Privacy Policy for LV Compass
This English version is for information only. Only the German version is legally binding.
App: LV Compass (package ID com.lvcompass). Last updated: 5 November 2026. App version: 1.3.1. Address of this policy: geier-it.eu/software/rechtliches/datenschutz/lv-compass.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Geier-IT – Anton Geier, Untere Bergstraße 2, 55487 Sohren, Deutschland. Email: info@geier-it.eu. Phone: +49 152 04202892. Further details can be found in the legal notice (Impressum).
The provider and developer of LV Compass is Geier-IT – Anton Geier. Whoever uses the app provides their own server for the LV files. Website: geier-it.eu/software.
For questions about data protection in this app, please contact the address given above. No data protection officer has been appointed because the legal requirements (Art. 37 GDPR, Section 38 BDSG) do not apply.
2. The essentials in one paragraph
LV Compass displays bills of quantities (GAEB, ÖNORM, Excel, CSV) that are stored on your device or on a server that you specify yourself (Nextcloud, ownCloud or any other WebDAV server). The provider receives neither your files nor your credentials nor any usage data. The only connection to the provider is the licence check with the Geier-IT licence server (keygen.gdyn.de, located in Germany); it transmits only the company or name you enter, the licence key, a hash of the device ID and the app version (section 3.3). The app contains no advertising, no analytics and no third-party data-collection components.
3. Which data does the app process?
3.1 Stored on the device
| Data | Purpose | Location | Deletion |
|---|---|---|---|
| Grant for the search folder (folder reference from the Android folder picker) | Finding the files on the device | App-internal storage | When another folder is chosen or the app is uninstalled |
| Server address, user name, selected cloud folder | Connection to the cloud server | App-internal storage | When the entry is cleared or the app is uninstalled |
| Password or app password for the cloud server | Login to the cloud server | App-internal storage, encrypted with AES-256/GCM; the key is kept in the Android Keystore and never leaves the device | When the password field is cleared or the app is uninstalled |
| Settings (colour scheme, custom colours, language, "start in project", "show prices"), a reference to the last opened project and which sites and groups are expanded | App functionality | App-internal storage | On uninstall |
| Copies of the cloud files of the projects you choose to show (bill of quantities and price file) | Faster access, also without a connection | Folder LV in the app's own area of the device storage (Android/data/com.lvcompass/files/LV), sorted by site; not readable by other apps from Android 11 on, visible on your own computer via USB cable. With the setting "Keep files in private app storage only" they are kept in the app’s protected area instead – then neither a file manager nor a connected computer can reach them | Hiding the site keeps them; they are deleted via "Delete stored cloud files" in the settings or on uninstall |
| Files you add yourself (menu → Add file) | Viewing without a search folder and without the cloud | App-internal storage, not readable by other apps | Via "Delete file from the app", "Delete added files" or on uninstall |
| Manual as a PDF, if you save it in the settings | Help on operating the app | The location you choose in the Android file picker | By you; the file contains no personal data |
| Company name, user name, licence key and the proof of licence signed by the licence server | Trial period and unlocking the app, also without a connection | App-internal storage | On uninstall |
| Content of the opened file | Display | In memory only while the app is running; no permanent copy | When another file is opened or the app is closed |
Automatic backups are disabled for the app (allowBackup="false"), and from Android 12 on the transfer to a new device is excluded as well (dataExtractionRules), so credentials never end up in a Google cloud backup or on another device.
3.2 Transmitted to the server you chose (only when the cloud feature is enabled)
- User name and password for login (HTTP Basic Authentication over HTTPS)
- Requests to search and list (WebDAV SEARCH, PROPFIND) and to download the selected files (GET)
Transmission takes place exclusively encrypted via HTTPS; unencrypted HTTP is blocked in the app. The only recipient is the server you entered in the settings. The app connects to this server only when you trigger it: by tapping the logo at the top left (the name “LV Compass” and the menu item “Refresh project list” do the same), in a project's menu (“Store on device”, “Download again”), with “Test connection” and when choosing the cloud folder. It does not contact the server when it starts or when you open a bill of quantities. Only on your explicit instruction does it create a folder or copy a bill of quantities together with its price file within your server (WebDAV MKCOL and COPY); it never deletes or modifies anything there.
3.2a Managed configuration (company and authority devices)
If the device is managed by an IT department (Android Enterprise), it can preset the server address, credentials, storage location, company and user name and the licence key. The app applies these values at start and locks the corresponding fields, which are marked "Set by your IT department" in the settings. What is entered there – a real name or a functional designation as the user name – is decided by the managing organisation, not by Geier-IT.
