Privacy policy for the “Fensterflora” app

This policy applies to the Android app “Fensterflora” (package name com.fensterflora.app). The legally binding version is the German version; this translation is provided for convenience.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and the provider of the app on Google Play (developer name “Tobisreise”) is:

2. In short

There is no user account, no advertising, no analytics or tracking tools and no in-app purchases. Google processes technical data during automatic update checks (section 7). If you connect several devices under “Connect devices”, your game and your diary are sent to our server in encrypted form; we cannot read either (section 10). For Android backup, see section 6.

3. What is stored on your device

So that your game continues the next time you open it, the app stores locally on your device:

• your game progress: plants and the names you give them, companion, clothes, in-game coins, finds, how the last games with the companion turned out, and settings (for example language, sound, window view, the companion’s pace and whether and when you want reminders);
• your answers to his “question of the day” (for example coffee or tea);
• which predefined answers you tapped in conversations with the companion (only the last 30, each with a timestamp). There is no free text input. These can include answers that say something about how you feel – for example that you were ill or not doing well. Unlike the diary, they are not stored in encrypted form;
• optionally your name or nickname, if you tell the companion or enter it in the settings, so he can call you by it. It is not stored in encrypted form in your game progress; you can change or delete it in the settings at any time;
• optionally your birthday (day and month only), if you enter it in the settings, so the companion can congratulate you;
• your diary, if you use it (see section 4).

The data stays stored until you delete it (section 11) or uninstall the app. It does not leave your device – except through Android backup, if you have it enabled (section 6), and in encrypted form if you connect devices (section 10). Storing this data is strictly necessary for the use of the app you have requested (Section 25(2) no. 2 TDDDG, German Telecommunications Digital Services Data Protection Act).

4. Diary

Diary entries are encrypted on your device with your password (PBKDF2 and AES-GCM). The password is not stored and never transmitted. The app does not analyse the entries, and nobody but you can read them – not even us. They never leave your device unencrypted: if you connect devices, the diary travels only in this encrypted form via our server to your other devices (section 10). We do not pass it on to third parties. If you forget the password, we cannot recover the entries either. If you save your diary with “Save as text”, an unencrypted text file is created on your device that is no longer protected by your password.

5. Notifications

If you allow it, the app reminds you with notifications, for example when your plant is thirsty. Whether the app may show notifications is managed by Android. The app remembers your setting and stores the scheduled reminders (time and text) on the device so they survive a restart. There is no server and no push service. You can switch notifications off at any time in the app or in the Android settings.

6. Android backup

If automatic Android backup is enabled on your device, Android stores the app’s data in your own Google account and restores it when you reinstall the app. Game progress, name, birthday and conversation answers are backed up as they are stored in the app; the diary only in encrypted form. We have no access to this backup. Google is responsible for it; Google’s terms and privacy policy apply. You can switch backup off in the Android settings.

7. Google Play

When you download and update the app via Google Play, Google, as the store operator, processes its own data, for example about your Google account, the download and – if you allowed this in Android – crash and performance reports. Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible for this; the Google privacy policy applies. In the Google Play Console we see statistics and crash reports compiled by Google (such as device model, Android version and where an error occurred), without names or contact details.

From version 1.01, the app automatically asks Google Play about available updates when it opens and returns to the foreground. Google processes technical device metadata, the app version and the list of installed modules and asset packs to determine update availability and size. Transmission is encrypted. Our update integration does not send game progress, conversation answers or diary entries to Google. You confirm downloading and restarting separately; “Later” postpones the offer but does not disable automatic checks. See Google’s update documentation for further details.

8. Closed testing

If you take part in the closed test of the app, we add the email address of your Google account to the tester list in the Google Play Console so that Google can provide the test version to you. If you send feedback via Google Play, we see it with your name or email address. The legal basis is Art. 6(1)(b) GDPR (your participation in the test). We remove you from the list when the test ends or when you ask us to.

9. Permissions

The app only uses permissions for its features: showing notifications, rescheduling them after the device restarts and briefly keeping the device awake to deliver them (wake lock). The app uses the “Internet” permission to connect your devices (section 10). It also asks Google Play about available updates (section 7); Google Play handles their download and installation. Game content, sounds and music are already included in the app.

This also applies to sounds and music: they are included in the app and are not downloaded later, so no data goes to the services they come from when they play. The sounds are public-domain recordings (CC0) from Freesound; we created the music with the AI service Suno.

10. Connect devices (sync)

Under Settings → “Connect devices” you can choose to connect several devices to the same windowsill, for example the app and the game in the browser. For this, the app creates a sync code on your device. From it, two identifiers and two keys are derived on the device – one identifier and one key each for the game and for the diary. Both are stored separately; however, the separate identifiers do not prevent the two from being linked using technical connection data. With the key, your game – including conversation answers and, if entered, your birthday – is encrypted on the device (AES-GCM) and only then sent to our server. If you use the diary, it travels along too: it is already encrypted with your diary password (section 4) and is encrypted a second time with the sync code. Device settings such as sound and notifications are not transmitted.

On the server we only store the identifiers, the encrypted blocks, a version number for each and the time of the last change – no name, no email address and no IP address. We never receive the sync code, the keys or your diary password; we cannot read the content or link it to anyone. The code is kept on your connected devices. Anyone who knows it can load the game – so don’t pass it on. Even with the code, only someone who knows your diary password can read your diary.

The server runs at Cloudflare (Cloudflare Workers and a D1 database stored in the EU), acting as our processor. During transmission Cloudflare processes technically necessary data such as your IP address; section 3 of the website privacy policy (German) applies. The legal basis is Art. 6(1)(b) GDPR: you are using a feature you switched on yourself.

The blocks stay stored until you choose “Stop everywhere and delete”; anything not sent for twelve months is deleted by the server automatically. If you delete your diary, only a note without content remains in its place there, so that it disappears from your other devices too. “Stop on this device” only makes this device forget the code. If you lose the code, we cannot restore the game on the server either.

11. Deleting

You delete your game progress, conversation answers, name, birthday and settings in the app under Settings → “Reset saved game”. You delete your diary in the diary with “Delete diary” – with connected devices, also there and on our server. To remove everything at once, uninstall the app or clear the app’s storage in the Android settings (Apps → Fensterflora → Storage). To delete a backup stored in your Google account, use your Google account or Android settings. You delete the game and the diary on our server under Settings → “Connect devices” → “Stop everywhere and delete”.

12. Contact by email

If you write to kontakt@fensterflora.com, section 5 of the website privacy policy (German) applies.

13. Not a help or therapy service

The companion is a game character. Conversations with him do not replace counselling, therapy or medical help. If you are feeling really bad, findahelpline.com lists free, anonymous helplines in your country. If you are in danger, call your local emergency number.

14. Age group

The app is intended for adults aged 18 and over. Apart from the encrypted game when someone connects devices, it does not send data from anyone to us, including children.

15. Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). We hold no data about you – unless you write to us or take part in the test. If you connect devices, your game and your diary are stored in encrypted form on our server; we can neither read them nor link them to you, and you can delete them yourself at any time (section 10). Feel free to contact us by email with any questions. You also have the right to lodge a complaint with a data protection supervisory authority, for example the Hessian Commissioner for Data Protection and Freedom of Information (datenschutz.hessen.de).

16. Changes

We will update this policy as soon as the app or the data processing changes.

Last updated: October 2026