reached the age relevant under Art. 8 GDPR or their national law (16 years, in some Member States 13 to 15), the consent of a holder of parental responsibility is required. Parents and guardians may exercise the rights in section 6 on behalf of their child and can contact us at [CONTACT EMAIL].

8. Security

Transmission to and from iCloud is encrypted by Apple. Data on the device is protected by iOS device encryption as long as a passcode is set. Because there is no Untixx server, there is no central place that could be attacked.

9. Changes to this policy

If Untixx gains features that change anything described here, this policy will be updated. The version published here at the time is the one that applies.