Privacy Policy

1. Who processes your data

The controller is Ondřej Šálek, Zlín, Česká republika (“we”). Contact: [email protected]. This policy covers the LidScan iOS app and the LidScan website.

The project is in non-commercial test operation (beta); nothing is sold.

2. What stays on your phone

Scans, photos, 3D models, floor plans, measurements and annotations are stored only on your device. We do not upload them to our servers and cannot access them. The app uses the camera and LiDAR solely to capture scans on the device.

3. What data we process

Account: your email address and password (the password is stored only as a one-way Argon2 hash). With Sign in with Apple: your Apple account identifier and the email Apple provides (which may be a private relay address).

Sign-in: a hash of your sign-in token, the client type (app/web), and creation and expiry times.

Licence: during the beta all features are free and we record no payments or payment details. There may be records of manually granted licences (type, status, end date).

Technical data: your IP address and request time for abuse protection (rate limiting) and in our hosting provider's operational logs.

Administrator action records: when an administrator changes a licence or deletes an account, a record with the affected user's email, the action and the time is kept.

We use no advertising or analytics trackers and we do not sell your data.

4. Why we process it and on what legal basis

Running your account, signing in and verifying your licence – performance of a contract (Art. 6(1)(b) GDPR).

Security, abuse prevention and administrator action records – legitimate interests (Art. 6(1)(f)).

5. Who receives your data

Apple (TestFlight/App Store, Sign in with Apple) and the hosting provider that runs our server. They act as processors or as independent controllers for their own services. For transfers outside the EU we rely on adequacy decisions or standard contractual clauses.

6. How long we keep it

We keep account and sign-in data while your account exists. You can delete your account at any time in the app (Settings → Delete account); this deletes the account, sign-ins and licence records on our side.

Administrator action records are kept for at most 3 years.

7. Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object. Write to [email protected]. You may also lodge a complaint with a supervisory authority; in the Czech Republic this is the Office for Personal Data Protection (uoou.gov.cz).

8. Children

The service is not intended for people under 16 and we do not knowingly collect their data.

9. Changes

We may update this policy. The current version is always on this page; we will announce material changes in the app or by email.