Document version 0.15.1 · Last updated: 3 November 2026
This notice describes the local Android app Sapeluno, package com.schukai.sapeluno, and the Windows and Linux previews. This release covers local study planning. Encrypted device sync and in-app purchases are not activated on any of these platforms in this release.
Responsible party
schukai is responsible for the app. Address, representatives and contact information are in the linked imprint.
Local study data
Your study structure, sessions, tasks, submissions, assessments, results, grades, credits, notes, revisions, highlights, collections and calendar import history stay in app-private storage on your device. Files, photos, videos and voice memos that you choose to attach are stored there as well. Settings are stored locally.
The app has no user account, server sync, analytics or tracking of its own, and no advertising. Only the optional handwriting recognition sends diagnostic information to Google (see below). The app does not automatically send your study data to schukai or another service; schukai cannot inspect or recover it. Android Auto Backup is disabled, so the app does not copy its storage to your Google account.
Voice memos and dictation
This section applies to the Android app.
Voice memos are recorded only when you start a recording and grant microphone permission. Recordings remain in app-private storage on your device. You can withdraw microphone access in Android settings. Sapeluno does not upload audio.
Dictation starts only when you choose it. Sapeluno opens the speech recognition app provided by your device, which records speech and returns recognised text. Recognition may run locally or at that provider, depending on your device and settings; its privacy terms apply. Sapeluno itself does not transmit the audio.
Reminders and permissions
Reminders are created and scheduled on your device. If you enable reminders, Android may ask for notification permission. Exact reminders have separate optional system access; ordinary reminders also work without it. You can change these permissions in Android settings. Delivery depends on Android. This reminder feature is not available in the desktop previews.
Notifications contain titles and dates, not note text or grades. Android and your notification/lock-screen settings control where those titles appear. Local reminders can be restored after a reboot; there is no server push.
You choose files and existing photos through your device's picker. On Android, Sapeluno requests camera permission when you explicitly choose to take a new photo or video, then opens the camera app. Without that permission, no capture starts. You can revoke permission in Android settings. Sapeluno does not request storage, location or contacts permission for these flows. Microphone permission is requested separately for voice memos. The selected picker, provider or camera app may have its own permissions and privacy terms. The desktop previews use the operating system's file picker and do not offer camera or microphone recording.
Deliberate opening and sharing
When you open an attachment, a selected viewer receives temporary access to that file. On Android, when you choose to share a note as Markdown, a report as CSV or selected own sessions as ICS, the system sharing dialog lets you choose the recipient. In the desktop previews, exports are saved to your chosen location through the operating system's file picker. Selected content, including any grades you deliberately export, can then pass to that app. Its own privacy terms and your choices determine any further transmission or storage. There is no automatic report upload. The optional diagnostic report is described under Help and diagnostics.
Links open in your external browser, whose and the destination website's privacy terms then apply. Sapeluno does not embed a webview. Calendar file imports stay local. Optional calendar subscriptions work as described below.
Optional calendar subscriptions
If you subscribe to a calendar, Sapeluno retrieves events directly from the provider you choose over HTTPS. The provider receives your IP address, request time and calendar address, including any access token in that address. After you confirm the initial preview, updates run approximately every six hours while connected, when an update is due as you open the app, or when you request one. Android may delay background requests. The desktop previews do not fetch calendars in the background while the app is closed. Sapeluno does not send your notes, grades or tasks to the calendar provider. The provider's privacy terms apply.
The complete calendar link is stored in the device's protected storage and is excluded from Sapeluno backup packages. Restoring a backup pauses subscriptions; enter the link again and confirm a preview to reconnect. You can pause updates or end a subscription. Ending it removes the stored link and keeps imported appointments. Without an enabled subscription, no calendar request is made. Pausing or ending a subscription does not delete request records already held by the provider. Its retention and deletion rules apply; contact that provider to request deletion or revoke an existing calendar access link.
Handwriting recognition (optional)
Handwriting recognition is currently available on Android only.
In versions with handwriting recognition, it is off until you turn it on in Settings. Sapeluno then downloads a language pack from Google through Google ML Kit. Recognition runs on your device: handwriting, recognised text and notes are not transmitted. According to Google’s ML Kit disclosure, the SDK sends diagnostics and usage analytics to Google over HTTPS. These include device and operating-system information, available hardware accelerators, app and version information, a per-installation identifier, performance metrics, API configuration, input and output sizes, feature version, event types, error codes and configured languages. Google's privacy policy applies. Turning it off deletes the language pack; Sapeluno cannot delete data already sent.
