Terms of Use of the au au application
Effective from: October 29, 2025
1. Introduction
Welcome to the mobile and web application au-au.app (hereinafter referred to as the "Application"), operated by its developer and owner Lucid Solutions Designers s.r.o., ID: 237 15 065, with registered office at Úhlejov 11, 507 71 Úhlejov, registered in the Commercial Register maintained by the Regional Court in Hradec Králové under file No. C 55286 (hereinafter referred to as the "Operator"), which is authorized in accordance with Act No. 121/2000 Coll., on Copyright, Rights Related to Copyright and on Amendments to Certain Acts (Copyright Act), as amended, to exercise property rights to these websites. By using this Application, you agree to these Terms of Use (hereinafter referred to as "Terms"). These Terms apply to any person who intends to use or uses the above-mentioned pages.
By using the Application, you confirm that you have read, understand and agree to comply with these Terms.
Application:
- does not replace healthcare services or medical diagnosis,
- does not provide medical advice,
- is not intended for making health decisions without consulting a specialist,
- provides supportive, explanatory and educational information based on documentation that the user uploads themselves.
2. Acceptance of Terms
By accessing and using the Application, you expressly agree to be bound by these Terms, as well as all applicable laws of the Czech Republic and possibly other jurisdictions that may apply to your use of the Application.
You are solely responsible for compliance with applicable legislation of the Czech Republic, the European Union and relevant international commitments and regulations relating to your behavior and use of the Application.
The service is not intended for persons under 18 years of age. By registering or using the service, you confirm that you are 18 years of age or older, or the Operator assumes that a minor is represented by their legal representative when using the Application.
3. Use of Application
3.1 Authorized Use
You may use the Application exclusively for personal, non-commercial and lawful purposes. You agree not to use the Application in a manner that:
- violates any valid and effective legal regulation,
- disrupts the security, integrity or functionality of the Application or related systems or networks,
- includes unauthorized copying, modification, distribution or publication of content protected by copyright or other intellectual property rights,
- serves to send unsolicited messages, advertisements, spam or other unauthorized commercial communications,
- impersonates another person or entity or otherwise misleads regarding the user's identity,
- harasses, offends, abuses, threatens or otherwise violates the rights of other users or third parties.
3.2 User Account and Data
If the Application allows local data storage, you are fully responsible for protecting this data. We recommend regular backup of stored content.
terms.section3.subsection3.title
terms.section3.subsection3.content
- terms.section3.subsection3.item1
- terms.section3.subsection3.item2
- terms.section3.subsection3.item3
terms.section3.subsection3.content2
4. Intellectual Property Rights
4.1 Application Ownership
All content of the Application, including software, design, text, graphics, logos, icons, databases, source codes and related elements, is the property of the Operator or its authorized license providers and is protected by applicable laws of the Czech Republic in the field of intellectual property, in particular Act No. 121/2000 Coll., on Copyright, Rights Related to Copyright, and Act No. 441/2003 Coll., on Trademarks.
Any unauthorized copying, distribution, modification or other use of the Application or any part thereof without the prior written consent of the Operator is expressly prohibited.
4.2 AI-Generated Content
Evaluations and proposals created using artificial intelligence (AI) are provided "as is" and you may freely use them for personal, non-commercial purposes. AI content is not protected by copyright in favor of the Operator.
5. Liability and Automated Interpretation
The Operator of the Application is not liable for any effects, decisions, health damage, losses, costs or any other consequences that may arise from the use of the Application. The Application serves only as a tool for analyzing medical reports and providing information or interpretations regarding the content of these reports. Analysis results, interpretations and recommendations generated by the Application are not intended as a substitute for professional medical consultation, diagnosis or treatment. Users of the Application should always consult a qualified healthcare professional for further examination and confirmation of any information obtained through the Application. Use of the Application is at the user's own risk and the Operator is not liable for any consequences that may arise from incorrect use or interpretation of information provided by the application.
AI-generated content may contain errors, inaccuracies or inappropriate recommendations. The Operator does not guarantee the accuracy or suitability of such content. The user is obliged to assess the safety and suitability of using the Application's evaluation at their own discretion.
Although the Operator of the Application strives for maximum accuracy and timeliness of information and interpretations provided based on the analysis of medical reports, it cannot guarantee that all information, interpretations or recommendations are error-free, complete or current. The Application may contain inaccuracies, errors or outdated information. Given the nature of healthcare and medical information, it should be borne in mind that the Application may have limited ability to interpret complex or specific health data. This information should not be considered final or authoritative and may be supplemented or modified by a specialist in the field. The Operator is not liable for any consequences of using information or interpretations provided by the Application, including any errors or omissions that may have a negative impact on users.
