Privacy Notice

Last updated: November 2026 · applies to the DocUnderstand app and the website docunderstand.net

1. Controller

schubec GmbH, Dreifaltigkeitsgasse 18, 5020 Salzburg, Austria
Email: office@schubec.com · Web: www.schubec.com

2. The DocUnderstand app

2.1 Principle: no data collection

DocUnderstand processes your documents on your Mac. The app creates no user account, sends no usage statistics, contains no analytics or advertising services and does not "phone home". Everything the app extracts from your documents – file names, Finder tags, fields, summaries, the knowledge store with its embeddings and chats – is stored locally only. We have no access to it.

2.2 Local AI: everything stays on the device

By default DocUnderstand works with Apple Intelligence on the device or with a local language model running on your Mac. In both cases document contents, questions and answers are processed on your Mac and transmitted to no one – neither to us nor to third parties.

When you download a local model, the app connects to huggingface.co (Hugging Face, Inc., USA) for that purpose. Hugging Face receives your IP address and the name of the requested model, but no document data. Afterwards the model is used locally only.

2.3 Cloud providers and your own servers: only if you set them up

In Settings you can replace local AI with a cloud provider using your own API key – currently OpenAI, Anthropic or OpenRouter. In that case the contents of the processed documents (text and, if enabled, images), your questions and the chat history are transmitted to the chosen provider and processed there under its privacy policy and your agreement with it. The same applies if you enter your own server (such as Ollama, LM Studio or an OpenAI-compatible endpoint): the data goes to the address you specified. This transfer only happens if you have set up the provider yourself, and you can stop it at any time by switching back to local AI.

2.4 Crash reports: only with your consent

After the first launch the app asks once whether it may send crash reports. Only if you agree does it transmit a technical diagnostic report to our server (docunderstand.net) on the next launch after a crash or hang. The report is generated by Apple's MetricKit and contains call stacks and system details such as app version, macOS version and device type – never document contents, file names or questions. We use the reports solely to find and fix bugs and keep them only as long as that requires. You can withdraw your consent at any time under Settings › Advanced.

2.5 Mac App Store and direct edition

If you get DocUnderstand from the Mac App Store, Apple handles purchase, download and subscription; Apple's privacy policy applies. We only receive anonymised, aggregated statistics from Apple, and only if you have allowed Apple to share data with developers.

The direct edition checks for a new version on launch. This calls docunderstand.net; our server sees your IP address and the app's version number, no system profile. The licence is verified offline through a licence file; there is no activation against a server. If you order a renewal from within the app, the app opens the order form on the website and pre-fills the name and email address you gave with your first order.

2.6 Interface for other programs

The optional HTTP interface runs exclusively on your Mac. You decide whether it is enabled, which programs may connect and whether it is reachable on the local network. Data arriving through the interface is treated like dropped documents and leaves your Mac only through an AI provider you have set up (see 2.3).

3. The website docunderstand.net

3.1 No cookies, no tracking

The website sets no cookies, uses no analytics services and embeds no third-party content. Fonts, images and videos are hosted on our own server. When you visit, the web server briefly stores the usual access data for technical reasons (IP address, time, page requested, browser type). These logs serve operation and security only and are not analysed.

3.2 Contact form and orders

Contact form: If you write to us through the contact form, we store your name, email address and message. The details are sent to us by email and kept in our mailbox so we can answer your request and follow up on the conversation.

Licence orders (direct edition): If you order a licence, we store company, name, email address, address, VAT ID where applicable and your message. We need these details to issue the licence file, to invoice you, to contact you when the licence expires and to provide support. We keep invoicing data for as long as statutory record-keeping obligations require (seven years in Austria).

To prevent abuse, the server remembers a hash of the sender's address for one hour for both forms, not the address itself.

4. Your rights

You have the right to access the personal data we hold about you, and to rectification, erasure, restriction of processing, data portability and objection. You can withdraw any consent you have given – for example to crash reports – at any time. Please contact office@schubec.com. You may also lodge a complaint with the Austrian Data Protection Authority (www.dsb.gv.at).

5. Changes

If something changes in the app or on the website that affects your data, we update this notice. The date above shows the current version.