Privacy policy

1. Who is responsible

Teknocare GmbH, Switzerland (the company’s address is in the Impressum).

Questions about your data: info@teknocare.ch, or the support page (topic “Privacy”).

For people in the EU/EEA: we have not appointed a representative in the EU (Art. 27 GDPR) because we do not process data of people in the EU on a large scale. You can always contact us directly by email or at the address in the Impressum.

2. What data we process

When you ask a question (with or without an account)

• Your question, the answer and the sources found. To give the answer, the question is sent to our AI providers (see sections 4 and 5), which also search the web for it. Simple sums, greetings and translations are answered without a web search.
• Search history: to improve allqus and find popular topics, we keep questions, a short version of the answer, a topic (for example “Travel”), your IP address and an approximate location (country, region and city from your IP address) for 90 days, then they are deleted automatically. Questions that use your own files, projects or connected apps are never stored there.
• Technical data: IP address, browser, the page requested and the time, used to deliver the website, to limit abuse (too many requests) and to protect the service. Security events (for example failed admin logins, blocked requests) are kept for 90 days.
• Apps: if you install allqus as an app from your browser (Windows, Mac, Android, iPhone or iPad), it is the same website in its own window or full screen: the same data is processed as described here, and nothing more is collected. The app keeps only its program files and an offline page on your computer, never your chats or answers. To check whether a new version is live, it asks our server for the current version number, without any data about you.
• App lock (Face ID / fingerprint): if you switch it on, your device’s own security (Face ID, Touch ID, fingerprint, Windows Hello or device PIN) checks that it’s you when you come back to allqus. Your face, fingerprint and PIN never leave your device and are never sent to us; the device only confirms “verified”. We keep just an identifier of the lock key in your browser on that device. Switch it off at any time in Plan & billing.
• Weather background: the home page shows the current weather where you roughly are (sun, clouds, rain, snow, thunderstorm or fog) and the temperature. For this, your approximate position from your IP address is rounded to about 10 km and sent to our weather provider Xweather, without your IP address or anything else about you. It isn’t stored by us; the weather for an area is kept for 15 minutes so the same area isn’t asked again. You can switch the background off with “Hide sky”.
• Swiss alerts: if you visit from Switzerland, your approximate location (canton and position, worked out from your IP address) is used to show official alerts for where you are. It is used only at that moment and not stored for this. We load the alerts from Alertswiss on our server, so Alertswiss receives nothing about you. Alerts you hide are remembered only in your browser. See Swiss alerts.
• Voice mode: when you speak, the recording is sent to our AI provider Google to turn it into text, and answers read aloud are spoken by Google’s AI voice (the answer text is sent for this). The recordings are not stored by us. If the AI voice is unavailable, your browser’s own speech recognition is used instead; Chrome and Edge then send the audio to Google, Safari to Apple, and we only receive the text.
• Images and videos: when you ask allqus to make or change an image or video, your description (and, when you edit an image, the image and the marks you drew on it) is sent to our AI provider Google to create it. The result is stored at our hosting provider so it stays available in your chat, and we count how many you made each day for the limits of your plan.
• Typing help: word suggestions are made in your browser and send nothing. The grammar check sends the text in the question box (up to 400 characters, after a short pause in typing) to our AI provider to suggest a correction; we don’t store it. In Write a message, the message you write is sent to our AI provider only when you ask to fix, rephrase or translate it, and isn’t stored. “Send with WhatsApp” opens WhatsApp with the text filled in: the message is sent by WhatsApp, not by us, and the WhatsApp number you type is kept only in your browser.
• Your location is never taken from your device (no GPS). For weather and flight questions we use the place you name; if you don’t name one, the approximate city derived from your IP address.
• Interface language: your choice is kept in your browser. To show the menus and pages in your language, their texts (never your questions, answers, files or other content) are translated by our AI provider once and then reused for everyone. The language you use allqus in is sent with each question, so that questions without words (for example “1 − 5 = ?”) are answered in that language.