The Application uses artificial intelligence and algorithms to analyze medical reports and generate interpretations and recommendations based on these reports. The user acknowledges that these automated functions cannot guarantee 100% accuracy and interpretations generated by the Application are not always able to correctly take into account all contextual and specific factors that could affect the accuracy and completeness of the analysis. Results generated by the Application should serve only as a supporting tool and cannot replace professional medical advice, diagnosis or treatment. The user is obliged to always consult a qualified healthcare professional if they have any doubts or questions regarding the interpretation of their medical report.
The user acknowledges that the Application is provided "as is" and "as available", without any warranties, express or implied, and uses it at their own risk.
This limitation does not apply to liability that cannot be contractually excluded under mandatory provisions of legal regulations, especially in the field of consumer protection.
6. Continuous Operation
The Operator of the Application undertakes to make reasonable efforts to ensure the availability of the Application without interruption, but is not liable for any outages or errors that may occur during use of the application. The Application may be temporarily unavailable due to maintenance, technical problems or other circumstances beyond the Operator's control. The Operator reserves the right to make changes, updates or modifications to the Application at any time and without prior notice, which may result in limitation of functionality or availability of the service. The Operator is not liable for any losses, damages or other consequences that may arise from outages, interruptions or other changes in the availability of the Application.
7. Third Party Links
The Application may contain links to websites or services of third parties that are not operated or controlled by the Operator. The Operator is not responsible for the content, privacy policies or practices of these sites. Use of such websites is at the user's own risk.
8. Termination of Use
The Operator reserves the right to terminate or suspend your access to the Application at any time and without prior notice, for any reason, including violation of these Terms.
The user may terminate the use of the Application at any time by removing all stored data, deleting their profile and uninstalling the Application from their device.
9. Changes to Terms
The Operator reserves the right to change these Terms at any time and at its own discretion. In case of material changes, users will be notified of the change at least 30 days before it takes effect.
A material change is considered to be a change that may have a significant impact on the user's rights or obligations towards the Operator, especially in the area of prices, scope of services, or terms of use. The assessment of whether it is a material change is based on objective criteria and circumstances of the specific case.
10. Governing Law and Jurisdiction
These Terms are governed by the law of the Czech Republic. All disputes arising in connection with these Terms or the use of the Application will be resolved by the competent courts in the Czech Republic.
11. Personal Data Protection
The use of the Application is also governed by the Privacy Policy, which describes how the Operator collects, processes and protects users' personal data. Please familiarize yourself with these Privacy Policy before using the Application.
12. Final Provisions
The publication of any data or information on pages operated by the Operator does not constitute any legal act aimed at creating a legal relationship between the Operator and the User, unless otherwise stated in individual cases. Only the Operator is authorized to change or supplement these Terms.
The Terms of Use of the Application are effective from the date of their publication. These Terms were published on October 29, 2025.
Privacy Policy
The purpose of the Privacy Policy is to provide you with information about the processing of your personal data through the web application au-au.app (hereinafter referred to as the "Application") and your rights associated with it. These policies are governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; hereinafter referred to as "GDPR").
We always process your personal data:
- transparently and correctly,
- in accordance with the law,
- in the necessary scope and for the necessary period.
We store data securely for the period specified by legal regulations, or, if the law allows, for the period we determine based on our legitimate interest.
We recommend that you also familiarize yourself with the cookies settings. You can easily check your data or request a printout directly in the application in the Settings > Personal Data section. There you will also find options to exercise your rights.
1. Data Controller
The controller of your personal data is Lucid Solutions Designers, s.r.o. (hereinafter referred to as the "Controller").
Controller Contact Details:
Lucid Solutions Designers, s.r.o., ID: 237 15 065 č.p. 11, 507 71 Úhlejov Czech Republic Email: lucidsolutiondesigners@gmail.com
Data Protection Officer (DPO) Contact Details:
Pavel Šafář, Czech Republic e-mail: lucidsolutiondesigners@gmail.com
2. Data Processed by the Controller
a) Personal Data
Identification Data
- Name and surname (encrypted)
- Username / nickname (encrypted)
- User ID / account number
Contact Data
- Email address
Device and Connection Data
- Language preference
Preference Data
- Past choices and personalization (e.g., gluten-free, vegetarian)
Application Activity Data
- Information obtained through cookies and similar technologies
Cookies and Online Identifiers
- Necessary cookies
- Functional cookies
Data for Fulfilling Legal Obligations
- Records of consents or consent withdrawals (demonstrating compliance with GDPR)
The Controller declares that the Application processes sensitive data according to Article 4(13), (14) and (15) and Article 9 of GDPR.
