OffiAI

This English version is a convenience translation. Only the German version is legally binding.

Privacy policy (app)

1) Information on the collection of personal data and contact details of the controller

1.1 We are pleased that you are using our application (hereinafter “App”). Below we inform you about how we handle your personal data when you use our App. Personal data is any data with which you can be personally identified.

1.2 The controller responsible for data processing in connection with this App within the meaning of the General Data Protection Regulation (GDPR) is Delicatino GmbH, Neidenburger Str. 9, 28207 Bremen, Germany, phone: 042140897770, fax: 0421 40897760, email: info@mate-tee.de. The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

2) Log files when using our mobile App

Downloading the App

When you download our mobile App from an app store, the required information is transmitted to the app store. This includes in particular the user name, email address and customer number of your store account, the time of the download, payment information and an individual device identifier. We have no influence on this data collection and are not responsible for it. We process the data only insofar as this is necessary for downloading the mobile App to your mobile device.

Using the App

When you use our mobile App, we collect the personal data described below in order to enable convenient use of the functions. If you want to use our mobile App, we collect the following data, which is technically necessary for us to offer you the functions of our mobile App and to ensure its stability and security:

• date and time of the request and time zone
• function called or content of the request
• access status/HTTP status code
• amount of data transferred
• version of the App
• device type or model
• operating system and its version
• language setting of the device
• IP address (where applicable: in shortened form)

Insofar as this data is required to provide the App functions you use, we base the processing on Art. 6 (1) (b) GDPR. Otherwise, it is based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in ensuring the stability, security and functionality of the App and in analysing errors. Access to this information on your device is strictly necessary to provide the App (Section 25 (2) No. 2 TDDDG).

However, we reserve the right to check the aforementioned log files retrospectively if there are concrete indications of unlawful use.

3) Hosting & content delivery network

For hosting our App and displaying the App’s content, we use providers that render their services themselves or through selected subcontractors exclusively on servers within the European Union.

All data collected in our App is processed on these servers, unless different recipients are named below for specific data processing.

We have concluded a data processing agreement with each of these providers, which ensures the protection of our App users’ data and prohibits unauthorised disclosure to third parties.

Claude Code downloads, update checks and sign-in

OffiAI downloads Claude Code from Anthropic only when you choose Install. For an OffiAI-managed installation, opening setup, refreshing status and restarting do not check for updates. ‘Update available? Check now’ requests release metadata from downloads.claude.ai. A separate ‘Update’ click downloads and verifies the checked version before activation. Cancelling or restarting does not authorize a later request. Failed checks or updates keep your working version available. The managed binary and previous version are stored inside OffiAI’s app-data folder; other installations keep precedence.

Sign in with Claude starts Claude Code’s sign-in flow and opens the provider’s page in your browser. Claude Code and the browser communicate with Anthropic. OffiAI never sees your password.

OffiAI’s download and release-metadata requests are separate from the agents’ own connections to their providers. Messages you send through OffiAI are passed to the relevant agent, which communicates with its own provider.

4) Cookies

To make our App attractive and to enable the use of certain functions, we use so-called cookies. These are small text files that are stored on your device. Some of the cookies we use are deleted after the App is closed (so-called session cookies). Other cookies remain on your device and allow us to recognise you (so-called persistent cookies). When cookies are set, they collect and process certain user information to an individual extent, such as browser and location data and IP address values. Persistent cookies are deleted automatically after a specified period, which may differ depending on the cookie.

Some cookies serve to simplify the operation of the App by saving settings. Insofar as personal data is also processed by individual cookies we use, the processing takes place in accordance with Art. 6 (1) (b) GDPR to perform the contract, in accordance with Art. 6 (1) (a) GDPR if consent has been given, or in accordance with Art. 6 (1) (f) GDPR to safeguard our legitimate interests in the best possible functionality of the App and a customer-friendly and effective design of App use.

You can configure the settings of your mobile operating system and of the App as you wish and, for example, refuse to accept third-party cookies or all cookies. Please note, however, that you may then no longer be able to use all functions of our mobile App.

5) Contacting us

When you contact us (e.g. via a contact form or by email), personal data is collected. Which data is collected when a contact form is used can be seen from the respective contact form in the App. This data is stored and used exclusively for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, an additional legal basis for the processing is Art. 6 (1) (b) GDPR. Your data will be deleted once your request has been fully processed. This is the case when the circumstances show that the matter in question has been conclusively resolved and provided that no statutory retention obligations prevent deletion.

6) Rights of the data subject

6.1 The applicable data protection law grants you comprehensive data subject rights (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:

• Right of access pursuant to Art. 15 GDPR: in particular, you have the right to information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the scope and intended effects of such processing for you, as well as your right to be informed which guarantees exist pursuant to Art. 46 GDPR when your data is transferred to third countries;
• Right to rectification pursuant to Art. 16 GDPR: you have the right to the immediate rectification of incorrect data concerning you and/or the completion of incomplete data stored by us;
• Right to erasure pursuant to Art. 17 GDPR: you have the right to request the erasure of your personal data if the conditions of Art. 17 (1) GDPR are met. However, this right does not exist in particular if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
• Right to restriction of processing pursuant to Art. 18 GDPR: you have the right to request the restriction of the processing of your personal data for as long as the accuracy of your data, which you dispute, is being verified; if you refuse the erasure of your data because of unlawful processing and instead request the restriction of processing; if you need your data for the establishment, exercise or defence of legal claims after we no longer need it once the purpose has been achieved; or if you have objected on grounds relating to your particular situation, as long as it has not yet been determined whether our legitimate grounds prevail;
• Right to notification pursuant to Art. 19 GDPR: if you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you has been disclosed of this rectification or erasure or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients;
• Right to data portability pursuant to Art. 20 GDPR: you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transmitted to another controller, insofar as this is technically feasible;
• Right to withdraw consent pursuant to Art. 7 (3) GDPR: you have the right to withdraw consent to the processing of data once given at any time with effect for the future. In the event of withdrawal, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the withdrawal;
• Right to lodge a complaint pursuant to Art. 77 GDPR: if you believe that the processing of personal data concerning you violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement, without prejudice to any other administrative or judicial remedy.

6.2 RIGHT TO OBJECT

IF, IN THE CONTEXT OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

7) Duration of storage of personal data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and, where relevant, additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).

When personal data is processed on the basis of express consent pursuant to Art. 6 (1) (a) GDPR, the data concerned is stored until you withdraw your consent.

If there are statutory retention periods for data that is processed within the scope of legal or quasi-legal obligations on the basis of Art. 6 (1) (b) GDPR, this data is routinely deleted after the retention periods have expired, provided that it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in continuing to store it.

When personal data is processed on the basis of Art. 6 (1) (f) GDPR, this data is stored until you exercise your right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

When personal data is processed for the purpose of direct marketing on the basis of Art. 6 (1) (f) GDPR, this data is stored until you exercise your right to object pursuant to Art. 21 (2) GDPR.

Unless the other information in this policy on specific processing situations states otherwise, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Legal text provided by IT-Recht Kanzlei; translation by Delicatino GmbH.