Privacy Policy

Updated 2026-10-18 · Version 1.0

1. Controller

MB Šilaika, company code 306016199, registered address Krakiškių g. 15-1, Vilnius, Lithuania, e-mail support@asido.app. For data protection questions write to support@asido.app.

2. Data we process

  • Account data: name, e-mail address, login identifier.
  • Business data: visits, services, prices, tips, expenses, goals, procedures, workplace model settings.
  • Uploaded files and screenshots: processed to extract entries (CSV, Excel and XML on your device; PDFs and images are sent to the AI provider to be read). They are kept temporarily in private storage and deleted once you confirm the entries, or within 24 hours at the latest.
  • Photos of receipts, invoices and documents you attach to expenses or the documents section: kept in private storage until you delete them or your account.
  • Your clients' data: client names and visit history you enter or import. We process this on your behalf (see section 6 of the Terms).
  • Technical data: device type, operating system version, app version, error logs.
  • Subscription data: plan status and expiry. We do not receive card details – payments are handled by Apple and Google.

2a. Health data (medical record book, health certificates)

  • You can store photos of your personal medical record book (F048/a) and health certificates with their expiry dates. These are special category personal data (GDPR Art. 9).
  • Legal basis – your explicit consent (GDPR Art. 9(2)(a)), given before you upload the first such document.
  • Purpose – only storing your documents and reminding you before they expire. We never share them with employers, insurers or anyone else and never use them for marketing.
  • Files are stored separately from other data, encrypted with a separate key on a server in the EU; access is logged. Only you can see them.
  • If you use date detection, the photo is sent temporarily to our AI provider (Anthropic) only to read the dates and number; it is not stored there.
  • You can withdraw consent at any time (Settings → Data). Health documents are then deleted within 30 days, including backups.

3. Purposes and legal bases

  • Providing the App, managing the account and storing data – performance of a contract (Art. 6(1)(b) GDPR).
  • AI assistant answers and report recognition – performance of a contract.
  • Security, fixing errors, improving the service using aggregated data – legitimate interest (Art. 6(1)(f)).
  • Keeping accounting documents – legal obligation (Art. 6(1)(c)).
  • Newsletters – only with consent (Art. 6(1)(a)), which you can withdraw at any time.

4. Recipients

If data is transferred outside the European Economic Area, we use the European Commission's standard contractual clauses or other safeguards under Article 46 GDPR. We do not sell data or use it for advertising.

  • Database and server provider Supabase Inc. (data stored in the EU, Frankfurt, Germany) – data storage.
  • Anthropic PBC – AI assistant requests and reading uploaded PDFs and screenshots. The assistant gets your question and aggregated figures, without your e-mail address. Under its commercial terms this data is not used to train AI models.
  • Apple Inc. and Google LLC – subscription payments and app distribution.
  • Hostinger International Ltd. – e-mail (support@asido.app) and website hosting; a transactional e-mail provider – system messages (sign-up confirmation, password reset).

5. Retention

  • Account and business data – while the account is active. After account deletion, data is deleted within 30 days and from backups within 60 days.
  • Accounts inactive for 24 months are deleted after an e-mail warning.
  • Accounting documents relating to payments – 10 years, as required by the Law on Accounting.

6. Your rights

You have the right to access, rectify and erase your data, restrict processing, receive your data in a portable format, object to processing based on legitimate interest and withdraw consent. You can do most of this yourself: export data or delete the account in settings. Otherwise write to us – we reply within 30 days.

You have the right to lodge a complaint with the State Data Protection Inspectorate (L. Sapiegos g. 17, Vilnius, www.vdai.lrv.lt).

7. Security

Data is transmitted over encrypted connections (TLS) and stored with access controls; access is limited to staff who need it.

8. Tracking

The App does not use advertising tracking and does not link your data with other companies' apps or websites.

9. Minors

The App is intended for persons aged 18 or over. If we learn that an account was created by a minor, we will delete it.

10. Changes

We will notify you of material changes in the App. The current version is always available in settings and at asido.app.