Terms of Service
and Privacy.

AlfaPuls is a web application and progressive web application (PWA) for household data management. It allows you to record energy and water, expenses, meters, readings, payment documents and voluntarily stored documents. It is not an energy supplier, house manager, bank or accountant or legal advisor.

The live demo is only for getting to know the service. It displays a separate account with continuously updated data, does not require registration and does not itself create a contract.

A contract for the use of AlfaPuls is created between you and the Operator at the moment of successful completion of registration after you have actively confirmed that you have read these Terms and agree to them. The Terms are part of this Agreement.

Calculations, indicative summaries and overviews in AlfaPuls are based on the data you enter. They do not replace the supplier's invoice, advance payment prescription, contract, reading from an authorized worker or professional advice.

To create an account, we need an email address, phone number and password. We verify both contacts with a code during registration. This data is used to create and protect an account, sign in, restore access and important communications to the service.

You are responsible for the protection of access data. Do not share the password with anyone. AlfaPuls does not store them in readable form; it only stores its cryptographic hash. You can also optionally secure access with a WebAuthn key, for example using biometrics or a device code. AlfaPuls Does not capture or store your fingerprint, face or device PIN.

When you log out, the application deletes the local data of the given account from this device. Before logging out, you will be notified of changes that have not yet been confirmed by the server. Logging out of the device is not a request to cancel the account or delete data on the server.

You may not use another account, bypass security measures, or use the service in a way that would endanger AlfaPuls, another user, or third-party data. In case of reasonable suspicion of misuse, we can temporarily secure or restrict access.

AlfaPuls may offer paid subscriptions or individual paid features in the future. Their range, price including taxes, period length, possible automatic renewal, payment method and termination conditions will always be displayed separately before a binding order.

The mere registration of an account or the opening of a Live Preview is not a subscription order and does not constitute an obligation to pay. As long as the user does not independently confirm a specific paid offer, he does not incur any payment obligation.

If the paid digital service is made available immediately, we will require a separate express consent to start the service and confirmation that the right to withdraw from the contract within a fourteen-day period expires under legal conditions. Without this separate step, the right of withdrawal cannot generally be excluded.

Administrator: Jan Šovčík, Zd. Vavříka 1593/1, 700 30 Ostrava, ID 48788813, registered in the trade register. Send questions about the service to [email protected]; rights regarding personal data at [email protected].

Legal regulations: The protection of personal data is governed in particular by regulation of the European Parliament and Council (EU) 2016/679 (GDPR) and in the Czech Republic also by Act No. 110/2019 Coll., on the processing of personal data. The links lead to the official wording of the regulations.

What data do we process: account and contact data; technical data necessary for secure login; household data that you enter in AlfaPuls, such as energy and water information, meters, readings, expenses, payments, contracts, photos and documents. The content of Trezor documents, original file names, notes and data about the assigned meter is encrypted by the application on the device before sending. For a clear list, the name selected by the user in the list, category, topic, date and size remain visible. Photos attached to actual readings are exempt from this encryption; their content can be processed on the server when you request OCR, and the recognized text is saved to the photo.

Why and on what basis: We provide the account and the service based on the performance of the contract according to Article 6 paragraph 1 letter b) GDPR; this includes storing encrypted documents and OCR processing of the readout photo that you run yourself. Account security, abuse prevention, infrastructure protection and limited operational records are processed for the legitimate interest in safe operation pursuant to Article 6, paragraph 1 letter f) GDPR. If the legal regulation imposes an obligation on us to keep the data, the processing is based on Article 6 paragraph 1 letter c) GDPR.

Who can process the data: The operator and its verified processors, if they are necessary for the operation of the infrastructure, the delivery of the verification e-mail and SMS or ensuring security. Processors may use data only in accordance with the Operator's instructions and to the extent necessary for the given service. AlfaPuls does not sell your data to energy suppliers, house managers or advertisers.

Service Security:Transmission between browser and AlfaPuls is protected using HTTPS. The account protects logged-in sessions, protection against third-party requests, verified contacts, restriction of access attempts and separation of individual account data. We do not store passwords in readable form.