Help and diagnostics
Sapeluno keeps fixed diagnostic codes for failures or denied permissions on your device, at most 100 entries for 30 days, without your content. An entry includes the affected feature area, outcome, time, repeat count and, where present, a numeric platform error code. Nothing is sent to schukai automatically. Under Help and diagnostics, you can view the complete local report and delete the local error-code history.
If you choose Send diagnostics by e-mail, your mail app opens a report addressed to hey@schukai.com. It contains its creation time, app version, build number and language, device manufacturer and model, operating-system version, free storage, database state and schema version, feature states, counts of your courses, notes, decks and attachments, and the stored diagnostic entries with the fields described above. It excludes note text, titles, names, grades, file names, files, keys, purchase tokens and network identifiers. You can edit or discard the message. schukai receives the report, your sender address and any additions only if you send it in your mail app. Your mail provider's terms apply; end-to-end encryption is not promised.
schukai uses this voluntary information only to handle your support request. It is deleted when no longer needed for that purpose, subject to any statutory retention duties. You can contact schukai to request deletion. Deleting the local history does not remove an e-mail already sent or copies held by your mail provider.
Google Play
Google processes installation, update and store information under its own privacy policy. Depending on your Android settings, Google may also receive crash or performance diagnostics and expose aggregated reports in Play Console. This is separate from app analytics; Sapeluno includes no analytics of its own. Test access is managed by Google Play.
Deletion and export
You can delete entries in the app; supported trash entries remain restorable for 30 days unless permanently deleted. On Android, uninstalling the app removes its private storage and local data. The supplied desktop installers retain the separate support-data directory and your exports during uninstall. You can delete those files through the operating system when you no longer need them. Copies you deliberately shared to other apps are not deleted by uninstalling Sapeluno.
Markdown, CSV and calendar exports cover selected content. In Settings you can also create a full backup of study data and attachments and choose where to save it through Android's system dialog or the operating system's Save As dialog in the desktop previews. The ZIP package is not encrypted and can contain notes, grades, photos and recordings. Keep it in a protected location. If you choose a cloud storage provider, that provider's terms apply; Sapeluno does not automatically upload or schedule backups. Device settings such as language, theme and reminders are not part of the package.
Restoring a backup replaces local study data after your confirmation. The previous state is kept locally for Undo restore until you delete it or replace it during another restore. Deleting app data does not delete copies you saved outside the app. Optional encrypted sync is not included. This notice will be updated before these data flows change.
Contact
Use the contact information in the schukai imprint.
Further privacy rights and material changes
schukai does not sell personal data.
The data processing and contact channels described in this notice also apply when the app is used outside Germany. Mandatory rights under applicable privacy law remain available and are not limited to the GDPR rights expressly mentioned here. Depending on the applicable law and its conditions, these may include confirmation of processing, access, correction, deletion, anonymisation or blocking of data processed unlawfully or no longer needed, data portability, objection and withdrawal of consent. Requests concerning data processed by schukai can be sent to hey@schukai.com. You may also complain to a competent data protection authority.
Where the Brazilian LGPD applies to the processing, its rights remain available, including confirmation and access, correction, anonymisation, blocking or deletion of unnecessary, excessive or unlawfully processed data, statutory data portability, information about recipients and about the possibility and consequences of refusing consent, withdrawal of consent and consent-related deletion. Statutory exceptions and retention duties continue to apply. Requests can be submitted through the privacy contact above; the right to complain to the ANPD remains unaffected.
If the processing described here changes materially, we will expressly inform affected users about the change, when it starts, its consequences and the relevant rights. For changes to an app function, a prominent in-app notice will be provided before the affected processing starts. Where a service or support change also affects older app versions, we will additionally ensure suitable direct notice through an existing contact or service channel that may lawfully be used, in good time before the change starts. Quietly changing a website or merely publishing an update is insufficient for this purpose. Where consent is required, it will be obtained before the processing that depends on it. A privacy notice does not constitute agreement to a contractual amendment.