Privacy notice

Controller

The controller is Zug Technology Lab, an association with its seat in Zug, Switzerland. Data protection requests can be sent to contact@zugtechnologylab.ch. The complete postal address and authorised representative must be added before launch.

Data we process

• Contact form data: name, email, optional organisation, selected topic and message.
• Order or membership correspondence that you send by email.
• Technical data required to deliver and secure the website, such as IP address, request time, browser information and server logs.
• A necessary language cookie named ztl_locale, stored for up to one year, so the site remembers your language.

Purposes

• Replying to enquiries and preparing workshops, memberships or orders.
• Operating, protecting and troubleshooting the website.
• Meeting legal, accounting and documentation duties where applicable.

Recipients and processing abroad

Technical hosting and email providers may process data on our behalf. Depending on their infrastructure, processing may occur outside Switzerland. We select providers and safeguards appropriate to Swiss data protection law. The site currently uses no advertising or analytics cookies.

Storage

We keep enquiries only as long as needed to answer them and manage the resulting relationship. Contract and accounting records may be kept for the periods required by Swiss law. Technical logs are retained according to the hosting provider’s security settings.

Your rights

You may ask whether we process your personal data and request access, correction or deletion where the law permits. You may also object to processing. Send requests to contact@zugtechnologylab.ch; we may need to verify your identity.

Learning accounts

Zed AI chat is optional and enabled individually by ZTL staff for supervised sessions. Supabase stores up to six chats per student, including questions, replies, models, thinking settings, one optional project photo per chat and answer evaluations. Starting a seventh chat deletes the least recently used chat, its photo and evaluations. Students can delete chats themselves; deleting the account also removes its chats. Each chat is limited to 30 questions. Photos are resized and re-encoded before upload to remove metadata. A bounded recent context and optional photo pass through Supabase to LM Studio in the ZTL Lab, where inference runs without an external AI provider. LM Studio chat storage is disabled for these requests. Temporary delivery records are normally removed within 16 minutes, separately from saved chats. Backups, infrastructure logs and LM Studio logs follow their own retention and configuration. Do not share sensitive information or photos of people. AI replies may be incorrect or unsuitable and require supervision. Voice is optional and microphone access begins only when the student presses the recording button and grants browser permission. Recordings are limited to 30 seconds and transcribed locally in the Lab using Whisper; students review the text before sending. Voicebox generates synthetic spoken replies locally. Recordings and generated audio are temporary: delivery copies are cleared after use, cancellation or scheduled cleanup, normally within 11 minutes. Generated Voicebox copies are deleted after delivery, with retries when the Lab reconnects. Recordings are not added to saved chat history or used to clone voices. The reviewed question and written reply remain subject to the six-chat retention rule. Provider backups and local application logs follow their own retention.

ZTL creates learning accounts by invitation, with a parent or guardian involved for children. Supabase stores the account email, display name, course access, completed lessons and saved work so learners can continue their course.

Authorised ZTL administrators can view account details, lesson progress and sign-in times, and manage accounts. They can record a city, age, payment status, payment date and reference for course administration. City and age are entered manually; the dashboard does not locate children or collect a birth date. Payment records are manual and contain no card details. Supabase also stores assigned levels, mentor assignments and private conversation messages with sender, timestamp and read status. The student and currently assigned mentor can use their conversation in the platform; reassignment starts a separate conversation. Messages are retained with the account and removed when a participant account is deleted.

Necessary cookies ztl_access and ztl_refresh maintain sign-in for up to 30 days. Sign-in history is recorded from platform activation and retained with the account. Deleting an account removes its learning records, demographic details and sign-in history. A separate administrative audit retains action dates, account identifiers and changed field names, without storing the previous field values. Contact contact@zugtechnologylab.ch for access, correction or deletion requests.

Children

Parents or guardians should arrange accounts and workshop registrations for younger children. Children can use their invited learning account with their parent or guardian’s involvement.

Changes

We may update this notice when the website or service providers change. The current version is published here with its update date.