Encrypted personal Vault: documents stored in the Vault, with the exception of photos attached to actual readings, the application encrypts directly on the device before sending. Standard strong AES-GCM encryption with a 256-bit key protects file content as well as private metadata such as the original file name, comment and associated meter data. The server stores encrypted files, encrypted private metadata, and encrypted key envelopes; we do not send the decryption key or PRF passkey output to it. Access to the server and stored files alone therefore does not provide a means to read the documents. The safe is unlocked using a passkey verified by the device or a recovery key. On your own desktop device, the user can remember the unlock in the browser profile: the application stores a non-exportable key object in its IndexedDB, which allows the next opening without re-entering the recovery key. The key object remains in the given profile and is not sent to the server. However, anyone who can use an already logged-in AlfaPulsu profile can also use this saved unlock; therefore, do not use the option on a shared device and protect your profile and logged-in session. The operator does not store the decryption key, nor does the server take it; therefore, accessing the server alone is not sufficient to open the stored encrypted content.

Access and recovery: passkey works through WebAuthn; the device can confirm authentication with biometrics or its own PIN. AlfaPuls Does not capture or store fingerprint, face or device PIN. The recovery key is displayed when the Vault is first set up and the Operator does not store its readable form. You can copy it or open your own e-mail program with a prepared message; send the message yourself and AlfaPuls does not take over its content. Keep the recovery key carefully and do not share it: whoever gets the recovery key and access to the account or its encrypted data at the same time can unlock the Vault. You can remove a saved unlock by logging out, selecting "Forget this browser's unlock" or clearing your browser's site data. After removing it, you will need a passkey or recovery key to open it again. If you lose both the passkey and the recovery key and the local copy of the key is no longer available, encrypted documents cannot be recovered.

Data in the list and readings: for a clear list of documents, the name, category, topic, date and size selected by the user remain visible. Once unlocked, the document will appear in the browser and you can save or copy it. The photos attached to the actual readings are kept separate from the encrypted Vault in order to take advantage of OCR: when triggered by the user, the photo is processed on the server and the recognized text is saved to the photo.

Local storage and PWA: app uses necessary cookies, session, IndexedDB, localStorage and service worker for login, safe running and offline mode. This is not marketing tracking. Part of the data remains in the device's browser so that the service can be used even in the event of a connection failure. If the user chooses to remember the Trezor, the non-exportable key will remain in the IndexedDB of the given browser profile; it is deleted when you log out of the application. The user can also delete the saved unlock directly in the application or by deleting the website data in the browser.

Retention period: We keep account and household data for the duration of the account's existence and for the time necessary to process requests or fulfill legal obligations. You can delete the document from Trezor separately. Account cancellation and deletion of all account data can be requested at [email protected]; the data that the Operator must keep according to the law will be limited only for this purpose and deleted after the legal period.

Your rights: AlfaPuls gives you the right to request access to your personal data, its correction, erasure, restriction of processing, portability and to object to processing based on legitimate interest. Send your request to [email protected]. If you believe that we are not handling data correctly, you can file a complaint with the Office for Personal Data Protection. Questions about the service can be sent to [email protected].

Your content: The data entered in AlfaPuls remains your data. You grant us only the non-exclusive permissions necessary to store, display, synchronize and secure them within the Service. The rights to the code, name, design and other elements of AlfaPuls remain with the Operator or its licensors.

Your responsibility: You are responsible for the accuracy of the information you enter into the Service and that you have the authority to enter a document or information relating to another person. AlfaPuls is not responsible for damage caused by incorrect inputs, loss of access to your device, unavailability of connection or the use of indicative calculations as binding billing.

We are continuously developing the Service, and therefore we may change the Terms appropriately. In the event of a material change, we will inform registered users in an appropriate way before it becomes effective, especially in the application or by e-mail. If you do not agree with the change, you can close the account before it takes effect.

Operation of AlfaPuls may be temporarily limited due to maintenance, safety or circumstances beyond our reasonable control. We will try to keep the restriction as short as possible. This does not affect the consumer's rights from mandatory legal regulations or rights from faulty digital performance.

Relations from these Terms and Conditions are governed by the law of the Czech Republic. Complaints should first be sent to [email protected]. If the dispute cannot be resolved directly, the applicable out-of-court dispute resolution body depends on the nature of the dispute and cross-border jurisdiction and can be verified in the official European Consumer Redress Portal. For some disputes with the Czech Operator, the Czech Trade Inspection may be competent if the dispute falls within its remit. These Terms do not change the rights granted to you by binding legal regulations.