When you have an account

• Email address, name and password (stored as a secure hash), or your Google account details if you sign in with Google (name, email, profile picture).
• Age and gender given at sign-up. We ask your age to confirm you are 16 or older, and use it, with your gender if you chose to give it, only in anonymous statistics about who uses allqus. Gender is optional (“Prefer not to say” is fine). Neither is shared with advertisers or used to choose ads or answers.
• Company accounts: if you register as a company, its name, address, business category and, when you pick it from the Swiss commercial register, its company number (UID) and legal form, together with your name as the contact person. While you type the company name, the text you typed is sent to the Swiss commercial register (Zefix, run by the Federal Office of Justice) to suggest registered companies; it receives no other information about you. Company details from the register are public.
• Saved chats, projects and uploaded files, Drive files (documents, spreadsheets, presentations, uploads) and their version history, AI Agent tasks and their results, and Coder projects (code files and the chat with the Coder AI).
• If you use the allqus API: your API keys (we keep only a fingerprint, not the key itself), your prepaid balance and payments, and for each request its time, endpoint, key, price, status, duration and token counts (kept 13 months). API questions and their answers are kept in our internal search history like other questions (kept for the period described below), marked as coming from the API. They are never shown publicly or used to train AI.
• Connected apps (Connectors): the connection and its access token, stored encrypted. We only use them when you ask a question that needs them.
• Coder Agent: your instructions and images, the conversation with the AI, the plan and activity log, the code and files in the session's cloud computer, the commands run there and their output, test results and the screenshots the agent takes of your app. If you connect GitHub: your GitHub username and an access token, stored encrypted and used only for the repositories and actions you start (cloning, and pushing or opening pull requests only after you approve). In Coder, the same connection uploads your project to the repository you choose when you press Upload, and opens a repository you pick; the files go directly between your browser, our server and GitHub and are not kept by us beyond your saved Coder project. You can disconnect at any time and also revoke the access in your GitHub settings.
• Plan, usage counters (questions per day) and payment status. Card details are handled by Stripe and never reach us.
• Ad preferences you set (topics switched off, hidden ads).
• Email news: whether you agreed to receive emails about new features, products and offers, when and where you agreed (at sign-up or in Plan & billing), and when you unsubscribed. The box at sign-up is not ticked in advance and the service doesn’t depend on it. We send these emails to your account email address, at most a few times a month, and may count whether an email was opened or a link clicked, only to improve them. Unsubscribe at any time with the link in every email or the Email news switch in Plan & billing; that doesn’t affect emails needed for your account (receipts, security notices, password resets, important changes to these policies).

When you advertise (adwords.allqus.com)

• Company or personal details, contact person, address, company number and VAT number.
• Identity verification (KYC): copies of an ID card or passport, the commercial register extract and further documents you upload. They are only used to verify you and to prevent fraud, are only seen by our staff doing the check, and are kept as long as you advertise and for 10 years after the business relationship ends where Swiss law requires us to keep business records; otherwise they are deleted within 12 months after the account is closed.
• Campaigns, ads, budgets, balance, payments and statistics (impressions, clicks, spend).

When you contact support

• Your name, email, the topic and your message, kept for 2 years.

3. Why we process it (purposes and legal bases)

• To provide allqus: answering questions, saving your chats and files, running the AI Agent, Coder, Docs, Sheets and Slides, advertising campaigns (contract, Art. 6(1)(b) GDPR).
• Security and abuse prevention, rate limits, blocking attackers (legitimate interest, Art. 6(1)(f) GDPR).
• Age check and anonymous statistics: your age to confirm the minimum age (legal obligation and contract); age and optional gender for anonymous statistics (legitimate interest; gender only with your choice to give it).
• Improving the service with the search history and usage statistics (legitimate interest). You can ask us to delete history linked to your account at any time.
• Email news about new features, products and offers: only with your consent (Art. 6(1)(a) GDPR; for Switzerland, Art. 3(1)(o) of the Federal Act against Unfair Competition). You can withdraw it at any time; this doesn’t affect emails sent before. Emails about your account are sent to provide the service (contract).
• Payments and accounting (contract and legal obligation, Art. 6(1)(c) GDPR; Swiss bookkeeping law).
• Advertiser verification (KYC) to prevent fraud and misleading advertising (legitimate interest and legal obligations).

