Last updated: September 2026
This is a translation of the German original. In case of any discrepancy, the German version ("Datenschutzerklärung") prevails.
The following notes give an overview of what happens to personal data when you visit this website. Personal data is any data by which a person can be identified. Because our service is aimed at children, we take the protection of this data particularly seriously (Art. 8 GDPR).
In short: KI-Forscher can currently be used without a user account. Learning progress is stored solely in the local storage of your device and is not transmitted to us. Beyond the page request itself (see server log files), we currently do not process any personal data of children.
The controller for data processing on this website is:
Shiwani Goswami
Stover Str. 24b
21423 Drage
Germany
Email: app@goswami.de
Our service is aimed at children and young people. The processing of personal data of a child under the age of 16 is lawful only if and to the extent that consent is given or authorised by the holder of parental responsibility.
In the current version of the app no such processing takes place: there are no accounts, no sign-up and no transmission of children's data to us. As soon as we introduce features for which personal data is processed (e.g. user accounts), we will obtain the consent of a parent or guardian beforehand.
The ki-forscher.de website itself stores nothing in your device's local storage. The app stores learning progress, the chosen language and the accessibility settings there in order to provide its core functions (see section 7). This data stays on the device and is not transmitted to us or to third parties. The legal basis for storing it on your device is Section 25 (2) no. 2 TDDDG (technically necessary), as it is expressly required in order to provide the service.
This website uses no cookies — neither technically necessary ones nor analytics or marketing cookies. The information required for operation (see "Local storage") is kept exclusively in your device's local storage and is not transmitted to us. Because we use only technically necessary storage within the meaning of Section 25 (2) no. 2 TDDDG and employ no services requiring consent, a cookie or consent banner is not necessary.
The hosting provider (Vercel Inc.) automatically collects and stores information in server log files which your browser transmits. These are in particular:
This is collected on the basis of our legitimate interest in secure and stable operation (Art. 6 (1) (f) GDPR). This data is not combined with other data sources. Server logs are stored only for as long as is necessary for security and technical operation and are deleted regularly (as a rule within 30 days), unless a security-relevant incident requires longer retention.
To improve our service we use the privacy-friendly services "Vercel Web Analytics" and "Vercel Speed Insights". These measure anonymously and in aggregate which pages are requested and how quickly they load. No cookies are set and no information is stored on or read from your device; consent under Section 25 TDDDG is therefore not required. There is no cross-device tracking and no creation of user profiles, and the data is not combined with other sources. The legal basis is our legitimate interest in a user-friendly and performant service (Art. 6 (1) (f) GDPR).
A single level, expressly marked as optional ("Computer Vision: real camera recognition"), can use the device's camera. The camera is started only after prior, active consent via the browser's permission prompt and can be stopped again at any time with a button. The level is fully playable without the camera.
Processing takes place entirely locally in the browser on your device: only four average values are calculated from the camera image (red, green and blue components and brightness) and discarded immediately afterwards. No images or videos are recorded, stored or transmitted to us or to third parties; there is no face recognition and no recognition of persons. As no personal data is transmitted to us, no processing by us takes place in this respect.
This website is hosted externally at Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA). It is used for the purpose of providing our online service securely, quickly and efficiently (Art. 6 (1) (f) GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place with Vercel.
Insofar as data is transferred to the USA in the process, Vercel is certified under the EU-US Data Privacy Framework; in addition, the European Commission's standard contractual clauses apply, so that an adequate level of data protection is ensured.
Registration or sign-in is not possible in the current version of the app; the corresponding features are disabled. Should we enable user accounts, we will amend this privacy policy accordingly beforehand. The plan would then be sign-in by email or Google account (OAuth), processing name and email address in order to create the account and store learning progress (Art. 6 (1) (b) GDPR, or consent under Art. 6 (1) (a) in conjunction with Art. 8 GDPR). Until then, no such processing takes place.
The app stores everything on your device only. Learning progress, stars, stickers, the chosen first name and the chosen picture are kept in the device's local storage (localStorage). This data does not leave the device, is not transmitted to us and is not synchronised with other devices. We operate no server for the app that receives usage data.
The app contains no user account, no advertising, no tracking and no analytics services. It works completely offline; the only outbound connection arises when making or restoring a purchase, and runs exclusively through Apple.
Children. The app is aimed at children. We do not process any personal data of children on our systems. The first name a child may enter is voluntary, may be left empty and serves solely to address the child on the device. Consent under Art. 8 GDPR is not required because no processing by us takes place. All locally stored data can be deleted completely at any time via the parents' area.
Camera. One optional level can use the camera. The image is evaluated on the device only, is not stored and is not transmitted. Access is granted only after express permission and can be withdrawn at any time in the iOS settings.
Apple as a separate controller. Purchase, payment, invoicing and refunds are handled by Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, on its own responsibility. Apple is the independent controller for the data processed in that context (including Apple ID and payment details); Apple's privacy policy applies. We receive no payment data and no Apple ID from Apple, only aggregated, non-personal sales figures.
Within the scope of the statutory provisions you have the right at any time to information (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and a right to object to processing based on legitimate interests (Art. 21 GDPR). You may withdraw consent you have given at any time with effect for the future.
Because learning progress is stored locally on the device only, you can delete this data yourself at any time: in the app's parents' area via "reset progress", or by removing the app from the device.
To exercise your rights, and for any further questions about data protection, you can contact the address given in the imprint at any time. You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection of Lower Saxony (LfD Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany.