GoTiri
Nico Bui, Pettenkoferstr. 42, 10247 Berlin, Germany
E-Mail: info@gotiri.com
A data protection officer is not appointed; the legal requirements for this are not met.
GoTiri helps to understand German official mail and forms.
The photo of your document is not uploaded and not stored by us. Text recognition runs on your phone.
What leaves the device is the recognized text — and only if you request an explanation by Tiri and have given your prior consent. We do not collect usage statistics, do not use tracking, no advertising and no analysis SDKs.
The app opens the camera or file selection when you read in a document. The image remains in the app's protected storage area on your device.
Legal basis: Art. 6 Para. 1 lit. b GDPR.
Text recognition runs with Google ML Kit on the device, offline. When a language is used for the first time, the device downloads a language pack once from Google servers. Your IP address is transmitted to Google. The content of your document is not transmitted.
Legal basis: Art. 6 Para. 1 lit. b GDPR.
When you request an explanation, the app sends the recognized text of the document to:
our server at Supabase (data center in the EU), and
from there to the AI service Anthropic (USA), which generates the explanation.
What is not sent: the photo, your name, your contact details, your location.
What is sent: the text that is on the document. In the case of official mail, this can contain information about health, social benefits or residence status — special categories of personal data according to Art. 9 GDPR.
What the AI provider stores — exactly, without sugarcoating:
With the standard API we use, Anthropic does not store the contents of requests and responses and does not use them to train models.
Exception we must disclose: If Anthropic's automated security systems flag a request as suspicious, Anthropic may keep the request and response for up to two years. This applies regardless of other agreements.
We do not store the text of your letter ourselves — neither on our server nor elsewhere.
Supabase only processes the text on its way to the AI provider and does not store it.
(Information checked on 2026-09-12 based on provider documentation. It is re-checked with every change in provider conditions.)
Legal basis: Art. 6 Para. 1 lit. a and Art. 9 Para. 2 lit. a GDPR — your express consent. Without this consent, nothing is sent and the app only continues to work on the device.
In order to limit abuse and costs, we store per request: a random device ID, time, which function, how many words were processed, and how long it took. No sentence and no word from your document is stored. It is not possible to reconstruct what was in your letter from this log.
Legal basis: Art. 6 Para. 1 lit. f GDPR (legitimate interest in a functional, non-abused service).
For the interpreter function, the microphone listens as long as you have the button pressed. The app does not store audio files.
The conversion of speech to text is handled by your Android device's speech recognition service. On most devices, this is Google's service, and it transmits the recording to Google for processing if no on-device recognition is available. GoTiri has no influence on this. Google's privacy policy then also applies.
The translation in the interpreter still runs on the device, not via our server.
Legal basis: Art. 6 Para. 1 lit. a GDPR.
Note on conversations with third parties: Recording or transcribing a conversation can affect the rights of the other person (§ 201 StGB). Only use the function if your counterpart agrees.
Documents and conversations are stored exclusively on your device.
A document read in remains stored until you delete it.
The app keeps a maximum of 50 documents; older ones are automatically removed.
You can delete each document and each conversation individually.
"Delete all" in the settings permanently deletes documents, conversations and the stored information about you.
When uninstalling the app, all app data is removed from the device.
Under "What Tiri knows about you" you can see every single piece of information the app has stored about you, and where it comes from. Every piece of information can be deleted individually. This information is located exclusively on your device.
In this test version, there is no real registration. An entered email address is only stored locally on the device and not transmitted to anyone.
The app asks for: Microphone (interpreter), Camera / file access (read in document) and Internet (language packs, explanation by Tiri). Each permission can be revoked in the Android settings; the other functions remain usable.
Recipient | When | What arrives |
|---|---|---|
Supabase (EU) | Explanation by Tiri | The recognized text of the document, device ID |
Anthropic (USA) | Generation of explanation | The recognized text of the document |
Google (ML Kit) | One-time download of language packs | IP address, requested language pack |
Speech recognition of the device (usually Google) | Interpreter function | The voice recording, if the device recognizes online |
Google Play | Installation and test distribution | The details of your Google account to Google, not to us |
Contracts for order processing exist with Supabase and Anthropic (Art. 28 GDPR). The transmission to Anthropic in the USA is based on the EU standard contractual clauses. Google relies on the standard contractual clauses and the EU-US Data Privacy Framework.
Sub-processors (Art. 28 Para. 2 and 4 GDPR): Supabase and Anthropic use their own service providers, in particular for hosting and infrastructure. The providers themselves maintain the current list and publish it on their trust or data protection pages. We deliberately refer to these lists instead of copying them here: a copied list is wrong from the first change. On request, we will tell you the status we last checked.
Photo and document text on the device: as described in 3.6.
Letter text with us: is not stored. It is processed for the duration of the request and then discarded.
Letter text at the AI provider: as a rule no storage. Only if a request is flagged by the provider's security systems: up to two years. See 3.3.
Usage log (3.4): 6 months, then deleted.
You have the right to information (Art. 15), correction (Art. 16), deletion (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR) as well as the right to revoke consent at any time (Art. 7 Para. 3 GDPR).
In practice: The contents of your documents are on your device — you exercise these rights directly in the app. For the usage log (3.4), a message to info@gotiri.com with your device ID is sufficient; you will find this in the settings.
You can complain to a data protection supervisory authority, in particular to the authority responsible for our seat: Berlin.
The app is aimed at adults. We do not knowingly collect data from children.
Status: 2026-09-20.
This declaration describes the closed test phase: text recognition on the device, explanation via server, no photo upload, no account.
It must be changed again before one of them goes live:
Photos are uploaded and stored (ADR-005, Phase 2) — then a separate moment of consent is needed before the upload
a real user account
crash reports, analysis or usage measurement beyond the log in 3.4
a public store release — the consent of the test phase does not cover this