We do not sell personal data, and we do not build advertising profiles. Ads are chosen only from the words of the question you just asked (see section 7).

4. How we use artificial intelligence

allqus is built on generative AI. We follow the guidance of data protection authorities on generative AI (for example the French CNIL and the European Data Protection Board) and the transparency rules of the EU AI Act:

• You always know you are using AI. Answers, documents and code made by AI are presented as such. See About the AI and its answers.
• Roles. Teknocare GmbH decides why and how your data is used (controller). Our AI providers (section 5) process it only on our instructions under data processing agreements. They don’t use data sent through their paid APIs to train their models and may keep it only for a limited time to detect abuse before deleting it. If our main AI is unavailable, a backup AI from our other provider answers instead, under the same rules.
• Only what is needed. We send the AI only the question and what is needed to answer it (earlier messages of the same chat, relevant parts of files you chose, web results). We don’t send your name, email or account details with it.
• No training on your data. We don’t use your questions, answers, files, documents or code to train or fine-tune AI models.
• Please don’t enter sensitive data (for example health information, passwords, identity or bank numbers, or information about other people) unless it is really needed for your question.
• Accuracy. AI can be wrong, also about people. Every answer shows its sources so you can check it. If an answer contains wrong or unlawful information about you, write to us: we correct or delete what we have stored and take reasonable steps so it isn’t repeated.
• Web content is treated as untrusted. We instruct the AI to treat web pages and files as data and not to follow instructions hidden in them, and the AI provider’s safety systems filter harmful output.
• No automated decisions with legal or similarly significant effects on you are made by AI (Art. 22 GDPR, Art. 21 FADP).
• Human oversight. Our team reviews reports about harmful or wrong answers, and you can always reach a person through the support page.

5. Service providers we use

We use these providers to run allqus. They only process data on our behalf and under contracts that protect it.

Some providers are in the USA. Transfers rely on the Swiss–US and EU–US Data Privacy Frameworks where the provider is certified, and otherwise on the standard contractual clauses approved by the Swiss Federal Data Protection and Information Commissioner and the EU Commission (for the UK, the UK addendum to these clauses). Our AI providers do not use data sent through their APIs to train their models.

Connected apps (for example your email, calendar or file storage) receive the requests you trigger. Their own privacy policies apply.

Swiss commercial register. When you register as a company, the company name you type is looked up in the public Swiss commercial register (Zefix) of the Federal Office of Justice. It is a public authority, not a provider working for us; its own data protection rules apply.

Alertswiss. Official alerts come from Alertswiss, the alert channel of the Federal Office for Civil Protection (FOCP) and the cantons, published as open data. We fetch them from our server; no data about you is sent to Alertswiss.

WhatsApp. When you press “Send with WhatsApp” in Write a message, your browser opens WhatsApp (app or WhatsApp Web) with the message filled in, using a public WhatsApp link. The message is sent only when you press send in WhatsApp. We don’t have a WhatsApp connection, don’t receive your chats or contacts, and don’t learn whether or to whom the message was sent. WhatsApp is a service of WhatsApp Ireland Ltd (Meta) for users in Europe; its own terms and privacy policy apply to what you send there.

