Privacy policy

Controller

Henrique Medeiros, AImori
c/o Ricardo Moura
Täfernstrasse 26
5405 Baden-Dättwil
Schweiz

Contact person for data protection: Henrique Medeiros

Scope and principle

This policy applies to the website aimori.ch. The AImori browser extension has its own privacy policy, PRIVACY.md; the key points are summarised below. We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP) and, where it applies to visits from the EU, the General Data Protection Regulation (GDPR).

Our principle: as little data as possible. The website uses no analytics, tracking or advertising services and loads no fonts, scripts, images or videos from third-party servers. There is no form, no user account and no newsletter.

Cookies and browser storage

The website sets no cookies. If you choose a language or light/dark mode yourself, your browser remembers this choice in its local storage (localStorage) so that it applies on your next visit. This entry stays on your device, is never sent to us and contains only the chosen value. You can delete it at any time in your browser settings. That is why there is no cookie banner.

Server logs at the host

When you access the website, the web server automatically stores technical information: IP address, date and time, requested address, referrer, browser identifier (user agent) and status code. This is necessary for secure operation (troubleshooting, defending against attacks). The legal basis under the GDPR is our legitimate interest in secure operation (Art. 6(1)(f) GDPR). The same applies when you download a template or the press material.

The website is hosted by Infomaniak Network SA in Geneva. Infomaniak processes this data as our processor in data centres in Switzerland.

Server logs are deleted after 10 days. They are not combined with other data and not analysed into profiles.

Free in-browser test

The text you paste on the test page is checked by a script exclusively in your browser. The page is technically not allowed to open any connection (Content Security Policy "connect-src 'none'"), has no form and stores nothing. The text reaches neither us nor third parties; it is gone when you reload the page.

Contact by email

If you send us an email, we process your details (name, email address, content and anything else you include) to answer your enquiry. The legal basis under the GDPR is our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR) or steps prior to entering into a contract (Art. 6(1)(b) GDPR), for example for partnerships. Please do not send us real personal, customer or access data, not even as an example of a false alarm.

We delete the details once they are no longer needed for the enquiry and no statutory retention obligation applies.

The browser extension

The extension checks input exclusively locally on your device. It has no network access and transmits no data to us or to third parties, not even usage statistics. Only the following is stored locally: settings, custom terms as salted checksums, daily counters without content (90 days), monthly counters for the AI literacy record (13 months, can be turned off), HMAC checksums for "Not sensitive" (30 days, at most 500) and, until the browser closes, the account type per tab. We receive none of it. If your employer deploys the extension by policy, they define the settings; even then, no data is sent to us. You install the extension from the Chrome Web Store, for Chrome and Edge; Google's privacy terms also apply to the store.

Data you send to an AI service is processed by the respective provider under its own terms.

Disclosure and transfers abroad

We do not pass personal data on to third parties for their own purposes and do not sell it. The website and its server logs are processed by Infomaniak in Switzerland; no transfer abroad takes place for this. For visitors from the EU: the European Commission recognises Switzerland as providing an adequate level of data protection.

Your rights: access, correction, deletion

You can request access to your data, its correction or deletion, restriction of processing and a copy in a common format at any time; you can also object to the processing.

How to do it: write to info@aimori.ch with the subject "Privacy". We reply within 30 days and free of charge. We only ask for proof of identity if we cannot otherwise identify you reliably.

You can also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC); people in the EU can also contact the data protection authority of their country.

Reporting a security issue

Have you found a security vulnerability in the website or the extension? Please write to info@aimori.ch with the subject "Security". You can also report issues in the extension privately via GitHub. The contact details are also available in machine-readable form at aimori.ch/.well-known/security.txt.

Changes

We update this policy when the website or the extension changes. The version published here applies. Last updated: 18 October 2026.