Privacy Policy

for the Untixx app – timetable, homework and exams.

Last updated: 3 September 2026, 23:46

1. Who is responsible?

The controller responsible for data processing under the General Data Protection Regulation (GDPR) is:

• Mihaly Szolnoki
• Wankhamerstraße 8
• 4800, Attnang-Puchheim, Austria
• Email: support@untixx.com

There is no data protection officer; a service of this size is not required to appoint one.

2. The short version

Untixx runs its own server. If you create an Untixx account, your timetable, homework and exams are stored there so they're available across multiple devices and so parent mode can work.

• The server is located in Spain, operated by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur. Your data does not leave the European Union.
• There is no advertising, no tracking, no analytics software and no selling of data – the server changes nothing about that.
• The app can still be used without an account. Without an account, everything stays on your device and nothing is created on the server.

3. What data is processed – and why?

3.1 Account

For an account, the following is stored:

• your email address,
• a password checksum (argon2id). The password itself is not stored and cannot be reconstructed from the checksum,
• when using "Sign in with Apple", the user identifier issued by Apple,
• a display name, if provided, plus your chosen language and your role (student or parent),
• the time of registration and of email confirmation,
• one session per signed-in device: the device name as reported by iOS, and the start and expiry of that session. This lets you see, and end, where your account is signed in from within the app.

Purpose: signing in, associating your data, and recovering access if you forget your password.
Legal basis: Art. 6(1)(b) GDPR (performance of the contract for use of the service).

Your email address must be confirmed via a link. Without confirmation, there is no access to any data. This prevents someone from creating an account using someone else's address.

3.2 What you enter yourself

• Timetables, lessons, subjects, teachers, rooms, times, class name
• Homework and exams, including notes and dates
• Name and profile picture

Purpose: display, reminders, and syncing between your devices.
Legal basis: Art. 6(1)(b) GDPR.
Where stored: on your device and on the Untixx server.

Scanning a timetable still happens entirely on the device (Apple's Vision framework). The photo is not uploaded to the server; only the recognised text is saved to your account as a timetable.

3.3 Parent mode (optional)

The connection is created via a short, eight-character invite code that the child generates and which expires after 30 minutes. Once a parent redeems the code, the connection is established – but nothing is shared yet. A child can connect several adults; each connection has its own sharing settings.

• The child switches on timetable, homework and exams individually. Anything not shared is never sent to the parent side at all – it is not merely hidden.
• Notes on homework and the topic of an exam are never sent to parents, even when homework or exams are shared. Parents see that they exist – not what was privately noted about them.
• Through the connection, parents see the child's display name, not their email address. Conversely, the child sees the display name and email address of each connected parent, so they know who is watching. Profile pictures are not shared in either direction.
• Messages and nudges only ever pass between the child and the parents that child invited. There is no public content, no searching for other users, and no contact with strangers.
• The connection can be ended by either side, at any time. Nothing flows afterwards; the messages and nudges belonging to that connection are deleted. If the same connection is later re-established, all sharing settings start again at "off".

Legal basis: Art. 6(1)(a) GDPR (consent), given by sending the invitation and by the individual sharing toggles, revocable at any time.

3.4 Notifications

Reminders for homework and exams are still generated by your device itself; nothing leaves the device for these.

For messages and nudges from parent mode, the Untixx server may send push notifications via Apple's notification service (APNs). Once you allow notifications, a device token issued by Apple is stored for this purpose, along with the platform, the app identifier, and your chosen language. The token is tied to the device, not to a person, and is deleted as soon as you sign out on that device or delete your account.

3.5 Newsletter (optional)

For the newsletter, we store your email address, your chosen language, and the time and IP address of your sign-up and confirmation. Storing the time and IP address is a legal requirement, serving as proof that consent was given.

We use double opt-in: after signing up, you receive an email with a confirmation link. Consent only takes effect once you click it. Every newsletter email contains an unsubscribe link that works without signing in and takes effect immediately.

Legal basis: Art. 6(1)(a) GDPR (consent); for retaining proof of consent, Art. 6(1)(c) GDPR.

3.6 Server operating data

Calling the interface creates technical logs: time, the path called, and the response code. Content is never logged, and passwords and tokens explicitly never are. IP addresses are processed only in shortened, non-reversible form to defend against abuse, and are deleted after 7 days.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).