6. How long we keep data

• Search history: 90 days. Security events: 90 days.
• Account data, chats, projects, Drive files, AI Agent tasks and Coder projects: until you delete them or your account. A draft of the open Coder project is also kept in your browser's local storage.
• Coder Agent sessions: until you delete them. The cloud computer of a session (with its files) is removed after 14 days without use; download what you want to keep.
• Ad impressions and clicks: 13 months. Payments and invoices: 10 years (Swiss bookkeeping law).
• Images and videos you made: kept so they stay available in your chats; ask us through the support page to delete them. Daily counters for plan limits: 30 days.
• Company details of a company account: with the account, until you delete it.
• Support messages: 2 years.
• Email news: your choice is kept with your account. After you unsubscribe, we keep the record of your consent and of the unsubscription for up to 3 years, only to show that we had your consent.
• KYC documents: see section 2.
• API request records: 13 months. Interface translations contain no personal data and are kept as long as they are used.

7. Advertising

Under some answers you may see one ad, marked “Sponsored”. It is chosen only by matching the words of your current question (and a little the one before) with keywords the advertiser chose. We do not use your history, account, location or cookies for this, and advertisers receive no data about you: they only see how often their ad was shown and clicked.

To count a paid click only once per person and day, we store a random code made from your IP address and browser that changes every day and cannot be traced back to you after that day. Your choices (topics switched off, hidden ads) are kept in your browser and, if you are signed in, in your account. See Adverts → Ad preferences.

Affiliate links. Instead of an advertiser’s ad, the same place may show an affiliate link, marked “Sponsored · Affiliate link”, from the affiliate network Awin (AWIN AG, Germany, and its group companies). If you buy something after clicking it, the shop may pay us a commission; the price for you is the same. It is chosen by the words of your question or at random, never by data about you. Before you click, nothing about you is sent to Awin or the shop: we load the picture on our server. When you click, you go through Awin’s tracking link to the shop; Awin and the shop then process your visit (for example with a cookie that records that the visit came from us) under their own privacy policies, and we only count the click.

8. Cookies and local storage

We only use cookies that are needed to run allqus (staying signed in, security). There are no tracking or advertising cookies and no third-party analytics. Details: Cookies and local storage.

9. Your rights

You can ask us at any time:

• what data we hold about you (right of access) and to receive your data in a usable format (data portability);
• to correct wrong data, to delete data or to restrict its use;
• to stop using data based on our legitimate interest (objection), and to withdraw a consent you gave.

Signed in, you can do much of this yourself: on Support → Your data you can download your data and delete your account. Otherwise write to info@teknocare.ch. We may ask you to prove your identity. We answer within 30 days.

You may complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch), in the EU/EEA to the data protection authority of your country (for example the CNIL in France, www.cnil.fr), or in the UK to the Information Commissioner’s Office (ico.org.uk).

10. Security

Connections are encrypted (HTTPS). Data is stored in Switzerland with access rules per person. Connector tokens and the admin’s two-step secret are encrypted. Access to administration is protected by a strong password and two-step sign-in. No system is completely secure; if a breach puts your data at high risk, we will inform you and the FDPIC as the law requires.

11. Children

allqus is not intended for children under 16. Accounts may only be opened from 16 years (younger people only with a parent’s consent). If we learn that a child under 16 has an account without consent, we delete it.

12. Users in other countries

We give the rights in section 9 to everyone, wherever they live. In addition, depending on where you live:

• EU/EEA and UK: the GDPR and UK GDPR apply, with the legal bases named in section 3.
• United States (for example California under the CCPA/CPRA and other state privacy laws): you can ask to know, correct and delete your personal information. We do not sell your personal information or share it for cross-context behavioural advertising, and we don’t use sensitive personal information to infer characteristics about you. We will not treat you differently for using your rights. You may use an authorised agent; we may ask for proof of authorisation.
• Brazil (LGPD), Canada (PIPEDA and provincial laws), Australia (Privacy Act), Japan (APPI), South Korea (PIPA), India (DPDP Act) and other countries: you have the rights your law gives you, such as access, correction, deletion and withdrawing consent, and you may complain to your national data protection authority.

Data is processed in Switzerland and, through the providers in section 5, in the EU and the USA, with the safeguards described there.

13. Changes

We update this policy when allqus changes. The date at the top shows the latest version. We inform account holders by email or in the app about important changes.