Sales launch preparation · Updated 25 October 2026

Privacy policy for Zudoria

Controller and contact

schukai, Eichenstraße 26, 82290 Landsberied, Germany, is responsible for the Zudoria software and license service. Contact hey@schukai.com for privacy questions and requests about your data. The linked imprint contains the full provider identity and further contact details.

Data kept on your device

Zudoria stores courses, media, drafts, learning progress, participant details you enter and local completion records on your device. These contents are not sent to the license service. The first sales release contains no advertising, usage analytics or automatic course synchronization. The 30 usage days are counted locally.

If you share a course file or completion record with another app, you choose the recipient and transfer service. That service has its own privacy terms. Camera access and media selection are used at your request to create content. You may cancel selection and deny or later revoke requested Android permissions. Zudoria does not require contacts or location access.

Depending on your device settings, Android or the device manufacturer may include app data and keys in system backups or transfers to a new device. Those backups are operated by the relevant system service. You can also create a workspace backup (.zudoria-backup). It contains courses, drafts, learning progress and participant data, is not encrypted, and excludes device identity, license, trial counter and sync state. You choose where it is stored or shared; Zudoria does not upload it itself. Also check your device settings for system backups.

Purchasing and restoration

Google Play processes purchases using your Google account. Zudoria receives no complete payment details and requires no separate user account. When you purchase or restore a purchase, the app sends the purchase receipt, product identifier, a public device key and a signed request identifier over HTTPS to the Zudoria license service. It checks the purchase status with Google and acknowledges eligible purchases.

The service stores the encrypted receipt, derived license identifier, purchase status, enrolled public device keys, decision revision and up to 64 hashed processed purchase-notification identifiers. The app does not send the private device key to the license service. Your IP address is processed for the connection and temporarily held in memory for rate limiting. The license application does not write receipts, request contents or IP addresses to access logs. Operational counters are aggregated without user identifiers.

Purposes and legal bases

License verification and restoration perform the software purchase contract (GDPR Article 6(1)(b)). Service security and abuse prevention rely on the legitimate interest in reliable license operation (Article 6(1)(f)). Support information is processed to answer your request. Purchase verification is necessary for paid activation; the local trial is available without a software purchase.

Recipients and retention

Google receives the information needed to process purchases and check purchase status. The planned server and encrypted backup provider is DigitalOcean in Frankfurt. Actual provisioning and provider agreements must be completed before sales begin. Google services also use Google's privacy policy, including its explanation of international processing.

License records are retained as needed to maintain and restore the perpetual software entitlement and resolve refunds, subject to applicable legal retention duties. Encrypted backups are retained for 30 days. Remove local content within the app or clear app data through Android settings; first save any files you need. Contact schukai above for access, correction or deletion of server-side license data. Any necessary continued retention will be explained for your request.

Your rights

Subject to applicable law, you may request access, correction, erasure, restriction and data portability, and object to processing based on legitimate interests. You may complain to a data protection supervisory authority. An organization using the software is additionally responsible for its own participant data, training content and distribution.