Privacy notice — online trial activation

What data we transmit

On first-time activation, PDR Kalk sends to api.pdrkalk.ch:

• A device identifier as a hash value (HMAC-SHA256, one-way — cannot be reversed to plaintext)
• Platform (Windows or Android) and app version
• A truncated IP address (IPv4 /24, IPv6 /48 — e.g. 203.0.113.0/24 instead of 203.0.113.42)
• Operating system major version (e.g. “Windows 11” or “Android 14” — no detailed user-agent data)
• Timestamp of the activation
• After the subsequent region selection: the chosen region (CH, DE or AT)

What we do NOT transmit:

• No name, email address or postal address
• No company, customer, report or invoice data
• No full IP address
• No telemetry or usage data during the trial
• No cookies or tracking IDs

Optional AI feature: vehicle-document scanner

PDR Kalk includes an optional, off-by-default vehicle-document scanner. When enabled, an external AI vision API reads the vehicle data from a photo of the registration and fills the fields in the report editor. You use your own API key (bring-your-own-key); PDR Kalk runs no AI of its own and never sees the image or the key. The image is sent from your device straight to the provider you choose — never through PDR Kalk's servers. The following applies:

• Off by default — no image is transmitted unless you enable and use the feature.
• Bring-your-own-key: you supply your provider's key; billing is directly with the provider.
• Provider choice: Infomaniak (Switzerland, Swiss data centres), Mistral AI (EU/France), or — only after you explicitly acknowledge the cross-border transfer — OpenAI or Anthropic (US). It never silently switches to a US provider.
• Automatic redaction: before upload, the app blacks out the holder's personal-data block (name and address) directly in the image (region-aware placement). An on-camera framing guide and a mandatory review step let you check the real photo before scanning.
• Compliance checklist: the scanner runs only after you confirm a data-processing agreement (DPA), opt-out of model training, retention terms, and — for US providers — the cross-border transfer.
• Metadata-only audit log: records provider, region, country, which fields were returned, success, and whether redaction was applied — never the image, key, or field values.
• Designed around Swiss revFADP/nFADP and the EU GDPR.

Purpose and legal basis

The transmitted data is used solely to enforce one trial per device (abuse prevention). The legal basis is our legitimate interest in protecting against licence abuse under Art. 6(1)(f) GDPR or Art. 31(2)(d) revFADP (Switzerland).

Retention period

The activation record is stored during the active trial (30 days) and for 30 days after expiry. After that, the truncated IP address is removed from the record. The device-identifier hash is kept permanently for abuse-prevention purposes — it contains no directly personal data.

Data processor

Server infrastructure: Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare is certified under the EU-US Data Privacy Framework (DPF). The database is configured in Cloudflare’s WEUR cluster (Frankfurt / Amsterdam); activation data is therefore normally processed exclusively within the EU.

Your rights (access, deletion, objection)

You have the right to access, rectification, deletion, restriction of processing and objection. To exercise these rights, contact us by email at:

dsr@pdrkalk.ch

Please include your activation token (visible in the app’s licence dialog) so we can locate your record unambiguously.

Technical note: device drift

On Windows 11 with MAC-address randomisation enabled, the device identifier may change over time. In rare cases this means the same device is recognised as a new one after a reinstall. If you need a legitimate second trial (e.g. after a hardware swap or restore), contact us at info@pdrkalk.ch and we will unlock it manually.

In-app help

A short summary of this information is also available directly in PDR Kalk under “Help → Trial privacy”.