Privacy Policy

Last updated: September 17, 2026. Duviloper CORE AI LAB (“we”, “us”) builds the eQCX (“the app”).

The short version

Your spectral data and conversion results never leave your machine. This website also counts anonymous page visits; see Website visit statistics below. Only your email, a pseudonymous usage ID, and quota counts travel, and only through the student quota sync described below. Separately, an anonymous, content-free description of a failed file’s structure may be sent in two situations described further down. You can turn that off at any time.

What stays on your machine

• Your input folders, every spectral file, and all metadata.
• The converted output (metadata.csv, spectra.csv) and the audit log.

None of this is transmitted anywhere. Conversion itself needs no network connection; if the licensing endpoint is unreachable the app keeps working on its built-in free budget.

Student quota sync (app and website)

The free student plan has a monthly budget (samples converted, figure exports). To track it, the app asks once for your university email at first run and the website may ask at download.

• Website form: your email and a consent timestamp are stored when you tick the box. That is the only place a readable email is kept.
• In the app: the email is hashed on your machine (SHA-256 with an app salt) right after you type it. The app stores and sends only the hash, your email domain (for example mit.edu), a machine hint, and the usage counters (samples converted, exports performed). The monthly budget and its reset date come from the server; your clock never decides them.
• Never sent: spectra, filenames, folder paths, conversion results, or any file content.
• Deletion: ask us to delete your record and we remove the email row and the hash-keyed counters (single database delete each). Nothing else exists to delete.

Website visit statistics

This website counts its own traffic with Umami, which we host on our own server. The counter sets no cookies and stores no personal data. A visit record holds the page URL, the referring site, the country, the browser family, the device type, and the time spent on a page. Button clicks, such as the download button, are counted as events. The IP address is read to determine the country and is not stored. Visit records are not linked to you or to your email.

What may be sent, and when

1. Student quota sync (described above). Salted hash, domain, machine hint, and quota counts. No file data.
2. Anonymous structure telemetry (on by default; opt-out anytime). When a conversion fails, the app may build a content-free structural “recipe” of the file: field types, decimal places, file size, row count, delimiter, and a type-tagged pattern of the header. It does not include spectra, intensities, filenames, paths, free text, or any values. This helps us understand why a format failed so we can support it. You can disable this in the app’s settings; declining keeps the app fully working.
3. Voluntary format review (only when you choose it). On a folder that failed to convert, you may click “Request format review.” This packages the same content-free structural recipe and sends it to us (or saves it locally if no endpoint is configured). It never includes your data. It is never automatic.

Identifiers the app uses locally (in the audit log)

• Machine identifier. The app reads the Windows MachineGuid to attribute each conversion to a machine in the local audit trail. This value stays in your local audit log; it is not sent unless you submit a review package (which, again, contains no file contents).
• Operator name. If you enter an operator name, it is recorded in the local audit log to attribute the conversion. It is not transmitted.
• Checksums. SHA-256 hashes of output files and a tamper-evident chain are written to the local audit log for integrity.

Enterprise / validated builds

Enterprise and validated deployments run with telemetry off and fully offline. No data leaves the machine in those configurations.

Your choices

• Turn anonymous structure telemetry on or off in the app settings at any time.
• Never click “Request format review” if you do not want to share a structural recipe.
• Use the app without a university email: choose “No university email” in the first-run dialog. The same free budget applies; only domain-based plan lookups are skipped.
• Ask us to delete your email record or your pseudonymous quota history at any time.

Contact

Questions about this policy: the contact address listed on the main site.