Last updated: 17 August 2026

This English version is a translation. Where it differs from the German version, the German version applies.

Cloya App Privacy: Telemetry

This page describes the data processing of the Cloya app (macOS, iPad, Windows, Web, Linux) for anonymous usage statistics and the licence check-in. It mirrors the notice shown inside the app. For the website and account services, see the general Privacy Policy.

1. Controller and Contact

bimover GmbH, Switzerland Email: privacy@bimover.ch

2. Anonymous Usage Statistics (Opt-in)

Help improve Cloya. If you agree, Cloya counts on your device which tools and features are used how often and uploads anonymous daily counters to bimover once a day. This is voluntary, off by default, and can be changed in Settings at any time.

What is collected (only if you opt in):

• daily counters per tool and feature
• input modality (mouse/pen/finger/keyboard/…)
• opened file formats (format only, e.g. “pdf”)
• rounded performance values (bucketed timings)
• active minutes per day
• platform and app version (major.minor only)
• language (2-letter code) and licence tier
• a random, resettable installation ID

With a separate opt-in for anonymous error diagnostics: counters per error code (e.g. “cloud.upload_failed: 2”), no message texts, no stack traces, no content.

What is never collected:

• no document content, file names or project names
• no names, e-mail addresses or account data
• no precise timestamps, only the calendar day
• no location; the IP address is never stored server-side
• no advertising IDs, no tracking across apps or websites

The installation ID is a random pseudonym generated on your device. It is never linked to your account or person, and you can reset it at any time in Settings.

Legal basis: consent, Art. 6(1)(a) GDPR / Art. 31 Swiss revFADP.

Withdrawal: you can withdraw your consent at any time in Settings; counters not yet sent are deleted. The installation ID can be reset there as well.

Retention: received raw data is kept for at most 12 months; after that only aggregated, anonymous statistics remain.

3. Licence Check-in

Independently of the opt-in above, with an active paid licence Cloya reports once a day: licence tier, platform and app version (major.minor), together with the random installation ID. This serves licence operation and abuse prevention.

Legal basis: performance of contract, Art. 6(1)(b) GDPR / Art. 31 Swiss revFADP.

4. Direct Server Connections (Pro Volumes, WireGuard)

Cloya can reach your company’s own file servers through an encrypted direct channel based on the WireGuard® protocol. This channel lives entirely inside the app: it is not a device VPN, it routes no other traffic of your device, and it connects only to server addresses that you or your company configure.

• Connection keys are generated on the device and stored in the system keychain. With account sync enabled they travel end-to-end encrypted through your bimover account; bimover cannot read them.
• File traffic flows directly between your device and your company’s server. bimover operates no relay for this channel and never sees the content.
• bimover does not log connection metadata of the direct channel. Your company’s server may keep its own logs under your company’s responsibility.

Legal basis: performance of contract, Art. 6(1)(b) GDPR / Art. 31 Swiss revFADP.

5. Your Rights

Depending on applicable law, you have rights to access, rectification, deletion, restriction and complaint to a supervisory authority. Note that the anonymous counters cannot be attributed to a person. We have no means to identify you from a random installation ID, so requests concerning telemetry data can usually only be fulfilled by resetting the installation ID in the app.

Contact: privacy@bimover.ch

6. General Privacy Policy

For everything else (website, accounts, licensing, payments), see the general Privacy Policy.