EN IT FR DE
LexCH · Legal

Privacy Policy

Privacy Policy – LexCH

Last updated: August 2026

1. Data Controller

The data controller is:

Aaron Boccadamo
Danijel Balcakovic
Via Carona 38
6900 Paradiso, Ticino – Switzerland
Email: info@lexlegal.ch

LexCH is not currently registered in the Swiss Commercial Register.

For any questions regarding data protection or to exercise your rights, please contact us at the address above.

2. Scope of Application

This policy applies to the processing of personal data carried out through:

3. Personal Data Processed

We process data provided directly by the user, data generated during use of the service, and technical data collected automatically.

3.1 Account Data

3.2 Access and Technical Data

3.3 AI Chat Data

3.4 Uploaded Documents

3.5 Personal Document Archive

3.6 Settings, Preferences and Consents

3.7 Push Notifications

3.8 AI Usage Data

3.9 Temporary Verification and Security Data

3.10 Device Permissions

LexCH requests the following device permissions, only if the user explicitly grants them and only when the related feature is first used:

The user may revoke permissions at any time from the operating system settings. Revocation does not result in data loss but may limit certain features.

4. Purposes of Processing

Personal data is processed to:

5. Use of Artificial Intelligence

LexCH uses artificial intelligence systems to process user-submitted content and provide:

AI outputs serve an informational and support purpose and do not constitute legally binding decisions or professional legal advice.

AI Provider: LexCH uses the Google Gemini (Google LLC) API. To generate responses, conversation content and shared documents are transmitted to Google over an encrypted connection (TLS 1.2+). Under the Google Gemini API Terms of Use, these data are not used by Google to train its models and are not shared with third parties. Google LLC maintains internationally certified security standards (ISO 27001, SOC 2 and SOC 3).

Users are advised to avoid entering unnecessary personal data of third parties.

6. Source of Data

Data is collected:

If the user enters third-party data, they are responsible for complying with applicable law.

7. Legal Basis for Processing

We process personal data:

8. Disclosure to Third Parties

We may disclose personal data to providers who process data on our behalf, including in particular:

Such providers are selected and contractually bound to ensure processing in compliance with applicable law.

Data may also be disclosed to authorities or advisors when required by law or necessary to protect legal rights or interests.

We do not sell personal data.

9. International Data Transfers

Data may also be processed outside Switzerland.

If the destination country does not provide an adequate level of protection, we put in place appropriate safeguards (e.g. standard contractual clauses), subject to exceptions provided by law.

Reference: FDPIC – Transfer of personal data abroad.

10. Retention Period

We retain data for as long as necessary for the purposes stated and, thereafter, for legal obligations or defence of rights.

In particular:

11. Data Security

The protection of our users' data is an absolute priority for LexCH. We apply the highest industry security standards to ensure that your personal information, your AI assistant conversations, and your documents remain private, confidential, and accessible to you alone.

Our technical and organisational measures protect personal data from:

Measures include access controls, credential protection, strict internal access restrictions, security event logging, continuous monitoring, and further measures proportionate to the risk.

11.1 Zero-knowledge architecture – not even we can read your data

LexCH is designed according to a zero-knowledge architecture: personal data and the content you generate are encrypted using AES-256-GCM – the same standard used by banks, governments and military institutions – before being saved to the database.

The encryption key is held exclusively on our application server, isolated from the database. This means that:

Scope of zero-knowledge encryption: the protection described above applies to data stored in LexCH systems. By their nature, AI features require that conversation content be transmitted to the provider (Google Gemini API) in readable form to generate a response – an inherent characteristic of any AI service, managed with the safeguards described in §5.

Data protected with AES-256-GCM encryption

User profile

AI assistant conversations

Personal document archive

Notifications and devices

Security logs

Credential protection

11.2 End-to-end protected transmission

All communications between the app, the website and our servers take place exclusively over HTTPS with TLS 1.2 or higher, with a valid certificate issued by a recognised certification authority. Data is therefore protected both in transit and at rest.

11.3 Our commitment

We consider the privacy of our users a core value. LexCH has been built so that your legal data, your AI questions and your documents remain exclusively yours.

12. Newsletter and Communications

If you have given your consent, we may use your contact details to send:

You may withdraw your consent at any time via:

13. Push Notifications

If you enable push notifications, we may send you operational, informational or service-related communications to your device.

You may disable them at any time from the app or device settings, using the available options.

14. User Rights

To the extent permitted by applicable law, you have the right to:

To exercise your rights: info@lexlegal.ch

Swiss law (FADP) provides:

15. Automated Decisions

LexCH uses automated tools and AI systems to provide support to the user.

Unless expressly stated otherwise, the service is not intended as a system that makes legally binding automated individual decisions without human involvement.

If a specific feature were to involve an automated individual decision within the meaning of applicable law, the user will be informed as required by law.

16. Minors

LexCH is intended for individuals capable of using the service independently and responsibly.

Those using the app represent that they have the capacity required to do so under applicable law.

If we become aware that personal data has been processed in a manner inconsistent with applicable age or consent rules, we will take reasonable measures to limit or discontinue such processing.

17. Changes to this Policy

We may update this privacy policy at any time, in particular in the event of:

The updated version will be published in the app and/or on relevant channels, with an indication of the last update date.

18. Contact

For questions about this policy or to exercise your rights, contact us at:

Aaron Boccadamo
Danijel Balcakovic
Via Carona 38
6900 Paradiso, Ticino – Switzerland
Email: info@lexlegal.ch