Privacy Policy
Controller and contact
CadRoam is provided by Eutopix Labs P.S.A. (prosta spółka akcyjna), ul. Hoża 86/410, 00-682 Warszawa, Poland. Registered in the National Court Register (KRS) by Sąd Rejonowy dla m.st. Warszawy w Warszawie, XII Wydział Gospodarczy KRS. KRS 0001237465 · NIP 7011310736 · EU VAT PL7011310736 · REGON 544584646 · share capital PLN 20,000. Eutopix Labs is the controller for the personal data described in this policy, which covers the CadRoam app for iPhone, iPad and Mac, cadroam.com and support correspondence. Privacy questions and requests: privacy@cadroam.com.
Your models stay on your device
CAD files, generated geometry, measurements, inspection notes, recent-file history and PDF reports are processed and stored on your device, in the app’s private storage or in locations you choose. CadRoam has no account and does not upload models, notes or reports to Eutopix Labs or to any cloud or conversion service. This data is under your control: we cannot see, access or recover it. You can delete files in Model Library, use Clear in Settings or remove the app.
Camera and AR
Camera access is requested only when you open AR on a supported iPhone or iPad. Apple ARKit processes camera frames on the device to understand surfaces; CadRoam does not record, retain or transmit them. You can withdraw camera permission in the system Settings at any time.
Dictation and on-device writing help
If you choose dictation for an inspection note, CadRoam asks for microphone and speech-recognition permission. Apple speech recognition transcribes the audio with on-device recognition required, so the recording is not sent to Apple’s servers, to Eutopix Labs or to anyone else. The audio is not saved; only the text you keep becomes part of your note. On devices that support Apple Intelligence, you can ask Apple’s on-device language model to tidy a note. The note text is processed on your device, the suggestion is shown for your review, and nothing is sent to Eutopix Labs or to a third-party AI service. You can withdraw microphone and speech-recognition permission in the system Settings.
Local diagnostics
CadRoam keeps Apple MetricKit crash and performance reports and fixed app event codes on your device to help investigate reliability problems. They contain technical system, device and app details, not model contents, file names or note text. At most 16 reports of up to 1 MiB each are kept, and reports older than 14 days are deleted. Nothing is uploaded automatically: a report leaves the device only if you export it and choose to send it, for example to support. You can delete local diagnostics in Settings. Apple may separately process device analytics according to your Apple settings and its own terms.
Purchases
CadRoam Pro is offered as an auto-renewing monthly or yearly subscription or as a one-time lifetime purchase through the App Store. Apple processes payment, billing, refunds and your purchase history as an independent controller under its own privacy policy. The app receives only the StoreKit transaction and entitlement status needed to unlock and restore Pro, and checks it on your device. Eutopix Labs does not receive your payment-card details or a list of your purchases; Apple provides us with aggregated sales and financial reports.
Apple ad attribution
CadRoam shows no ads, does not use the advertising identifier (IDFA), never shows an App Tracking Transparency (ATT) prompt and does not track you across other companies’ apps or websites. Apple’s own measurement: if you install CadRoam after tapping an Apple Ads advertisement, Apple may count the install and attribute it to that ad using its own App Store measurement. Apple is responsible for that processing; see Apple’s privacy policy (https://www.apple.com/legal/privacy/). From the first update of CadRoam released after 14 October 2026, the app sends no SKAdNetwork or AdAttributionKit conversion value in the EU/EEA, the UK or Switzerland. Earlier versions may send the coarse, aggregate value described below in every country. Outside these regions (and, in earlier versions, everywhere), the App Store version for iPhone and iPad may send a coarse, aggregate conversion value through Apple’s SKAdNetwork/AdAttributionKit: a number from 0 to 3 describing progress during the first 35 days after installation (opened the app, first successful use, viewed plans, unlocked Pro). It contains no identifier, no IDFA and nothing about you, and no ATT prompt is shown. Apple passes it on delayed and combined with other installs; Eutopix Labs receives only aggregated postbacks that identify no one. Legal basis for those regions: our legitimate interest in measuring our own advertising (Art. 6(1)(f) GDPR where applicable). The Mac version does not use these frameworks.
Optional usage sharing
CadRoam does not track you across apps or websites and does not use an advertising identifier. In versions that offer Usage analytics in Settings, you can choose to share basic usage counts to help Eutopix Labs improve CadRoam. Sharing is off by default, nothing is collected or queued before you opt in, and features, prices and access stay the same whether or not you share. Counts cover app launches, successful tasks, coarse failures and time ranges, permission outcomes, free limits, paywall views and plan choices, purchase, restore and renewal outcomes and useful returns, plus app version and build, platform, release channel, UTC day and the week sharing began. When you opt in, a one-time coarse summary may also be sent (onboarding complete or not; 0, 1–2 or 3+ useful uses; whether a free limit was reached; install age 0–1, 2–7 or 8+ days), categorized by plan; no exact counts or dates are sent. Counts never include models, file names, measurements, notes, reports, text, recordings, photos, precise locations, amounts, names, email addresses, advertising identifiers or persistent account, installation or device identifiers, and purchase categories exclude transaction IDs, product IDs and prices. A random temporary batch ID only recognizes delivery retries. The counts are used only to improve CadRoam and its purchase flow, never for advertising, attribution, personalization or cross-company tracking. Eutopix Labs operates the collector on Cloudflare Workers and Cloudflare D1. The database is restricted to the European Union, but Cloudflare’s network may process requests elsewhere and necessarily sees your network address during transport; the collector does not store IP addresses, request headers or raw request bodies. Unsent counts expire after 7 days; daily cleanup removes retry IDs older than 8 days and aggregate counts older than 400 days, and provider recovery copies may keep earlier states for up to 30 more days. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by turning Usage analytics off in Settings, which deletes unsent counts; a request already sent may have been accepted, and combined totals contain no person identifier, so an individual contribution cannot be located or erased. Questions: privacy@cadroam.com.
