Privacy Policy

1 Disclaimer & Important Notice

This Privacy Policy applies to individuals who download, install, or use the LeaseGuard AI application ("App", "Service"). By downloading or continuing to use the App, you agree to this Policy.

2 Data We Collect

LeaseGuard AI is designed to protect your privacy to the highest degree. Data collected falls into two categories:

3 How We Use Your Data

Collected data is used solely for the following purposes:

• Lease agreement analysis and risk score calculation
• Generating damage inspection reports
• Powering the AI legal assistant chat
• Verifying your subscription status (RevenueCat)
• Improving app stability (anonymous crash reports)
• Session management and saving your preferences

Your data is never used for advertising, never shared with third-party ad networks, and never processed for profiling purposes.

4 Data Sharing

Your data is shared only with third parties strictly necessary for the service to function:

• Apple Inc.: For Sign in with Apple authentication and App Store subscription management. Apple's Privacy Policy: apple.com/legal/privacy
• RevenueCat, Inc.: For subscription management. Data is processed with an anonymous ID. RevenueCat Privacy Policy: revenuecat.com/privacy
• AI Model Provider: Lease text and chat messages are transmitted over encrypted connections (TLS 1.3) to a self-hosted Ollama LLM server operated by idakim.com. No third-party AI service (OpenAI, Anthropic, Google, etc.) receives your data. Content is processed in-memory and discarded after the response is returned.

Your data is never sold, rented, or transferred to third parties for marketing purposes. In the event of a legal obligation or official request, relevant authorities may be informed; you will be notified where permitted by law.

5 Data Retention & Security

The following technical and administrative safeguards are in place to protect your data:

• Lease text is transmitted to the AI analysis server using TLS 1.3 encryption
• Data on your device is protected by iOS encryption mechanisms
• Lease content is immediately deleted on the server after analysis is complete
• Damage photos and chat history are stored only on your device (SwiftData)
• Account deletion permanently clears all local data

Retention Periods by Data Category

Legal Basis for Processing (GDPR Article 6)

• Contract performance (Art. 6(1)(b)): Processing lease text and chat queries is necessary to deliver the AI analysis service you requested.
• Consent (Art. 6(1)(a)): Each lease analysis requires explicit in-app consent via a toggle before submission. You may withdraw consent at any time by ceasing to use the feature.
• Legitimate interest (Art. 6(1)(f)): Anonymous error logging and abuse moderation, balanced against your rights and freedoms.
• Legal obligation (Art. 6(1)(c)): Where applicable, to comply with tax, accounting, or law enforcement requests.

Sub-processors

The following sub-processors handle your data on our behalf. We perform due-diligence reviews before engagement and require GDPR-compliant data processing agreements.

• Apple Inc. (USA) — Sign in with Apple, App Store payments
• RevenueCat, Inc. (USA) — Subscription state management
• Cloudflare, Inc. (USA) — TLS termination and DDoS protection for the AI API endpoint
• idakim.com self-hosted infrastructure (operated by the data controller) — Ollama LLM inference and Qdrant vector store. No third-party AI provider receives lease content.

6 Apple Sign In & Authentication

LeaseGuard AI uses only Apple's "Sign in with Apple" service for authentication. This means:

• You can sign in without sharing your email address with our app
• Apple represents your identity with an anonymous user ID
• Your password is never transmitted to our app
• Two-factor authentication is managed entirely by Apple

7 Artificial Intelligence & Third-Party Services

LeaseGuard AI uses large language model (LLM) technology for lease analysis and legal chat. Here's how it works:

• Your lease text or chat messages are transmitted to the AI model over an encrypted connection
• The AI model uses this text only for processing — it is not added to any training dataset
• After a response is generated, the text is not retained server-side
• AI responses are informational, not legal advice

8 Children's Privacy

LeaseGuard AI is not directed at children under the age of 13. You must be at least 13 years old to use the application. Parental consent is recommended for users aged 13–17.

If we become aware that we have inadvertently collected data from a child under 13, we will delete that information immediately. If you believe this has occurred, please contact us at info@idakimi.com.

9 Your Rights & Data Deletion

You have the following rights over your data:

• Right of Access: You may request information about which data we hold
• Right of Rectification: You may request correction of inaccurate data
• Right of Erasure: You may request deletion of all your data
• Right of Portability: You may request your data in a machine-readable format
• Right to Object: You may object to data processing activities

To delete your account and data:

1. App → Settings → "Delete My Account", or
2. Send an email to info@idakimi.com with the subject "Data Deletion Request"

Requests are processed within 30 days and you will be notified upon completion.

10 Cookies & Analytics

LeaseGuard AI is a mobile application and does not use browser cookies. In-app data tracking occurs as follows:

• Apple's anonymous crash reports (opt-out available in iOS Settings)
• App Store analytics (anonymized by Apple)
• RevenueCat subscription analytics (with anonymous ID)

This website is hosted on GitHub Pages. For GitHub's privacy practices, see: GitHub Privacy Statement

11 International Data Transfers

The application can serve users regardless of their country. The following transfers may occur during data processing:

• Lease text: Temporary transmission to AI analysis server (European or US data centers)
• Subscription data: RevenueCat's servers in the United States
• Authentication: Apple's global infrastructure

For EU/EEA users, data transfers under GDPR are conducted under Standard Contractual Clauses approved by the European Commission.

12 Policy Changes

This Privacy Policy may be updated from time to time. When significant changes are made:

• The new effective date will be published on this page
• An in-app notification may be displayed
• Email notification may be sent for material changes

Continued use of the App following an update constitutes acceptance of the revised Policy.

13 Contact Us