Privacy Policy

This Privacy Policy describes how Dabudinwst Sp. z o.o. (hereinafter referred to as the "Company", "we") collects, uses, and protects the personal data of users of the FloorisPlan mobile application (hereinafter referred to as the "Application").

By using the Application, you agree to the terms of this Privacy Policy.

1. Data Controller

The data controller is:

Dabudinwst Sp. z o.o.
NIP: 1133056595
REGON: 521795720
Address: Hoża 86 lok. 410, 00-682 Warszawa, Polska
Email:

2. What Data We Collect

2.1. User Profile Data

The user may enter the following data in the Application settings:

• Name
• Email address
• Company name
• Company address
• Phone number

This data is stored locally on the device within the Application's storage and is included in exported PDF and DXF files. The data is not transmitted to the Company's servers.

2.2. Analytics Data

We use Firebase Analytics and Firebase Crashlytics to collect anonymous data about the use of the Application and to ensure its stability:

• Device type, model, and operating system version
• Language and regional settings
• Actions within the Application (screen views, feature usage)

2.3. Crash Data (Crashlytics)

Firebase Crashlytics automatically collects the following information when a crash or error occurs in the Application:

• Stack traces and exception information
• Crashlytics installation ID (a unique UUID for the app instance)
• Device model, OS version, and screen orientation
• Amount of RAM and disk space
• Device state at the time of the crash (charging, background/foreground)

Crashlytics does not collect personal data that can identify the user.

2.4. User Content

The Application stores data you create:

• Floor plans and measurements
• Wall elevations
• Engineering point markers (electrical, water, sewage, radiators)
• Estimates, material lists, and payment amounts
• Project tasks, notes, and schedules
• Project photos, if added by the user

2.5. Client Data in a Project Card

A user may voluntarily add their client's name, phone number, email address, PESEL national identification number, and residential address to a project card. This data is stored in the Application's protected storage on the device and is used to manage the project, contact the client, and generate documents locally.

Floris AI does not receive these fields and cannot read, add, or modify them. The client's name, phone number, email address, PESEL, and residential address are not sent to OpenRouter or AI model providers. Client names and phone numbers stored in schedule entries are also excluded from AI context.

The user is responsible for having a lawful basis to enter another person's data and for meeting any applicable duty to inform that person. Personal client data should not be entered into free-text tasks, notes, schedule period titles, or Floris AI commands, because such text may be sent to the AI service as described in Section 2.7.

2.6. Voice Input (RECORD_AUDIO)

The Application requests the RECORD_AUDIO permission for voice-controlled drawing and estimating. Recognition is performed by the system speech recognition service selected or provided by the device; depending on its settings, the audio stream may be transmitted to that service provider. The Application does not save audio recordings. The user can opt out of voice input and use manual input instead.

2.7. Floris AI

When a user interacts with Floris AI, the Application sends the typed or transcribed command and the working context of the current project needed to answer or carry out the command to OpenRouter API (openrouter.ai). This context may include the project name and site address, area, room parameters, estimate items, project payment amounts, tasks, notes, and the dates, titles, statuses, and notes of schedule periods.

Direct client data from the project card — name, phone number, email address, PESEL, and residential address — is not included in AI context. Client names and phone numbers are also removed from schedule data before it is sent. Floris AI has no access to contracts or their contents. No audio is sent to OpenRouter; only recognized text is transmitted.

OpenRouter routes the request to a selected AI model provider. Processing by OpenRouter and model providers is governed by their terms and policies; see the OpenRouter Privacy Policy for details. The Application does not maintain its own external history of AI conversations.

2.8. Google Play Billing (Purchases)

The Application offers subscriptions and one-time purchases through Google Play. Google processes payment data — the Application does not receive bank card details. The Application receives from Google: subscription status, purchase history, and purchase tokens. Learn more: Google Play Policy.

2.9. System Data

The Application reads the installation time to calculate the trial period (30 days) and the country/region from the device's system locale to determine access conditions.

2.10. Bluetooth Distance Meter

The Application requests Bluetooth permissions to discover and connect to a compatible Leica DISTO laser distance meter. On older Android versions, Bluetooth Low Energy scanning may additionally require location permission. The Application does not obtain, store, or transmit geographic coordinates; this permission is used only to discover and connect to the measurement device.