Website and cookies
When you visit cadroam.com, our hosting and security provider Cloudflare processes standard request data such as IP address, browser information, requested page and time to deliver and protect the site; these logs are kept only briefly under Cloudflare’s policies. We do not use this data for advertising, analytics or cross-site tracking. We set no advertising, analytics or preference cookies and use no browser local storage. Cloudflare may set a strictly necessary security cookie when it presents a security challenge.
Support correspondence
If you email us, we receive what you choose to send, such as your name, email address, message, device details and attachments. Our email is hosted by Soverin. Do not send a confidential model unless support asks for a synthetic or redacted reproduction file that you are authorised to share.
Purposes, legal bases and retention
App features on your device: your models, notes, reports, dictation and on-device assistant results never reach us; they stay until you delete them or the app. Purchases: performance of a contract (Art. 6(1)(b) GDPR); Apple keeps purchase records under its own policy, and we keep Apple’s aggregated reports for as long as Polish accounting and tax law require — usually 5 years from the end of the calendar year in which the related tax fell due (Accounting Act art. 74; Tax Ordinance arts. 70 and 86) (Art. 6(1)(c)). App purchases are sold by Apple, so your purchases do not appear in our accounting records. Apple ad attribution (outside the EU/EEA, the UK and Switzerland; in versions released up to 14 October 2026, everywhere): our legitimate interest in measuring advertising in aggregate without identifying users (Art. 6(1)(f)); the stage value is kept in the app’s local preferences until you remove the app. Website delivery and security: our legitimate interest in operating and protecting the site (Art. 6(1)(f)); short-lived Cloudflare logs. Support: steps you request or performance of a contract and our legitimate interest in helping you (Art. 6(1)(b) and (f)); deleted or anonymised within 24 months after the request is closed. Legal obligations and claims: Art. 6(1)(c) and (f), only for as long as required. Camera, microphone and speech recognition are used only after you grant the system permission, which you can withdraw at any time.
Recipients and international transfers
Apple provides the App Store, StoreKit, speech recognition, Apple Intelligence and ad attribution and acts as an independent controller for its own processing. Cloudflare, Inc. hosts and protects cadroam.com as our processor. Soverin hosts our email. We do not sell or rent personal data and do not share it with advertisers or data brokers. Apple and Cloudflare may process data outside the European Economic Area, including in the United States; such transfers rely on the EU–US Data Privacy Framework where the recipient is certified, or on the European Commission’s Standard Contractual Clauses.
Your rights
You may request access, rectification, erasure, restriction of processing and data portability, and object to processing based on our legitimate interests. Where processing relies on consent or a permission, you may withdraw it at any time without affecting earlier processing. Email privacy@cadroam.com; we normally answer within one month. Because models, notes and reports stay on your device, we cannot access, correct or delete them for you: you control them directly. You may complain to the Polish supervisory authority, Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, https://uodo.gov.pl, or to the authority where you live or work. We do not use profiling or automated decisions with legal or similarly significant effects.
US state privacy rights (CCPA/CPRA)
We do not sell or share personal information, as those terms are defined by the California Consumer Privacy Act as amended by the CPRA, and we do not use sensitive personal information to infer characteristics. In the last 12 months we collected only identifiers and message contents you send to support (such as your email address) and internet activity in website request logs processed by Cloudflare, for the purposes described above. You may ask to know, correct or delete this information by emailing privacy@cadroam.com, and we will not discriminate against you for exercising these rights. Do Not Track: this site and our apps do not track you across third-party sites or services, so they behave the same whether or not your browser sends a Do Not Track or Global Privacy Control signal.
Children
CadRoam is a professional utility. It is not directed at children under 16, and we do not knowingly collect personal data from children.
Security and changes
We use safeguards appropriate to the limited data we process, but no system is absolutely secure. We will update this policy, with a new effective date, before any material change and will ask for consent where the law requires it. Changes on 14 October 2026: full operator details, dictation, the on-device writing assistant, local diagnostics, Apple ad attribution, legal bases per purpose, international transfers, US state rights and supervisory-authority details. 14 October 2026 (update): Apple ad measurement by region, accounting-record retention and Do Not Track clarified.