1. Controller
Ganja Electronics[Vor- und Nachname]
[Straße Hausnummer]
[PLZ Ort]
ドイツ
メールアドレス: [email protected]
WhatsApp: +49 151 59062472
This policy applies to the website ganja-electronics.tech, the desktop software Projekt ULTIA (Windows, Linux; hereinafter “ULTIA” – you choose your AI’s name yourself) and the companion Android app (package de.ultia.handy, also on the Google Play Store).
2. The website
2.1 Visiting the pages
When you visit, our server necessarily processes your IP address, the requested address, date and time and browser information in order to deliver the page. We store no IP addresses in logs. Only to prevent password guessing does the server keep failed sign-in attempts per IP address in memory for at most 15 minutes. Legal basis: Art. 6(1)(f) GDPR (secure operation).
2.2 Cookies
We only set technically necessary cookies: gs keeps you signed in (30 days or until you sign out), gc protects forms against misuse (cross-site request forgery). Without your consent we set no further cookies and load no advertising or analytics services. Legal basis: Section 25(2) no. 2 TDDDG, Art. 6(1)(b) and (f) GDPR.
On your first visit the site shows a cookie notice. Your choice (necessary only, YouTube videos without asking, possibly marketing) is stored by your browser in local storage (localStorage, entry ge-datenschutz-wahl); it is not transmitted to us. You can change it at any time via “Cookie settings” at the bottom of every page.
2.3 Customer account, orders, reservations
For an account we store name, username, email address, a password (only as a scrypt hash, never in plain text) and the creation date. For orders and reservations we store edition, price, time, your consents, payment status and the assigned key. Purpose: contract, key issuance, downloads. Legal basis: Art. 6(1)(b) GDPR; for invoicing data the statutory retention obligations (Section 147 AO, Section 257 HGB, up to 10 years), Art. 6(1)(c) GDPR.
You can delete your account yourself at any time. Account, sign-ins and reservations are deleted immediately; paid orders remain stored, restricted, until the retention period ends.
2.3a Card payment via SumUp
If you pay online, we redirect you to SumUp’s payment page (SumUp Limited, Block 8, Harcourt Centre, Charlotte Way, Dublin 2, Ireland). You enter card details only there – we never see them. We transmit amount, currency, order number and a description of the order to SumUp and receive the payment status and a transaction number. Legal basis: Art. 6(1)(b) GDPR (contract) and (c) (retention obligations). SumUp’s privacy policy applies to processing by SumUp.
2.4 Contact
If you write to us by email or WhatsApp, we process your details to answer the request (Art. 6(1)(b) or (f) GDPR). For WhatsApp, the terms of WhatsApp (Meta) also apply.
2.5 Videos
We serve our own videos ourselves. Videos hosted on YouTube are only loaded from the privacy-enhanced mode (youtube-nocookie.com) after you click “load video”. Only then does your browser transmit data such as your IP address to Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Legal basis: your consent by clicking or by your choice in the cookie notice, Art. 6(1)(a) GDPR, Section 25(1) TDDDG. You can withdraw consent at any time via “Cookie settings”.
2.6 Support platforms
Links to Ko-fi, Patreon, PayPal and others lead to third-party sites, where their privacy policies apply; we only receive what the platform transmits to us for the payment.
2.7 Visitor statistics (own server)
To see how the website is used, we count page views on our own server – without cookies, without storing IP addresses and without sharing. So that a device counts as one visitor per day, we form a hash from IP address, browser identifier and a random value generated anew each day; the hash is kept only in memory and discarded together with the random value at the end of the day, after which no link to you is possible. Only daily totals are stored: pages viewed, language, device type (phone/computer), referring site (domain name only) and campaign identifiers from the link (e.g. utm_campaign), plus totals of account sign-ups, reservations and orders. If your browser sends “Do Not Track” or “Global Privacy Control”, you are not counted. Legal basis: Art. 6(1)(f) GDPR (improving our offer); your device is not accessed.
2.8 Marketing (only with consent)
If we run ads, we may measure their success with the Google tag (Google Ireland Ltd.) and the Meta pixel (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland). These services are only loaded if you tick “Marketing” in the cookie notice. They then set cookies or read device identifiers and transmit, among other things, IP address, pages viewed and interactions to Google or Meta, including to the USA (EU-US Data Privacy Framework). Google and Meta may link the data to your account with them and use it for their own purposes. Legal basis: your consent, Art. 6(1)(a) GDPR, Section 25(1) TDDDG. You can withdraw at any time via “Cookie settings”. As long as no ad identifiers are configured, the option does not appear and nothing of this is loaded.
