Legal notice, privacy and terms

Information pursuant to §5 ECG and §25 Mediengesetz (Austria)

Service provider

Purpose (Unternehmensgegenstand)

Information about Lulytica, a mobile application for personal ERCP performance tracking, developed by Lukas Erhart.

Basic direction (Grundlegende Richtung, §25 MedienG)

This website informs about the Lulytica app: what it does, the clinical standards it measures against, and the state of its development.

Privacy notice for the Lulytica app

In short: the app has no account and sends nothing to us on its own. Your record is encrypted on your phone. A backup, or a spreadsheet you export, goes only where you choose, and the app never sends either to us.

Who is responsible

Lukas Erhart, Feldmühlgasse 9/B18, 1130 Wien, Austria, hello@lulytica.com, provides the app. For the personal data that reaches us, which is only what you send us yourself, he is the controller under the GDPR (Art. 4(7)).

What the app collects

Nothing on its own. The app has no account and no analytics or advertising code, and it sends nothing to us. The one thing that can reach us is a problem report you send yourself (below).

What you record is stored on your phone, in a database encrypted with a key derived from your PIN. We have no copy and no way to read it.

The app asks for no patient name and no patient number. In legal terms the record is still health data, pseudonymised: a case can be matched to your hospital’s records, and a note holds whatever you type into it.

Backups

A backup is a complete copy of the record, encrypted on the phone with your recovery key before it is written. The app writes it only where you choose: on Android, to a folder you pick; on an iPhone, to the app’s own folder in your iCloud Drive, and only once you turn backups on. You can also save or send a copy yourself.

Apple, Google or whoever provides that storage sees the file’s name, date and size, under its own terms. It cannot open the file without your recovery key. The app never sends a backup to us.

Exporting the logbook

Settings → Export the logbook writes every case into one spreadsheet file and hands it to your phone’s share sheet, or saves it in a folder you pick. Unlike a backup, the spreadsheet is not encrypted. Anyone who has the file can read every case, notes included. The app says so before it makes the file. It goes only where you send it, and the app never sends one to us. A copy you save stays where you saved it until you delete it; a copy you send is kept by whatever you sent it to, under its own terms. The app deletes its own copies of the file at its next start.

Buying the subscription

You buy the subscription from Apple’s App Store or Google Play, under their terms and privacy policies. They handle the payment. We receive no name and no payment details from them; what the stores show us is sales figures.

The app asks the store, on your phone, whether your subscription is active, and keeps the answer on your phone.

Problem reports and mail

Settings → Send problem report opens a mail draft in your own mail app. It holds recent app log lines, the app version, the flavor, the bundle id, the phone’s operating system, your locale, the database schema version and the time, and it is built without reading your logbook. You read it, may change it, and send it yourself to hello@lulytica.com. Nothing is sent until you do. Please do not add patient data to the mail.

Mail to that address is relayed by our domain registrar’s forwarding service (Porkbun LLC, USA) and delivered to a mailbox operated by Microsoft (both certified under the EU–US Data Privacy Framework), as the website notice below describes. We use a report or a message only to answer it and to fix the app, and keep it only as long as the matter takes. Legal basis: Art. 6(1)(b) and (f) GDPR.

How long the record is kept, and deleting it

The record stays on your phone until you delete it. Settings → Delete everything deletes every case, adverse event and site from the phone.

If you have a backup set up, it first saves one safety copy, encrypted like a backup, inside the app’s own storage and, when your backup folder can be reached, there too; the app never deletes that copy, so delete it there if you want it gone. If you have no backup and confirm, no copy is made.

Your name, your settings and the app’s audit trail of dates and counts stay until you delete the app. Deleting the app deletes the record from the phone.

Backups stay where you stored them until you delete them there; a safety copy inside the app’s storage goes when the app is deleted. In your backup folder the app keeps the newest backup of each of the last seven days that has one, and of each of the last four weeks, and deletes the older automatic backups; safety copies are never deleted by the app.

A spreadsheet you exported stays wherever you saved or sent it; neither Delete everything nor deleting the app reaches it.

We hold nothing of the record, so there is nothing for us to delete.

Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. As we hold nothing of the record, a request can only concern what we do hold: your mail to us. You may also lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, dsb.gv.at) or your local supervisory authority.

Third parties

No one processes the record for us. The store, the provider of your backup storage, any app you send a document or the spreadsheet to, and your mail provider act under their own terms when you use them.

Your side

You decide what you record and why, and you are responsible for it and for your hospital’s rules on patient data. The app asks for no patient name or number, and says so where notes are entered.

Last updated: 8 October 2026.

Terms of use for the Lulytica app

On an iPhone the app is licensed under Apple’s standard licence agreement, and these terms apply alongside it. On Android these terms are the agreement.

Who provides the app

Lukas Erhart, Feldmühlgasse 9/B18, 1130 Wien, Austria, hello@lulytica.com.

What the app is

Lulytica is a logbook and report of your own ERCP practice. It records the procedures you performed and computes your rates as the cited papers describe.

You may install and use the app on devices you own, for your own professional record.

It gives no advice about any patient and is not a medical device. Check a figure against your own records before you rely on it for appraisal, credentialing or any other formal purpose.

The subscription

Your first 20 cases are free. If your cannulation rate cannot be shown after them, recording stays free until it can.

After that, recording a new case needs a yearly subscription, bought in the App Store or Google Play at the price the store shows. It renews each year until you cancel it in the store. The store’s own terms govern the purchase, cancellation, withdrawal and refunds. In Austria the price is €99 a year at launch; other countries see their own price in the store.

With or without a subscription, you can still read everything you have recorded: every case, every document, every backup. Backing up, restoring and exporting the logbook do not depend on the subscription either.

What you are responsible for

You decide what you record, and you are responsible for it and for following your hospital’s rules on patient data. The app asks for no patient name or number; do not type either into a note.

Keep your PIN and your recovery key. Without the PIN and biometric access, the record on the phone cannot be opened; only a backup and its recovery key bring it back. Without the recovery key a backup cannot be opened, by you, by us or by anyone else.

Liability and warranty

To the extent the law allows, the app is provided as it is, without a promise that it is free of errors, and we are not liable for lost data or for decisions made on its figures. This does not limit liability for intent or gross negligence, for injury to life, body or health, or under product liability law, and it leaves your rights as a consumer untouched. Austrian law applies; as a consumer you keep the protection of the law of the country where you live.

Changes to these terms

We announce a change to these terms in the app’s release notes before it takes effect. The date below is the date of the current version.

Contact

hello@lulytica.com

Last updated: 8 October 2026.

Privacy notice for this website

In short: this site is a set of static pages. It sets no cookies, runs no analytics and loads nothing from third parties. The server stores no access log for this site; security events may sit briefly in the host’s logs.

Controller (Art. 4(7) GDPR)

Lukas Erhart, Feldmühlgasse 9/B18, 1130 Wien, Austria — hello@lulytica.com

What this site does not do

• No cookies, and no comparable client-side storage.
• No analytics, tracking, or advertising of any kind.
• No third-party fonts, scripts, or embeds: the fonts are inside each page, and every file is served from our own server.
• No forms and no accounts.

Visiting this site

To deliver the page, the web server necessarily processes your IP address and the technical request data your browser sends (requested URL, time, user-agent) for the duration of the request. No access logs are stored for this site. Security-relevant error events (for example repeated malformed requests) may appear briefly in the host’s infrastructure logs used for intrusion prevention and are routinely discarded. Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in operating and securing the service.

Contacting us by email

If you write to hello@lulytica.com, we process your address and the content of your message to answer it (Art. 6(1)(b) and (f) GDPR) and keep the correspondence no longer than needed. Mail to this address is relayed by our domain registrar’s forwarding service (Porkbun LLC, USA) and delivered to a mailbox operated by Microsoft; both act as independent providers of email infrastructure, and transfer to the USA is covered by the EU–US Data Privacy Framework certification of these providers.

Hosting

This website is hosted on a server operated for us by netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany (EU), acting as our infrastructure provider.

Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. You may also lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, dsb.gv.at) or your local supervisory authority.

Last updated: 8 October 2026.