Privacy Policy
Scope: This general declaration describes shared website, app-store, provisioning, hosting, and contact processing around LarasDesk. For concrete processing inside the apps, the shared app privacy policy also applies; it describes the actual local app behaviour and is authoritative for each app where it is more specific or differs.
1) Controller and Scope
The controller within the meaning of the General Data Protection Regulation (GDPR) is Lara Knuth, Dresden AI Insights, Kurhausstraße 16, 01259 Dresden, Germany, e-mail: lara.knuth@larasdesk.com.
This general declaration describes processing around the website, app provisioning, support/contact, and shared legal topics. Concrete processing inside the apps is described in the shared app privacy policy:
- Privacy Policy for the LarasDesk apps — covers LarasScan, LarasMemo, LarasCalendar and LarasVault.
2) Website and Hosting
These public pages are delivered as static pages through Firebase Hosting, a Google service. When you access the website, Google may process technical access data, such as IP address, timestamp, browser/device information, and requested URL, to deliver the pages through its content delivery network and maintain security and stability of the service. Processing may also take place on servers outside the EU; according to Google, such transfers rely on recognised safeguards such as standard contractual clauses. Details are described in the Privacy and Security in Firebase notice and the Google Privacy Policy. DNS management for the domain is provided by Cloudflare; when resolving the domain name, Cloudflare processes technically necessary request data under its own responsibility. Further details are provided in the Cloudflare Privacy Policy.
Insofar as we initiate the processing of technically necessary access data to provide the static website, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable delivery of these pages.
We do not use our own tracking cookies, analytics, advertising, contact form, or newsletter on these static pages. Lara Knuth does not receive personal visitor profiles or app content from the hosting service.
3) App Provisioning Through Stores and Test Channels
If you obtain a LarasDesk app through Google Play or a test channel, the respective platform provider processes the data required for download, provisioning, billing, abuse prevention, and account management under its own responsibility. For Google services, the Google Privacy Policy applies in particular.
We process such store or test-channel data only insofar as the platform provider makes it available to us and it is required for app provisioning, test access, support, or feedback. Details of a particular beta or feedback process are provided in the relevant invitation or support notice; processing inside all four apps is described in the shared app privacy policy.
4) Processing Inside the Apps
The LarasDesk apps are local-first. App content such as receipts, OCR text, voice memos, calendar files, vault files, or export files is not automatically transmitted to LarasDesk. There is no LarasDesk-owned analytics, advertising, or automatic tracking.
Individual functions involve external services. In LarasScan, Google Play Services may download the OCR model automatically after a Play installation and fetch further scanner resources dynamically; the ML Kit SDK also sends operational and usage metrics to Google. In LarasMemo, the model-package download starts only on a button press. LarasScan and LarasMemo can submit an optional diagnostic report after active preview and consent; Firebase App Check may then refresh integrity tokens automatically. The linked shared app privacy policy provides the authoritative details for each app.
5) Contact and Support
If you contact us by e-mail, we process the data you provide solely to handle the request and the related technical administration. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in answering requests) and, if your request is aimed at a contract, Art. 6(1)(b) GDPR.
6) No Newsletter or Direct Advertising
We do not operate an e-mail newsletter, personalized advertising, or direct advertising based on usage profiles through this website or the LarasDesk apps.
7) Rights of the Data Subject
7.1 The applicable data protection law grants you comprehensive data subject rights (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:
- Right of access pursuant to Art. 15 GDPR: In particular, you have a right to information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected by us from you, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the scope and intended effects of such processing for you, as well as your right to be informed about which guarantees pursuant to Art. 46 GDPR exist when your data is forwarded to third countries;
- Right to rectification pursuant to Art. 16 GDPR: You have a right to the immediate rectification of incorrect data concerning you and/or the completion of your incomplete data stored by us;
- Right to erasure pursuant to Art. 17 GDPR: You have the right to demand the erasure of your personal data if the requirements of Art. 17 (1) GDPR are met. However, this right does not exist in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
- Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to demand the restriction of the processing of your personal data as long as the accuracy of your data disputed by you is being verified, if you refuse the erasure of your data due to unlawful data processing and instead demand the restriction of the processing of your data, if you need your data for the establishment, exercise or defence of legal claims after we no longer need this data once the purpose has been achieved, or if you have lodged an objection on grounds relating to your particular situation, as long as it has not yet been established whether our legitimate grounds prevail;
- Right to be informed pursuant to Art. 19 GDPR: If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis the controller, the latter is obliged to notify all recipients to whom the personal data concerning you has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
- Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, or to demand its transmission to another controller, insofar as this is technically feasible;
- Right to withdraw consent given pursuant to Art. 7 (3) GDPR: You have the right to withdraw consent once given to the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal;
- Right to lodge a complaint pursuant to Art. 77 GDPR: If you are of the opinion that the processing of personal data concerning you violates the GDPR, you have the right - without prejudice to any other administrative or judicial remedy - to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place of the alleged violation.
7.2 Right to Object
If, within the framework of a consideration of interests, we process your personal data on the basis of our predominant legitimate interest, you have the right at any time to object to this processing with effect for the future on grounds that arise from your particular situation.
If you exercise your right to object, we will stop processing the data concerned. However, we reserve the right to further processing if we can prove compelling reasons worthy of protection for the processing which outweigh your interests, fundamental rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.
8) Duration of Storage of Personal Data
Contact and support data is stored only as long as it is required to handle your request or statutory retention obligations apply.
App data stored locally on your device can be removed individually inside LarasScan, LarasCalendar and LarasVault. LarasMemo currently has no deletion function for one memo; there, remove all local memos by clearing app data or uninstalling the app. For optionally submitted diagnostic reports and further app-related special cases, the shared app privacy policy applies.
We do not keep our own access logs for these static pages. Insofar as hosting or DNS providers store technical log data, the retention period depends on what is necessary to deliver and secure the services, perform the respective contract, and comply with statutory retention or documentation duties. Further details are provided in the providers' privacy notices linked above.
Otherwise, we delete personal data when the processing purpose no longer applies and no statutory retention obligations or legitimate retention interests prevent deletion.