2.9 Hosting
The website runs on our own server in Germany. It is reachable at ganja-electronics.tech through an encrypted tunnel from Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). Cloudflare provides the HTTPS connection, forwards requests to our server and protects against attacks; in doing so, Cloudflare processes your IP address and the technical data of the request. This is based on a data processing agreement with Cloudflare (Art. 28 GDPR); transfers to the USA are based on the EU-US Data Privacy Framework, in which Cloudflare participates. Legal basis: Art. 6(1)(f) GDPR (secure, available operation).
3. The ULTIA software (Windows, Linux)
ULTIA works locally. Conversations, memory, notes, tasks, voice profile, camera images, email and bank details that you entrust to ULTIA stay on your computer (folder Vault). We have no access to them.
3.1 Activation and update check
On activation and during the update check (every two weeks) ULTIA transmits to our license server: installation key, owner’s name, the AI’s name, an anonymous machine ID, the program version and – only if you agree – your email address. Purpose: licence check, binding to one computer, providing updates. Legal basis: Art. 6(1)(b) GDPR.
The connection is additionally end-to-end encrypted. It runs through a Cloudflare tunnel (Cloudflare Inc., USA; certified under the EU-US Data Privacy Framework); ULTIA learns the current server address in signed form via ntfy.sh. Both services see your IP address, but no content.
3.2 Installation
During installation the installer downloads program components and the language model from GitHub, Hugging Face and the Python Package Index (PyPI). These providers see your IP address.
3.3 Web search and tools
ULTIA only goes online when a task requires it (e.g. web search, weather) and logs every request on your computer. The service queried receives your IP address and the search query.
3.4 Backups
Backups of your personal data are created on your computer and encrypted with your backup password. We cannot open them.
4. The Android app
The app is a remote control for your own ULTIA. It connects through your own encrypted WireGuard VPN exclusively to the computer on which your ULTIA runs. Data recorded by the app goes only there – not to us and not to third parties. There is no advertising, no tracking and no analytics SDK.
| Data | Purpose | When |
|---|---|---|
| Precise location | Reminders and hints depending on location (“You’re almost home”) | After your permission; optionally also in the background (app closed) |
| Microphone / voice | Voice input; wake word (the name you chose); ambient volume (1 s per minute, not stored) | After permission; continuous listening only if you switch it on |
| Camera | Photos you take yourself | Only on your command |
| Motion / activity | Whether you are walking, driving or standing still | After permission |
| Nearby Bluetooth devices | Recognising known devices (e.g. car) | After permission |
| Battery, network, device status | Hints such as “phone battery almost empty” | While connected |
| Chat messages, photos | Conversation with your AI | When you send them |
| Reports on answers (⚑) | Notice to your AI that an answer was inappropriate | When you report |
Before each permission, the app explains what is recorded and where it goes. You can switch off all permissions at any time in the app or in Android settings. While the app works in the background, Android shows a persistent notification.
The data is stored on your own computer; you can delete it there yourself or by uninstalling ULTIA. The app itself only stores the pairing (VPN key) and reports not yet delivered. Uninstalling the app deletes them.
If you obtain the app via Google Play, Google processes data for download and updates under its own terms. We only receive aggregated statistics and crash reports without content from Google, if you have allowed this in Android.
5. Disclosure, third countries
We do not sell data and only pass it on when necessary for the contract (e.g. to the bank for payments) or when legally required. Transfers to the USA (Cloudflare, possibly Google and Meta) are based on the EU-US Data Privacy Framework.
6. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), and the right to withdraw consent with effect for the future. An informal message to [email protected] is enough.
You can lodge a complaint with a data protection supervisory authority, for example: [Datenschutz-Aufsichtsbehörde deines Bundeslandes, z. B. Der Landesbeauftragte für den Datenschutz …].
7. Security
We store passwords only as scrypt hashes. The connection to the website is encrypted once it is publicly available at ganja-electronics.tech. License and app connections are end-to-end encrypted.
8. Children
ULTIA and the app are intended for adults. Only persons aged 18 or over may create an account.
9. Changes
We update this policy when ULTIA or the legal situation changes. The version published here applies. As of: 27.10.2026.