3.7 Purchases: there aren't any

Untixx is currently completely free. There are no in-app purchases and no subscriptions, so no payment or billing data is created either – not with us, and not through the app.

4. Recipients and processors

Your data is never sold and never passed on for advertising purposes. Only the following are involved:

Data processing agreements under Art. 28 GDPR are in place with these processors. We do not ourselves transfer data to third countries; to the extent this happens through Apple's own services, Apple's own safeguards apply.

5. How long is data kept?

• Account data and content: for as long as the account exists. Once the account is deleted, it is removed immediately and permanently.
• Individually deleted entries: remain as an empty deletion marker for up to 90 days, so a device that has been offline for a while still learns about the deletion. The content itself is already gone by then. After that, the marker disappears too.
• Newsletter: until you unsubscribe. Proof of consent is kept for a further [3] years after unsubscribing, because the burden of proving that consent was given lies with the sender.
• Unconfirmed sign-ups: deleted after [30] days.
• Invite codes: expire after 30 minutes and are deleted seven days later.
• Sessions: a refresh token is valid for 60 days; expired sessions are removed 30 days later.
• Technical logs: 7 days.
• Backups: the nightly backup is kept for 14 days. A deletion therefore only fully reaches the backups after at most 14 days.

6. Your rights – and how to exercise them

Under the GDPR, you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). Any consent you have given can be withdrawn at any time, with effect for the future.

Access

In the app, under Settings → Account → My data, you can download a complete file of everything the server has stored about you, at any time. Alternatively, an email to support@untixx.com is enough.

Erasure

In the app, under Settings → Account → Delete account. This deletes the account, all content on the server, all parent connections including messages, all signed-in devices, and any newsletter entry. This cannot be undone.

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the one at your place of residence or at the controller's place of business: Austrian Data Protection Authority, Barichgasse 40, 1030 Vienna.

7. Children and young people

Untixx is aimed at pupils and students, and is therefore used predominantly by minors. We take that seriously:

• Untixx does not collect data for its own purposes, and runs no advertising and no profiling.
• There is no public content, no searching for other users, and no contact with strangers. Messages are only possible between a child and the parents that child has invited.
• The child decides individually and on their own what parents see, and can end the connection at any time.
• Use without an account is possible. Anyone who does not sign up gives no personal data to the server at all.

For processing based on consent – here, parent mode and the newsletter – Art. 8 GDPR applies: if the user is younger than the age that applies in their country (Austria 14, Germany 16; between 13 and 16 in other member states), consent must be given, or authorised, by the holder of parental responsibility.

At registration, date of birth and country are collected. If the person is below the age threshold that applies in their country, registration is not completed. Instead, the email address of a parent or guardian is requested; that address receives an email with a confirmation link. Only after that link is clicked does consent count as given, and the child's account is activated. Without that confirmation, parent mode and the newsletter remain locked for the account.

Parents and guardians can exercise the rights listed in section 6 on behalf of their child, and can contact us at support@untixx.com.

8. Security

• The connection between the app and the server is encrypted throughout (TLS, HSTS enforced).
• Passwords are hashed with argon2id and never stored or logged in plain text.
• Sign-ins use short-lived access tokens (15 minutes). Long-lived refresh tokens rotate on every use; a stolen token is thereby detected and the entire chain is revoked.
• Registration, sign-in, and password reset are rate-limited against mass guessing.
• The database is not reachable from outside; nightly backups are kept on the same server and retained for 14 days.

9. What remains from before we ran our own server

Up until this version, Untixx ran without its own server: syncing and parent mode went through your private iCloud. That has ended – Untixx no longer stores anything in iCloud and no longer reads anything from it.

What reached your device via iCloud back then was not deleted: a parent still sees the last state they received in the app, with a note that it is no longer being updated. This data exists only on the device. It can be removed in the app with a button; it disappears anyway when the account is deleted.

Any copies still sitting in your private iCloud from that time can be removed by you, in iOS Settings under Apple ID → iCloud → Manage Storage. Untixx can no longer reach them there.

10. Changes to this policy

If Untixx gains features that change anything described here, this policy will be updated accordingly. The version published here at any given time is the one that applies.