Privacy Policy

The short version

• The contents of your letters are not stored and not logged on our servers, and they are not used to train AI models.
• By default, letters are analysed in a protected cloud – but only if you explicitly agree on first launch: the recognised text (not the photo) goes through our server in Frankfurt to Anthropic (USA).
• Without consent, or in “Private mode”, the analysis stays on your iPhone (Apple Intelligence).
• We do not know who you are: the app uses an anonymous ID, with no account and no email address.
• We collect usage statistics only with your consent. This website uses no cookies and no tracking.
• You can delete your data on our server yourself at any time in the app.

1. Controller

Armen Ter-Oganezov
Pelzdorfstr. 6
53332 Bornheim
Germany
Email: hello@teroxai.com

This policy covers the iOS app “Postklar” and the website postklar.com.

2. Website postklar.com

The website is served by Firebase Hosting of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you open it, the hosting service processes technically necessary access data (IP address, date and time, page requested, browser and system details) to deliver the page and protect it from abuse. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is running the website securely and reliably.

The website uses no cookies and no analytics or marketing services, and it loads no fonts or content from third parties. Only the contact form on the support page sends data to our server (see section 8).

3. How the app analyses letters

You photograph or import a letter. Text recognition happens on your device. There are three ways to explain the letter, and the app always shows which one is used:

• Protected cloud (Anthropic) – default: on first launch the app asks whether letters may be analysed in the protected cloud. Only if you explicitly agree is the recognised text of a letter (not the photo) sent encrypted to our server at Google Cloud in Frankfurt am Main (region europe-west3) and from there to Anthropic PBC, San Francisco, USA. Anthropic writes the explanation and sends it back.
• On device (Private mode): if you have not agreed, or have turned on “Private mode” in the settings, the analysis runs with Apple Intelligence directly on your iPhone. No letter content is sent to us or to Anthropic.
• Apple Private Cloud Compute: in Private mode, Apple may process longer letters that the device cannot analyse on its own in its Private Cloud Compute. Apple processes the data under its own privacy policy; we receive no letter content.

For cloud analysis we do not store or log the letter text or the explanation; they are held in memory only while the request runs. The same applies to “Ask about the letter” and “Draft a reply”. Anthropic processes the data as our processor under a data processing agreement and does not use data sent through the API to train its models. Anthropic keeps inputs and outputs only for a limited time to detect abuse – according to the provider, up to 30 days – and then deletes them.

Letters can contain special categories of personal data, such as health data in a doctor’s bill. The legal basis for sending them to Anthropic is your explicit consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR). You can withdraw consent at any time in the app’s settings by turning on Private mode; after that the app uses on-device analysis only. Without consent you can use the app with on-device analysis if your device supports it.

Transfers to Anthropic in the USA are based on the European Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR), which are part of the data processing agreement with Anthropic.

4. Your letters and your archive

The app stores scans, recognised text, explanations, deadlines and folders on your device. If iCloud is turned on for the app, this data is synced in your private iCloud database at Apple. We have no access to it. You delete the data by deleting letters in the app or removing the app; you manage iCloud data in your device’s iCloud settings.

5. Anonymous ID, quota and abuse protection

So that free analyses, purchased packs and subscriptions work, the app receives a random anonymous ID on first launch (Firebase Authentication, anonymous sign-in). To prevent abuse, Firebase App Check uses Apple App Attest to confirm that requests come from a genuine installation of the app.

In our database (Google Cloud Firestore, stored in the European Union) we keep only the following for this ID: the number of free analyses used, the balance of purchased packs, a counter that limits requests per hour, and the IDs of purchase transactions already credited. Letter contents are never stored there. For each analysed letter we also keep a hash (SHA-256) of the recognised text for 30 days, so that you can have the same letter explained in another language at no extra cost; the letter cannot be reconstructed from the hash.

The legal basis is Art. 6(1)(b) GDPR (providing the app and purchased services) and Art. 6(1)(f) GDPR (abuse protection). The data is kept while the ID is in use.

Deletion: in the app’s settings you will find “Delete my data on the server”. It immediately deletes the data listed above and the anonymous ID; the app then gets a new ID. Purchased packs and subscriptions are kept because they run through Apple; the purchase data at RevenueCat (section 6) is not deleted, because it is needed to restore your purchases. You can also ask for deletion by email; please include the anonymous ID shown in the settings, because otherwise we cannot tell which data is yours.

6. Purchases and subscriptions

Purchases and subscriptions are handled by Apple’s App Store (Apple Distribution International Ltd., Cork, Ireland). We do not receive payment details. To manage purchase status we use RevenueCat (RevenueCat, Inc., USA): RevenueCat receives the anonymous ID, the products purchased, purchase times, transaction IDs, and device and country details. The legal basis is Art. 6(1)(b) GDPR. Transfers to the USA are based on Standard Contractual Clauses or the EU-US Data Privacy Framework.

7. Usage analytics and crash reports

Usage analytics: only if you agree on first launch or in the settings does the app record events with Google Analytics for Firebase (Google Ireland Limited), such as “letter scanned”, “analysis completed” (with path, letter type and duration) or “purchase completed”. Letter contents, names, amounts or case numbers are never sent. The advertising ID (IDFA) is not used. The legal basis is Art. 6(1)(a) GDPR and § 25(1) TDDDG; you can withdraw at any time in the settings.

Crash reports: if the app crashes, it sends a technical report with Firebase Crashlytics (Google Ireland Limited) – device model, system version, app version, error trace – without letter contents. In the EU, the EEA and Switzerland this happens only if you have agreed to usage analytics; that consent then also covers crash reports (Art. 6(1)(a) GDPR, § 25(1) TDDDG) and can be withdrawn at any time in the settings. In other countries crash reports are on; there the legal basis is our legitimate interest in a stable app (Art. 6(1)(f) GDPR). Crashlytics data is deleted after 90 days.

Google may also process data in the USA; Google LLC is certified under the EU-US Data Privacy Framework.

8. Contact and support

If you email us, we process your message and email address to answer your request (Art. 6(1)(b) or (f) GDPR). Please do not send us letters or photos of letters. We delete the correspondence when it is no longer needed, at the latest when statutory retention periods end.

Contact form: the form on the support page sends your email address, your message and the page language to our server at Google Cloud in Frankfurt am Main; the message is stored in our database (Google Cloud Firestore, stored in the European Union) and deleted automatically after 90 days. To protect against spam we limit the number of messages per hour; for this we do not store your IP address in plain form, only as a hash created with a secret key (pseudonymised), which is deleted automatically within two days at the latest. The legal basis is Art. 6(1)(b) or (f) GDPR; our legitimate interest is answering your request and preventing abuse.

9. No automated decisions

The app writes explanations automatically. It makes no decisions with legal effect on you within the meaning of Art. 22 GDPR. The explanations are not legal advice.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR).

You can complain to a data protection supervisory authority (Art. 77 GDPR), for example the authority responsible for us: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

For any request, an email to hello@teroxai.com is enough.

11. Children

The app is not directed at children under 16.

12. Changes

We update this policy when the app or the law changes. The version published on this page applies.