EN IT FR DE
LexCH · Legal

Privacy Policy

Privacy Policy – LexCH

Last updated: August 2026

1. Data Controller

The data controller is:

Aaron Boccadamo
Danijel Balcakovic
Via Carona 38
6900 Paradiso, Ticino – Switzerland
Email: info@lexlegal.ch

LexCH is not currently registered in the Swiss Commercial Register.

For any questions regarding data protection or to exercise your rights, please contact us at the address above.

2. Scope of Application

This policy applies to the processing of personal data carried out through:

3. Personal Data Processed

We process data provided directly by the user, data generated during use of the service, and technical data collected automatically.

3.1 Account Data

3.2 Access and Technical Data

These data serve account security, notification delivery and abuse prevention.

What we do not collect. We do not collect screen resolution, time zone, geographic location, or the country or city you connect from. An earlier version of this policy mentioned these data: the feature that was meant to collect them was never activated and has been removed from the service.

3.3 AI Chat Data

3.4 Uploaded Documents

3.5 Personal Document Archive

3.6 Settings, Preferences and Consents

3.7 Push Notifications

3.8 AI Usage Data

3.9 Temporary Verification and Security Data

3.10 Device Permissions

LexCH requests the following device permissions, only if the user explicitly grants them and only when the related feature is first used:

The user may revoke permissions at any time from the operating system settings. Revocation does not result in data loss but may limit certain features.

3.11 Assistant Memory

The assistant can remember what you tell it. The feature is found under Settings → AI Memory and is switched off by default: until you turn it on yourself, nothing you write is extracted or retained for this purpose, and every conversation starts from scratch.

How it works. When memory is on, after each answer an artificial intelligence model re-reads the question/answer pair and extracts the information concerning you. At most 60 items are retained: once the limit is reached, the oldest are replaced by the newest. The categories of information extracted are:

The information retained is brought together into a single summary text, which is inserted into subsequent conversations so that the assistant can take it into account without your having to repeat yourself.

The extraction goes through Google. The analysis that produces this information is performed by the AI provider indicated in § 5: for every answer, your question and the assistant's answer are therefore transmitted to Google for this operation as well. The memory summary is then transmitted to Google again in each subsequent conversation in which the assistant is to take it into account.

This is profiling, and we declare it as such. Building and updating a picture of your family, professional, financial and legal situation on the basis of your conversations constitutes profiling within the meaning of the Federal Act on Data Protection. Turning the feature on constitutes your consent to this processing. Further information in § 15.2.

You remain in control. At any time, from Settings → AI Memory, you can:

4. Purposes of Processing

Personal data is processed to:

5. Use of Artificial Intelligence

LexCH uses artificial intelligence systems to process user-submitted content and provide:

AI outputs serve an informational and support purpose and do not constitute legally binding decisions or professional legal advice.

5.1 Who processes your requests

The provider of the artificial intelligence models is Google (Gemini models). LexCH uses a paid plan of Google's programming interface: the conditions described in § 5.3 apply by virtue of that plan.

5.2 What is transmitted to Google

To generate an answer, we transmit to Google, over an encrypted connection (HTTPS with TLS 1.2 or higher):

It follows that everything the document contains is transmitted to Google together with the document, including personal data — yours or third parties' — that is not needed for the question you are asking. For this reason we invite you to upload only the documents genuinely necessary for your request.

The same applies to the assistant memory: if it is on, the picture of your personal situation gathered in earlier conversations is transmitted to Google together with the new question.

5.3 What Google does with these data

Data transmitted to Google remain subject to Google's retention periods even after you have deleted them from LexCH or deleted your account (see § 10).

Users are advised to avoid entering unnecessary personal data of third parties.

6. Source of Data

Data is collected:

If the user enters third-party data, they are responsible for complying with applicable law.

7. Legal Basis for Processing

We process personal data:

8. Disclosure to Third Parties

We may disclose personal data to providers who process data on our behalf, including in particular:

Such providers are selected and contractually bound to ensure processing in compliance with applicable law.

Data may also be disclosed to authorities or advisors when required by law or necessary to protect legal rights or interests.

We do not sell personal data.

9. International Data Transfers

To deliver the service we rely on providers that also process data outside Switzerland. They are:

These providers process data in the United States and in the European Union.

If the destination country does not provide an adequate level of protection, we put in place appropriate safeguards (in particular standard contractual clauses), subject to exceptions provided by law.

Reference: Federal Data Protection and Information Commissioner (FDPIC) – Transfer of personal data abroad.

10. Retention Period

We retain data for as long as necessary for the purposes stated and, thereafter, for legal obligations or defence of rights.

In particular:

10.1 Account deletion

When you delete your account, your data are deleted immediately, including the files kept in the archive. We do not retain a copy in case you change your mind: deletion is final.

