Privacy Policy

1. Quick summary

• Your cases, contacts, notes, calendar and documents live on your device, encrypted. By default, nothing leaves it.
• Sync with your phone is not available yet. When it is, it will be optional (part of Lexbell Premium): a copy of that data will be kept on our server only to deliver it to your iPhone, and deleted when you sign out.
• No email, name or password is needed: the firm account is anonymous.
• Lexbell does not track your activity, does not sell data, and uses no analytics or advertising.

2. Who is responsible

The data controller for the processing described in this Policy is Eduardo Espinal, developer of Lexbell, based in Santo Domingo, Dominican Republic. You can write to support@lex-bell.com about any privacy matter.

The data about your clients and the people in your cases is entered by you in the course of your profession. For that data you are the controller, and we act only as a processor when you turn on sync, following your instructions (see section 6 and the processing clause in the Terms).

3. Information the App handles

Lexbell stores on your device the information you enter yourself:

• People: name, ID number, phone, email, address and notes about clients, opposing parties and other participants.
• Cases: case data depending on its type (judicial, administrative, immigration, business, rental, real estate sale).
• Calendar: hearings, deadlines, tasks and meetings you schedule.
• Notes: notes on each case, with their images and tables.
• Documents: files you attach to each case (copied to your device).

Everything is stored in the App's private container (on macOS, ~/Library/Containers/com.eduardoespinal.lexbell/; on Windows, the application data folder), encrypted with AES-256 with the key protected by the system keychain. It does not leave your device unless you export a backup or turn on sync.

4. System permissions Lexbell requests

All permissions can be revoked from your operating system's privacy settings.

5. Internet connections

Lexbell works offline for all its case-management features. It connects to the internet in only two cases:

• The subscription (activating or restoring it), handled by Apple's App Store. Apple bills you; we do not receive or process your payment data.
• Sync with your phone, described in the next section, once available and only if you turn it on.

Lexbell does not download additional code and sends no usage reports, crash reports or telemetry.

6. Sync with your phone

Not available yet: the current version of the App sends no data to any server. When we offer it, we will announce it inside the App and it will work like this: it will be optional, part of Lexbell Premium, and will not start until you press "Generate key" in Settings → Sync. From then on:

• What is uploaded: your cases, the people in each case, notes, calendar events and attached documents, up to 7 GB per firm.
• Which account: an anonymous account, with no email, name or password. The firm is identified by a random code and a 20-character key that only you see on your computer and that you type or scan on your iPhone.
• Purpose: solely to deliver your data to your phone and keep both copies identical. We do not read, analyze, profile, sell or use that data for any other purpose. We would access it, in a limited way, only to diagnose a problem you report to us.
• Where: in the database and file storage we contract from Supabase, hosted in Amazon Web Services data centers (see section 7).
• How long: for as long as sync is on. When you sign out on your computer or generate a new key, the whole firm —data, files and the accounts of your devices— is deleted from the server immediately. The provider may keep technical backups for a short period, after which they are gone for good.
• How it travels and is stored: encrypted in transit (TLS) and encrypted at rest by the provider; server rules let each device see only its own firm; the key has an attempt limit.

Your computer remains the complete copy: if you stop syncing you lose nothing.

7. Providers and international transfers

To provide sync we use these providers, which process data on our behalf under contract:

Your synced data is stored within the European Union. Supabase, Inc. is a US company that may access it in a limited way to operate the service; that access relies on the Standard Contractual Clauses approved by the European Commission, incorporated in its data processing agreement, together with its transfer impact assessment and the technical measures described in section 6. You can request a copy of those safeguards at support@lex-bell.com.

8. Legal basis for processing

For people in the European Union, we process data on these bases under the General Data Protection Regulation (GDPR):

• Performance of a contract (Art. 6(1)(b)): running the App and the subscription you purchased.
• Your consent (Art. 6(1)(a)): sync with your phone, which only starts when you generate the key. You can withdraw it at any time by signing out; everything is then deleted from the server.
• Legitimate interest (Art. 6(1)(f)): the security of the service, such as the attempt limit when entering the key.

For your clients' data, you determine the legal basis as controller; we process it exclusively on your behalf and under your instructions.

9. Sharing information with third parties

Lexbell does not sell or hand over your data. We have no advertising partners and no analytics. Only the providers in section 7 process data on our behalf, and only as far as necessary. We would disclose information to an authority only if required by law.

10. Export, import and deletion

The App lets you:

• Export a password-protected backup to a location you choose.
• Import a previous backup, restoring your data.
• Delete all local information at any time from Settings or by uninstalling the App, and the entire server copy by signing out.

11. Security

On your device, data is stored encrypted with AES-256, with the key in the system keychain, and you can require Touch ID to open the App. On the server, data travels encrypted, is stored encrypted, and only your firm can see it. To add protection, we recommend:

• Keeping your devices up to date
• Enabling full-disk encryption (FileVault on Mac, BitLocker on Windows)
• Keeping the firm key in a safe place and not sharing it

12. Your rights

You have the right to access your data, correct it, delete it, receive it in a portable format, restrict or object to its processing, and withdraw your consent. In practice:

• Everything on your device is viewed, corrected, exported and deleted by you directly in the App, without asking us.
• The server copy is deleted entirely when you sign out or generate a new key.
• For any other request, write to support@lex-bell.com. We reply within one month at most.

If you are in the European Union and believe we have not honored your rights, you can lodge a complaint with your country's data protection authority.

13. Children

Lexbell is intended for legal professionals. It is not designed for individuals under 16 and does not knowingly collect information from minors.

14. Changes to this policy

Any material change will be reflected by updating the date at the top of the document and publishing the new version at this same URL. If a change affects how we handle your synced data, we will also notify you inside the App.

15. Contact

If you have questions, concerns or requests regarding privacy:

• Email: support@lex-bell.com
• Controller: Eduardo Espinal, Santo Domingo, Dominican Republic
• App: Lexbell for Mac and Windows (and, once available, Lexbell for iPhone)