Last updated: 22 September 2026
This is a translation. In case of discrepancy, the German version prevails.
Jan Milan Eyni, address as stated in the
imprint.
Contact: contact@papagayo.dev
Papagayo is built so that as little as possible accumulates about you. The app works offline; your cards and your progress live on your device. You only need an account for the subscription and to keep the same progress across several devices.
There is no password of ours. You sign in with your existing Google or Apple account. We are supported in this by Amazon Cognito, a service of Amazon Web Services EMEA SARL, operated in the Frankfurt am Main region (eu-central-1).
On first sign-in, the provider you chose transmits to Cognito:
| Data | Purpose |
|---|---|
| A persistent identifier of your account at the provider | to recognise you on every sign-in |
| Your e-mail address | to address you and to attribute your account |
| Whether the provider has verified that address | because we no longer verify it ourselves |
These details reside in Cognito only. Our own database does not store your e-mail address.
We learn nothing from Google or Apple about what you do there. Conversely, the provider learns that you sign in to Papagayo – that cannot be avoided with this method. The providers' own privacy policies apply in addition.
| Data | Purpose | Legal basis |
|---|---|---|
| Your account identifier (a random string, not your e-mail address) | to attribute your account | Art. 6(1)(b) GDPR – contract |
| Time of account creation | traceability, accounting for the free month | Art. 6(1)(b) GDPR |
| A display name, if you set one | presentation in the app | Art. 6(1)(b) GDPR |
| Timestamps of your recent calls to our interface, for at most five minutes | to prevent abuse and runaway cost | Art. 6(1)(f) GDPR – legitimate interest |
The access timestamps delete themselves five minutes after the respective call.
Calling our interface produces technical logs at Amazon Web Services (time, address called, status code, request identifier). They serve operation and troubleshooting; the legal basis is Art. 6(1)(f) GDPR. They are deleted automatically after 30 days.
These pages are delivered through Amazon CloudFront. No cookies are set, no analytics are embedded and no content is loaded from third-party servers. Access logs of the delivery service arise in the usual way.
This feature is not yet in operation. Once it is, your progress – which cards you answered, when and how – will be stored on our servers so that it is available across several devices. Synchronising happens only when you trigger it. This section must be revised and dated before the feature goes live.
The subscription is handled as an in-app purchase through Apple or Google. We do not receive payment data – neither card numbers nor billing addresses. They reside with the respective provider, whose privacy policy applies to them.
From there we only learn whether a valid subscription exists for your account. We do not link anything to your means of payment.
Amazon Web Services EMEA SARL as a processor (operated in Frankfurt am Main). Google Ireland Limited or Apple Distribution International Ltd. respectively, insofar as you sign in through them. Transfer to third countries is not intended; with the sign-in providers it cannot be ruled out, and they rely on the European Commission's standard contractual clauses for this.
Your account exists until you delete it. On deletion we remove your entry in our database and your identity in Cognito. Suspended accounts remain as long as the suspension applies – otherwise it could be circumvented by signing in again.
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). Please write to the address given above. You may also lodge a complaint with a supervisory authority; the authority of your residence or of our seat is competent.
We adapt this policy when the processing changes. The version published here with the date given above is the one that applies.