Privacy Policy
Last updated: March 2026
Protecting children and all users is our top priority at "Better 1UP". This privacy policy informs you about data processing in the app and on this landing page.
1. Principle: No Data Collection from Students
We designed Better 1UP explicitly so that absolutely no personally identifiable information (PII) is collected from children.
- No student accounts are created or required.
- No names, device IDs, email addresses, or location data of children are requested or stored.
- Learning progress in the app is processed exclusively via an anonymous, device-bound session.
2. Usage by Teachers
Teachers also do not need a traditional account. The classroom recovery key is generated securely and stored locally on the device, so no email address is required.
3. Strictly Ad-Free and "No Tracking"
Better 1UP is an educational product for classrooms. We guarantee:
- No third-party tracking: We do not use external analytics services. Anonymous gameplay telemetry (response times, correctness rates) is processed on our SpaceTimeDB game server and evaluated via Hugging Face infrastructure to power adaptive difficulty. This is based on legitimate interest (Art. 6(1)(f) GDPR). No personally identifiable information is included.
- No ads: We do not show any in-app advertising or sponsored content.
- No data sales: Data is never sold to third parties or misused for marketing.
4. Hosting of this Website
Our infrastructure for this landing page is provided by Vercel Inc. When visiting the site, technical connection data (e.g., IP address) is inevitably processed to deliver the page. This is technically necessary and GDPR-compliant (Art. 6(1)(f) GDPR).
6. Data Retention Period
Anonymous session data and gameplay telemetry are retained for 12 months strictly to support the adaptive learning engine, after which they are automatically deleted.
7. Your Rights & Data Processing Agreement (DPA)
Under the GDPR, you have the right to request access, correction, deletion, and restriction of processing regarding your data. You also have the right to lodge a complaint with a supervisory authority (e.g., Berliner Beauftragte für Datenschutz). For schools, we process data strictly under Article 28 GDPR. A standard Data Processing Agreement (DPA) is available upon request.
Account Deletion / Kontolöschung
To request the complete deletion of your recovery token and math sprint data, please send an email to feedback@up.bilharz.eu.
All associated gameplay data will be wiped within 7 days.
Um die vollständige Löschung Ihres Wiederherstellungsschlüssels und Ihrer Spieldaten zu beantragen, senden Sie bitte eine E-Mail an feedback@up.bilharz.eu. Alle zugehörigen Daten werden innerhalb von 7 Tagen restlos gelöscht.
8. Contact for Privacy Inquiries
Controller within the meaning of the GDPR:
Lars Bilharz
Boppstraße 3
10967 Berlin
E-Mail: feedback@up.bilharz.eu