In the Application, we process health data, only to the extent necessary for providing services:
- content of medical reports, laboratory results and other health documents,
- diagnoses, treatment plans, medications,
- attached notes, medical history,
- Your age, gender.
Health data is processed exclusively on the basis of your explicit consent (Article 9(2)(a) GDPR).
b) Processing of Data on the User Device Side and When Using AI Functions
By default, health data (e.g., medical report or laboratory results) is shared anonymously with a dedicated AI model that evaluates and clearly explains the content of the report. The original medical report is then deleted and the application stores only the result of the AI model.
This data is not linked to your identity, is not stored longer than necessary for the given operation, and serves exclusively to generate the requested response or content. We do not use the sent data to create profiles or for marketing purposes.
The Controller respects your privacy. Data processed locally remains on your device, while data sent to the AI system is anonymous and technically secured against misuse.
c) What are the Provided Data Used For?
Data serves only to:
- provide understandable interpretation of health reports;
- treatment plan reminders (notifications on device);
- create chronological health history (timeline);
- share interpretation with selected person/persons (in case of sharing).
We never share any data with third parties without your explicit consent.
3. Legal Basis and Purpose for Processing Personal Data
The Controller processes your personal data only if there is an appropriate legal basis in accordance with GDPR (Articles 6 and 9). This means that processing occurs only when at least one of the following conditions is met:
a) Fulfillment of Legal Obligations of the Controller
Processing of personal data may be necessary to fulfill legal obligations of the Controller. Typically, this involves the following purposes:
- user account registration,
- ensuring customer support,
- communication in connection with services you use.
b) Legitimate Interests of the Controller
- ensuring application security and preventing misuse,
- protection of legal claims and defense in case of dispute,
- direct marketing – sending information about news and services that may interest you (non-personalized),
- operational testing of system changes,
- statistical and operational overviews,
- ensuring technical functionality of the website and application, including use of cookies necessary for their normal operation.
You have the right to object to processing of data based on legitimate interest. If you do so in the case of direct marketing, the Controller will always comply and immediately terminate processing for this purpose.
c) Consent of the Data Subject
If you give consent to the Controller, it will process your personal data for specific purposes, for example:
- personalization of recipe offers and content according to your preferences,
- sending marketing messages and recommendations tailored to your interests,
- use of cookies and similar technologies in categories: preference, statistical and marketing,
- participation in surveys, user interface testing or service improvements.
Consent is voluntary and you can withdraw it at any time through the application settings or by contacting the Controller. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal. Not giving or withdrawing consent has no effect on the use of basic application functions.
4. Personal Data Retention Period
The Controller processes and stores personal data only for the period necessary to fulfill the purposes for which these data were collected, or for the period specified by relevant legal regulations and in accordance with the minimization principle under Article 5(1)(c) and (e) GDPR.
Health data (e.g., medical reports, laboratory results or other health documentation) are processed through a dedicated artificial intelligence (AI) model, which serves exclusively for analytical and interpretative purposes. These data are processed in anonymized form, i.e., without any possibility of direct or indirect identification of the user.
After processing by the AI model, the original document (e.g., uploaded medical report) is immediately and permanently deleted, and the application stores only the interpretation result created by the AI model, which does not contain identifiable personal data. This procedure is in accordance with Article 25 GDPR (principle of "privacy by design and by default") and serves to minimize the risk of unauthorized handling of health information.
All processing takes place exclusively within the territory of the European Union, or within states ensuring an adequate level of protection under Article 45 GDPR.
