Privacy Policy

1. General Information and Data Controller

Controller within the meaning of the GDPR:

BirdFlai UG (haftungsbeschränkt) in formation
Tarpenbekstraße 13
22848 Norderstedt
Germany

Contact:
Email: chrjan297@gmail.com
Phone: +491722774215

2. Scope and Legal Basis of Data Processing

We process personal data of our users only to the extent necessary to provide our app "CaseCruncher" and our website "https://www.case-cruncher.com". The processing is carried out on the following legal bases:

• Consent (Art. 6(1)(a) GDPR): When you have consented to the processing.
• Performance of a Contract (Art. 6(1)(b) GDPR): When processing is necessary for the performance of a contract or pre-contractual measures.
• Legal Obligation (Art. 6(1)(c) GDPR): When we are subject to a legal obligation.
• Legitimate Interest (Art. 6(1)(f) GDPR): When processing is necessary to protect our legitimate interests and your interests do not override them.

For security reasons, we use SSL or TLS encryption for data transmission.

3. Collected Data and Their Processing

3.1 When Using the App "CaseCruncher"

In our app, we collect and process:

· User inputs for Practice Cases and Mock Interviews

· Audio and video recordings (after explicit consent)

· Information about app usage

This data is processed to:

· Provide AI-based feedback on your case interview responses

· Provide AI-based conversation in a mock interview

· Improve the functionality of the app

· Identify and fix technical issues

3.2 When Using the Website "https://www.case-cruncher.com"

When using our website, the following data is collected:

· IP address

· Date and time of the request

· Content of the request (specific page)

· Access status/HTTP status code

· Amount of data transferred

· Referrer URL

· Browser, operating system and its interface

· Language and version of the browser software

This data is stored in the log files of our system and is not combined with other personal data. The temporary storage of the IP address is necessary to deliver the website.

3.3 Cookies

Our website uses cookies for:

· Language settings

· Session information

· Analysis of browsing behavior (with consent)

You can configure your browser to inform you about the setting of cookies or to restrict the acceptance of cookies. The functionality of the website may be limited if cookies are deactivated.

3.4 Use of External Services

We use the following external services:

• Firebase (Google LLC): For app functions, authentication, databases, and analytics. Privacy Information
• Big Query (Google LLC): For data analysis with anonymized or pseudonymized data. Privacy Information
• Looker Studio (Google LLC): For visualization and analysis of data. Security Information
• Elevenlabs: For speech synthesis in our app. Privacy Information
• OpenAI: For creation of AI-based conversations and feedback. The transmitted data is not used to train OpenAI models. Privacy Information
• Google Analytics: For analysis of website usage (with consent). Privacy Information
• Webflow: For hosting and provision of our website. Privacy Information

4. Data Storage and Security

4.1 Storage Duration

Personal data is deleted as soon as the purpose of storage no longer applies, unless there are statutory retention obligations. The storage duration depends on:

· For consent (Art. 6(1)(a) GDPR): Until withdrawal of your consent

· For contract performance (Art. 6(1)(b) GDPR): Until the expiry of statutory retention periods, if no longer required for contract performance

· For legitimate interests (Art. 6(1)(f) GDPR): Until you exercise your right to object

In the app, user inputs for Practice Cases and Mock Interviews are stored for up to 3 years to provide a long-term development overview of your case interview skills. You can request deletion of your data at any time.

4.2 Location of Data Storage

We store all personal data on servers within the European Union (EU). When external services are used, we ensure that your data is either processed within the EU or that appropriate safeguards are in place for data transfers to third countries.

4.3 Data Security

We implement appropriate technical and organizational measures according to Art. 32 GDPR, including:

· SSL/TLS encryption for data transmission

· Regular security updates

· Access restrictions and controls

· Secure authentication methods

· Regular backups

· Data protection awareness training for our team

5. Your Rights as a Data Subject

As a data subject, you have the following rights:

• Right of Access (Art. 15 GDPR): Right to confirmation and information about processed personal data.
• Right to Rectification (Art. 16 GDPR): Right to rectification of inaccurate data or completion of incomplete data.
• Right to Erasure (Art. 17 GDPR): Right to erasure of your data under certain conditions.
• Right to Restriction of Processing (Art. 18 GDPR): Right to restriction of processing under certain circumstances.
• Right to Data Portability (Art. 20 GDPR): Right to receive your data in a structured, commonly used format and to transmit it to others.
• Right to Object (Art. 21 GDPR): Right to object to processing based on your particular situation.
• Right Not to Be Subject to Automated Decision-Making (Art. 22 GDPR): Right not to be subject to a decision based solely on automated processing.
• Right to Withdraw Consent (Art. 7(3) GDPR): Right to withdraw your consent at any time.
• Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR): Right to lodge a complaint with a data protection supervisory authority.

You can exercise your rights at any time by contacting us using the contact details provided. We need to verify your identity before providing information.

6. Cookie Consent Tool

We use a cookie consent tool on our website to obtain user consent for cookies that require consent. Cookies requiring consent are only loaded if the user has given appropriate consent.

The tool sets technically necessary cookies to store your cookie preferences. If personal data is processed in this context, this is done in accordance with Art. 6(1)(f) GDPR (legitimate interest in legally compliant consent management) and Art. 6(1)(c) GDPR (legal obligation).

Further information and setting options can be found in the user interface on our website.

7. Additional Information for Users from the United States

7.1 Applicable US Privacy Laws

For users in the US, additional state privacy laws may apply, including:

· California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)

· Virginia Consumer Data Protection Act (CDPA)

· Colorado Privacy Act (CPA)

· Connecticut Data Privacy Act (CTDPA)

· Utah Consumer Privacy Act (UCPA)

7.2 California Privacy Rights

As a California resident, you have certain rights under the CCPA/CPRA, including:

· The right to information about collected personal data

· The right to deletion of your data (with exceptions)

· The right to opt out of the sharing or sale of your data

· The right to non-discrimination

Sale of Data: We do not sell personal data. You can object to the sharing of your data at any time using the contact details provided.

7.3 Do Not Track Signals

Our website currently does not respond to "Do Not Track" signals. You can adjust your cookie preferences via our cookie consent tool.

7.4 Privacy for Minors

Our services are not directed at individuals under the age of 16. We do not knowingly collect data from children under 16.

8. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy to comply with current legal requirements or to implement changes to our services. The new privacy policy will then apply to your subsequent visits.

This privacy policy is reviewed at least every 12 months and updated as necessary to ensure compliance with applicable data protection laws.

Last updated: April 13, 2025