2.11. Data Export and Documents

Exported files and generated documents may contain user profile data, project information, and client data selected for the relevant document. Files are generated locally. When a user saves them outside the Application's protected storage or shares them through a third-party application, such as email or a messenger, the user selects the recipient and is responsible for further distribution.

2.12. Android Backup

If Android system backup is enabled on the device, Application data, including projects, estimates, photos, and schedules, may be included in the user's Google Account backup and restored on a compatible device. Backup is performed by Android and is governed by the user's account settings and Google's policy. Users can manage backup in the device's system settings.

3. Purposes of Data Processing

We process your data for the following purposes:

• Providing and supporting the functionality of the Application
• Analyzing usage and improving the Application
• Identifying and resolving technical errors
• Processing purchases and subscriptions through Google Play
• Communicating with users (support, updates)
• Fulfilling legal obligations

4. Legal Basis for Processing

Personal data processing is carried out on the following grounds in accordance with the GDPR:

• Consent (Art. 6(1)(a) GDPR) — for analytics
• Performance of a contract (Art. 6(1)(b) GDPR) — for service provision, voice input, and purchase processing
• Legitimate interest (Art. 6(1)(f) GDPR) — for improving the Application and ensuring security

5. Data Sharing with Third Parties

We may share data with the following categories of recipients:

• Google LLC — as part of using Firebase Analytics, Firebase Crashlytics, Google Play Billing, and Android system backup, and for speech recognition when a Google service is selected on the device (servers may be located outside the EEA; transfers are made using applicable international data-transfer mechanisms)
• The provider of the device's system speech recognition service — to process audio only when voice input is used and a non-Google provider is selected on the device
• OpenRouter, Inc. and selected AI model providers — to process Floris AI requests. The user's command and the working project context described in Section 2.7 are transmitted. Direct client data from project cards and client contact details from schedules are not transmitted. See the OpenRouter Privacy Policy
• Government authorities — in cases provided for by law

We do not sell your personal data to third parties.

6. Data Retention

We retain your personal data for as long as necessary for the purposes described in this Policy:

• User profile, project, and client-card data — stored locally until the user deletes the relevant data, clears Application data, or uninstalls the Application; copies may remain in Android system backup as described in Section 2.12
• AI request content — processed by OpenRouter and the selected model provider under their applicable retention settings and policies
• Analytics data — up to 26 months (default Firebase Analytics settings)
• Crash data (Crashlytics) — up to 90 days
• Purchase data — in accordance with Google Play policy

7. Your Rights

In accordance with the GDPR, you have the following rights:

• Right of access — to obtain information about your data that we process
• Right to rectification — to correct inaccurate or incomplete data
• Right to erasure — delete a client or individual project in the Application, or delete all local data by clearing Application data or uninstalling it; system backups can be managed through Android and Google Account settings
• Right to restriction of processing — to restrict data processing
• Right to data portability — to receive your data in a machine-readable format
• Right to object — to object to data processing based on legitimate interest
• Right to withdraw consent — to withdraw previously given consent at any time

To exercise your rights, contact us at:

8. Data Security

We implement technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. This includes:

• Data encryption in transit (TLS/SSL)
• Local data is stored in the Application's protected storage, accessible only to the Application itself (Android App Sandbox)
• Restricted access to personal data

9. Children's Data

The Application is not intended for persons under 16 years of age. We do not knowingly collect children's data. If you discover that a child has provided us with their data, please contact us to have it deleted.

10. Cookies and Similar Technologies

The Application may use similar technologies (Firebase SDK, Firebase Crashlytics SDK, device identifiers) to ensure proper functioning of analytics and crash reporting. You can manage these settings through your device parameters.

11. Changes to This Policy

We reserve the right to update this Privacy Policy. We will notify you of changes through the Application or by email. We recommend periodically reviewing this page.

12. Contact Us

If you have any questions regarding this Privacy Policy, please contact us:

Dabudinwst Sp. z o.o.
Address: Hoża 86 lok. 410, 00-682 Warszawa, Polska
Email:
Application page on Google Play: https://play.google.com/store/apps/details?id=com.clewbyte.floorisplan

You also have the right to file a complaint with the data protection supervisory authority — Urząd Ochrony Danych Osobowych (UODO), Stawki 2, 00-193 Warszawa, Polska.