An exception applies to what has already been transmitted to Google to generate the answers: those data remain with Google for the periods indicated in § 5.3 and we cannot have them deleted earlier.

11. Data Security

The protection of our users' data is an absolute priority for LexCH. We apply the highest industry security standards to ensure that your personal information, your AI assistant conversations, and your documents remain private, confidential, and accessible to you alone.

Our technical and organisational measures protect personal data from:

Measures include access controls, credential protection, strict internal access restrictions, security event logging, continuous monitoring, and further measures proportionate to the risk.

11.1 Encryption of data at rest

Your personal data and the content you generate are encrypted with AES-256-GCM — the same standard used by banks and public administrations — before being saved to the database. The key is not in the database: it is held on the application server, separate from the data it protects.

In practice: anyone obtaining a copy of the database — a hosting provider, a system administrator, an attacker — would find only encrypted text, unusable without the key.

What this does not mean. This is not zero-knowledge encryption: the server holds the key and therefore has the technical ability to decrypt your content. It does so when this is needed to answer you — to send your question to the AI assistant, to read a document you ask us about, to extract its text, or to fill in a form. Outside these operations, and subject to legal obligations, nobody reads your content and it is not used to train artificial intelligence models.

We say this plainly because a service that processes your documents with artificial intelligence cannot, by its very design, be zero-knowledge: in order to process them, it must be able to read them.

Data protected by AES-256-GCM:

User profile

AI conversations

Personal document archive

Notifications and devices

Security logs

Credential protection:

11.2 Secure transmission

All communications between the app, the website and our servers take place exclusively over HTTPS with TLS 1.2 or higher, with a valid certificate issued by a recognised certification authority. The same applies to the data we transmit to the providers indicated in § 5 and § 8. Your data are therefore protected both in transit and at rest.

This is not end-to-end encryption. Encryption in transit protects the path between your device and our servers: it prevents anyone from intercepting the data while they travel, but on arrival the server decrypts the content, because in order to answer you it must be able to read it. It is the same reason explained in § 11.1.

With end-to-end encryption, not even the service provider can read the content. An assistant that analyses your questions and your documents cannot work that way, and we prefer to say so plainly rather than use a word that sounds better than what we actually do.

11.3 Our commitment

We consider the privacy of our users a core value. LexCH has been built so that your legal data, your AI questions and your documents remain exclusively yours.

12. Newsletter and Communications

If you have given your consent, we may use your contact details to send:

You may withdraw your consent at any time via:

13. Push Notifications

If you enable push notifications, we may send you operational, informational or service-related communications to your device.

You may disable them at any time from the app or device settings, using the available options.

14. User Rights

To the extent permitted by applicable law, you have the right to:

14.1 What you can already do yourself, right away, in the app

14.2 What you have to ask us for in writing

The app does not yet have a feature that exports your data into a file. If you want a copy of the data concerning you, or the correction of data you cannot amend yourself, or to object to a particular processing operation, write to us at info@lexlegal.ch and we will take care of it.

Swiss law (FADP) provides:

14.3 Complaint to the supervisory authority

If you consider that the processing of your data does not comply with the law, you may contact the Federal Data Protection and Information Commissioner (FDPIC), the competent supervisory authority in Switzerland. Recourse to the courts remains available.

15. Automated Decisions and Profiling

15.1 Automated decisions

LexCH uses automated tools and AI systems to provide support to the user.

The service does not take automated individual decisions producing legal effects concerning you or similarly significantly affecting you: what the assistant produces is information, analysis and proposals, which remain subject to your assessment and your decision. Automated checks necessary for the operation and security of the service are excluded from this, such as the management of the limits of the plan subscribed to and measures against abuse.

Should a specific feature involve an automated individual decision within the meaning of applicable law, you will be informed as required by law.

15.2 Profiling

The assistant memory described in § 3.11, when you have turned it on, constitutes profiling: automated processing which, on the basis of your conversations, builds and updates a picture of you — family situation, canton and municipality, occupation and employer, ongoing legal matters, residence permit and AHV/AVS situation, financial situation, preferences.

Regarding this profiling, we wish to make the following clear:

Outside this feature, LexCH does not carry out profiling of users.

16. Minors

LexCH is intended for individuals capable of using the service independently and responsibly.

Those using the app represent that they have the capacity required to do so under applicable law.

If we become aware that personal data has been processed in a manner inconsistent with applicable age or consent rules, we will take reasonable measures to limit or discontinue such processing.

17. Changes to this Policy

We may update this privacy policy at any time, in particular in the event of:

The updated version will be published in the app and/or on relevant channels, with an indication of the last update date.

18. Contact

For questions about this policy or to exercise your rights, contact us at:

Aaron Boccadamo
Danijel Balcakovic
Via Carona 38
6900 Paradiso, Ticino – Switzerland
Email: info@lexlegal.ch