Privacy Policy

1. Controller

[Your name or company name], [address], [email] - see the Imprint page for full details.

2. Uploaded study material (PDF, JPG, PNG)

Files you upload are held in memory only for the duration of a single request. They are sent to our AI provider (Anthropic) to generate your worksheet, test, or learning game, and are never written to a database or disk on our side. Once the response is generated, the file is discarded - we do not keep copies, backups, or logs of your uploaded content.

3. Profile details you enter (age, grade, school type, subject, notes)

These optional fields are sent together with your upload purely to calibrate the generated content and are not stored after your request completes.

4. AI processing (sub-processor)

To generate results, your uploaded material and profile details are sent to Anthropic (the provider of the Claude AI models) for processing. [Placeholder - add Anthropic's role as processor to your records of processing activity / data processing agreement as required under Art. 28 GDPR.]

5. Feedback form

If you use the feedback page, the message you write (and name/email if you choose to provide them) is stored so we can read and, if you left an email, respond to it. [Placeholder - state your actual retention period and storage location.]

6. Language preference

Your EN/DE language choice is stored only in your browser's local storage on your own device - it is never sent to us.

7. Hosting and technical logs

This site is hosted on Vercel. Standard web server logs (e.g. IP address, timestamp) may be recorded by the hosting provider for security and abuse prevention; your IP address is also briefly used in-memory to rate-limit excessive requests. [Placeholder - confirm your hosting provider's log retention and add them as a sub-processor if applicable.]

8. Analytics

We use Vercel Web Analytics to understand overall traffic (e.g. page views, referring pages). It is cookie-free and does not use persistent identifiers to track you across visits or sites; data is aggregated and no individual profile is built.

Only if you click “Accept” in the cookie banner do we also use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to measure which pages and features are used. Google Analytics sets cookies (_ga, _ga_*) and processes usage data such as pages visited, device type and approximate region; IP addresses are not stored by Google Analytics 4. Google signals and ad personalisation are switched off. Legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw it any time via “Cookie settings” at the bottom of every page. Data may be transferred to the USA under the EU-US Data Privacy Framework. We do not use advertising cookies.

Android app

The PaperPunch Android app works without an account. Your profile (language, country, school type, grade, appearance), study plans, punches, your last 20 study materials and the photos/PDFs you used for them are stored only on your phone and are deleted when you uninstall the app. The app uses the camera only when you take a photo of your study material, and local notifications only for study plan reminders you switch on. To create material, your photos/PDFs and profile details are sent to our server and the AI provider as described in sections 2–4; while a material is being created, the finished result is held in our hosting provider's storage (Vercel, EU/US) for at most 24 hours until your app has fetched it, and then deleted. If you rate a material, we receive the stars, your optional comment, the format, subject, grade, country, language and score – no name, no photos. The app contains no ads and no analytics or tracking tools.

9. Minors

This service may be used by students who are minors. If you are under the age of legal majority in your country, please only use this service with the permission of a parent or guardian.

10. Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or object to the processing of your personal data, and to lodge a complaint with a supervisory authority. Contact us at hello@paper-punch.com to exercise these rights.

11. Changes to this policy

We may update this policy as the service changes; the current version always applies.