Privacy Policy – Dropling

Effective 27 July 2026

The data controller is Duckino, contact: info@duckino.com. Dropling is designed to collect as little about you as possible. We use no ads, no third-party tracking, and no user accounts on our servers.

1. What stays with you

Lessons, questions, answer history and learning progress are stored on your device and synced via your private iCloud (CloudKit). We have no access to this data – it belongs to your Apple ID. The one exception is a lesson you deliberately share as a link – see section 3.
Sign in with Apple (optional) stores an identifier and name only on your device; they are never sent to our servers.

2. What our servers process

When generating an AI lesson, the app sends to our server (ai.dropling.app, hosted in the EU):

the lesson topic and language – forwarded to the AI service for processing; we do not store them;
Apple technical verification tokens (DeviceCheck / App Attest) – used to enforce limits and prevent abuse; we only store anonymous technical identifiers and usage counters that cannot identify you;
for subscribers, Apple’s signed purchase receipt – it contains an anonymous transaction identifier (no name or payment details); we store only the identifier and a monthly usage counter.

The lesson topic is processed by the AI service OpenRouter (USA) and the Google Gemini model as processors to generate the content. We send them no identifiers of your device or person.

3. Sharing a lesson as a link

Sharing a lesson is a voluntary action you start yourself. Only then does a copy of the lesson content (title, questions and answers) get stored on our server under a random code in the link dropling.app/l/{code}. Note that:

The link is the only "password" – anyone who has it can view and save the lesson. Do not share lessons containing sensitive or personal content.
Only a snapshot taken at the moment of sharing is stored; your later edits are not propagated to the shared copy.
Along with the copy we keep an anonymous technical identifier of the sending device (App Attest) in case of abuse. It contains no name or contact details.
Answer history and learning progress are never shared – only the lesson content.

4. Payments

Subscriptions are processed exclusively by Apple. We have no access to your payment details.

5. Retention

Anonymous counters and technical identifiers are kept for the lifetime of the service, as they enforce usage limits (free generations, monthly subscription limit).

Shared lessons are kept until we delete them at your request, so that a link you sent to someone keeps working. To have a specific link deleted, write to info@duckino.com and include the code from the link.

6. Your rights

Under the GDPR you have the right of access, rectification, erasure and other rights. Since our servers hold only anonymous technical data, you can delete most data yourself by removing the app and its iCloud data. For anything else, contact info@duckino.com.