3.3 Transmitted to the Geier-IT licence server
LV Compass can be tested free of charge for 30 days; after that a licence key is required. For this the app connects, encrypted only (HTTPS), to https://keygen.gdyn.de/lvviewer, the licence server of Geier-IT (located in Germany):
| Operation | Data transmitted | When |
|---|---|---|
| Create trial key | The company name and user name you enter (required), device ID as SHA-256 hash (not the Android ID itself), app version, product "LV-APP" | on the first start with an internet connection, after you have entered your company or name |
| Activate licence key | Licence key, the company name and user name you enter, device hash, app version | when you enter a key |
| Check validity | Licence key, company name, user name, device hash, app version | on every start of the app with an internet connection and via "Check licence again"; without a connection the stored licence keeps running until its expiry date. With an LL (lifetime) licence the app no longer checks |
For each key the licence server stores: key, product, type (trial, annual or lifetime LL licence), status, issue and activation date, device hash, last reported app version, time of the last licence check, company name, user name and an internal note by Geier-IT for customer assignment. For technical reasons the server receives your IP address; it is not stored in the licence record but only in the server's operating log for troubleshooting and abuse prevention.
3.4 What does not happen
- no loading from the network when long texts are displayed: images come from the bill of quantities file itself
- no transmission of files, credentials or usage data to the app provider (except the licence check in section 3.3)
- no analytics, tracking or crash-reporting services
- no advertising, no advertising identifiers
- no disclosure to third parties
- no profiling, no automated decision-making
- no access to contacts, calls, messages, camera or location
- no reading of the entire storage: the app uses the Android system folder picker and only sees the folder you grant there. No storage permission is requested.
3.5 Links to websites
In the settings, “LV Compass” (version) opens the app's page on Google Play, “Developer” the Geier-IT contact page, “Privacy policy” and “Accessibility statement” the respective page on geier-it.eu/software. This only happens when you tap the entry, and in your browser or the Play Store app; the app itself transmits nothing. The privacy notices of the respective operators apply to these pages.
4. Permissions
| Permission | Purpose |
|---|---|
| INTERNET | Connection to the cloud server you entered yourself and licence check with the Geier-IT licence server (section 3.3). The app opens no other connections. |
| ACCESS_NETWORK_STATE | Only to check whether the device currently has internet: without a connection the app does not attempt the download and stops it when the connection drops. No data is collected or transmitted. |
No other permissions are requested.
5. Legal basis (Art. 6 GDPR)
Processing on the device and transmission to your server take place to perform the usage relationship and at your request: Art. 6(1)(b) GDPR. The cloud feature is optional; its use is additionally based on Art. 6(1)(a) GDPR (consent), which you can withdraw at any time with effect for the future by disabling the feature or deleting the credentials.
The licence check serves the performance of the usage contract (Art. 6(1)(b) GDPR). Binding a key to a device and the operating logs are additionally based on the legitimate interest of Geier-IT in preventing multiple use of a key and abuse (Art. 6(1)(f) GDPR).
Important for business use
Bills of quantities may contain personal data (e.g. names and addresses of clients, contact persons or planners). If a company uses the app, the company is the controller for this content – not the app provider. The company must itself ensure a legal basis, information of the data subjects and retention periods. The app provider never receives this data.
6. Retention
- Credentials and settings: until deleted in the app or until uninstallation.
- File contents: in memory only while displayed. Local copies of cloud files are created only for the projects you explicitly choose and remain until you delete them in the settings or uninstall the app.
- Files on the server: your responsibility or that of the server operator. The app changes nothing there.
- Licence data on the licence server: as long as the licence exists and statutory retention obligations require; Geier-IT deletes trial keys that are no longer needed on request. Operating logs containing IP addresses are deleted after 14 days at the latest.
7. Your rights
You have the rights under Art. 15 to 21 GDPR against the controller: access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent at any time with effect for the future.
The app provider only holds the licence data described in section 3.3; you can obtain access, rectification and erasure for it via the address above. All other data is on your device and on your server, both of which are under your control: delete the credentials in the app or uninstall it; manage files directly on your server.
Right to object (Art. 21 GDPR): Where processing is based on Art. 6(1)(f) GDPR you may object at any time on grounds relating to your particular situation. In this app this only concerns abuse prevention in the licence check (section 5).
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for the controller is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz, Germany, www.datenschutz.rlp.de.
8. Transfers to third countries
The app provider transfers no data to third countries. The licence server runs in Germany on our own servers; Geier-IT is the operator of the licence server and the controller. Where your requests to the cloud server go is determined solely by the server address you enter. If that server is located outside the EU/EEA, you are responsible for the admissibility of that transfer.
9. Security
- Transmission exclusively via HTTPS; unencrypted HTTP is blocked.
- The password is stored encrypted with AES-256/GCM; the key is kept in the Android Keystore, bound to the device and cannot be extracted.
- Automatic backups are disabled.
- The proof of licence is digitally signed by the licence server (ECDSA P-256) and verified in the app; forged or modified proofs are rejected.
- Recommendation: with Nextcloud use an app password instead of your main password. It can be revoked individually without affecting your account.
10. Children
The app is not directed at children and does not knowingly collect data from children.
11. Changes
This policy is updated when the functions of the app change. The current version can always be found on this page.