The retention period varies depending on the legal title for processing your personal data:
i) Fulfillment of Legal Obligations
If the Controller has a legal obligation to retain personal data (e.g., for accounting, tax or archival purposes), it retains them for the period specified by relevant regulations. Typically, this is a period of 5 to 10 years, depending on specific legislation (e.g., Accounting Act, tax laws).
ii) Fulfillment of Contract
Data that the Controller processes for the purpose of providing services through the web application (e.g., user registration) is retained for the duration of the contractual relationship.
iii) Consent of the Data Subject
If the Controller processes personal data based on consent granted by you (e.g., for sending personalized offers or use of marketing cookies), processing takes place for the duration of this consent or until its withdrawal. After withdrawal of consent, data is securely deleted or anonymized, unless further needed for another legal purpose.
iv) Concurrent Multiple Purposes
In specific cases, personal data may be processed concurrently based on multiple legal titles. In such a case, data is always retained according to the longest relevant period.
After the expiration of relevant periods, secure deletion or anonymization of personal data occurs, in accordance with the principles of minimization and limitation of retention under Article 5 GDPR.
Backup (Optional)
In case the user creates a personal account and actively chooses the data backup option, the Controller performs backup of all personal and health data in encrypted form on secured servers located in the European Union.
Backed up data is protected using modern cryptographic methods that meet the requirements of so-called "bank-level security", and is accessible exclusively to authorized persons of the Controller who are bound by confidentiality obligations.
Data transfer between the user device and server takes place exclusively through encrypted connection. The user has the right to cancel backup at any time, and the Controller will ensure immediate deletion of all data from backup systems, unless their further retention is necessary for legal reasons.
Personal Data Security
The Controller has adopted appropriate technical and organizational measures under Article 32 GDPR to ensure protection of personal data against unauthorized or unlawful processing, accidental loss, destruction or damage.
These measures include in particular:
- end-to-end encryption of all health and other sensitive data,
- user authentication through password, biometric data or other security mechanism,
- separate storage of identification and health data,
- regular security audits and penetration tests,
- access rights management according to the "need-to-know" principle,
- system monitoring to detect and prevent unauthorized access.
In case of any incident that could lead to a threat to personal data security, the Controller is obliged to assess the risk without undue delay and, if necessary, inform the supervisory authority and affected data subjects in accordance with Articles 33 and 34 GDPR.
The Controller hereby confirms that the highest level of technical and legal protection of personal data is adopted, especially with regard to the nature of sensitive data processed within the Application.
Data Sharing
You can share data with a specific person (e.g., family member, doctor, etc.), and only by active decision of the user. Each sharing is fully under your control and you can cancel it at any time.
5. Your Rights in Connection with Personal Data Processing
When processing your personal data, you have the following rights as a data subject under GDPR. You can exercise these rights against the Controller.
Right of Access to Personal Data
You have the right to request confirmation as to whether the Controller processes personal data about you. If so, you have the right to obtain access to this data, including information about its purpose, category, retention period and possible recipients.
Right to Data Portability
You have the right to receive personal data that you have provided to the Controller, in a commonly used and machine-readable format, and possibly transfer it to another controller. This right applies only to data that the Controller processes automatically based on your consent or contract.
Right to Erasure of Personal Data
You have the right to request that the Controller erase your personal data without undue delay if:
- they are no longer necessary for the purposes for which they were collected,
- you withdraw consent and there is no other legal reason for processing,
- you object to processing and there are no overriding legitimate reasons,
- the data was processed unlawfully.
Right to Rectification of Personal Data
You have the right to request correction of inaccurate or completion of incomplete personal data that the Controller has about you.
Right to Restriction of Processing
You have the right to request restriction of processing of your personal data if:
- you contest their accuracy (for the period of verification),
- processing is unlawful,
- the Controller no longer needs the data, but you require it for establishment, exercise or defense of legal claims,
- you have objected to processing (for the period of verification whether our legitimate reasons override).
Right to Object
If the Controller processes your personal data based on legitimate interest, you have the right to object to such processing. If you object to processing for direct marketing purposes, processing will always be terminated immediately.
Right to Lodge a Complaint with the Supervisory Authority
If you believe that your right to personal data protection has been violated, you have the right to lodge a complaint with the Office for Personal Data Protection:
- Address: Pplk. Sochora 27, 170 00 Prague 7
- Web: www.uoou.cz
How to Exercise Your Rights
You can exercise your rights:
- via email at: lucidsolutiondesigners@gmail.com
- in writing to the address of the application operator (see website footer).
Before processing your request, we may request identity verification to ensure protection of your personal data.
The Privacy Policy of the web Application is effective from the date of its publication. This Privacy Policy was published on October 29, 2025.
Contact for Terms of Use
Lucid Solutions Designers s.r.o. lucidsolutiondesigners@gmail.com Úhlejov 11, 507 71 Úhlejov, Czech Republic