This policy explains how the LDS Admin mobile app handles user data. Contact: support@ldsadmin.cz.

What data we process

• Login details — e‑mail and password entered at sign‑in, and the two‑factor (2FA) code sent by e‑mail. Used solely to verify your identity.
• Access token (JWT) — after sign‑in it is stored encrypted on the device and used to keep you signed in.
• Operational data — projects, datapoints, measurement history and alarms, loaded from the LDS Admin servers and shown in the app.

The app does not collect location, contacts, photos or advertising identifiers.

Biometrics

Optional unlock by fingerprint / device lock is handled entirely locally by Android. The app never receives or stores biometric data.

Transfer & storage

All communication with the server uses HTTPS (api.ldsadmin.cz). The app stores nothing on the device beyond the encrypted access token and a temporary cache for display.

Sharing

We do not share data with third parties for marketing. The app contains no ads and no third‑party analytics SDKs.

Retention & deletion

The access token is removed on sign‑out or expiry; uninstalling the app removes all locally stored data. You can request deletion of your account at ldsadmin.cz/account-deletion.html — processed within 30 days. Data we must keep by law is retained only for the statutory period (accounting/tax records up to 10 years if any, security logs up to 12 months) and then deleted.

Your rights

Under the GDPR you have the right to access, rectify and erase your data. To exercise them, contact support@ldsadmin.cz.

Changes

We may update this policy; the current version is always available at this address.