Legal & disclaimer

This is software you run, not a service somebody operates for you. It is a static web app: once loaded it runs entirely in your browser, on your device. There is no vall.ai server behind it, no account, and no database anywhere but this browser.

That has a consequence worth being blunt about. Because nothing passes through us, we cannot see your material, and equally we cannot recover it, delete it on request, or answer for what you do with it. Where this app sends data anywhere, it sends it from your browser straight to the AI provider you chose, with the key you supplied.

In data-protection terms: for that transfer you are the controller, and your AI provider is your processor under the contract you accepted when you opened your account with them. Neither vall.ai nor Business Meets Tech e.V. is either, and neither has access to the data at any point.

This app, running on your machine, is not a telemedia service, so no imprint obligation arises from using it. The website that distributes it is one, and carries its own imprint. For reference, the information required under § 5 DDG (formerly § 5 TMG):

vall.ai is a division of the association named below and is not a legal entity of its own. Neither the association nor vall.ai is an institution of WHU – Otto Beisheim School of Management, and neither is authorised to make statements on its behalf.

Business Meets Tech e.V.
c/o WHU – Otto Beisheim School of Management
Burgplatz 2
56179 Vallendar
Germany

Board:            Felix Uder (chairperson), Luis Baumann
Register court:   Amtsgericht Koblenz
Register number:  VR 21749
Email:            jan.klassen@whu.edu
Association:      info@businessmeetstech.de

VAT identification number: [ONLY IF THE ASSOCIATION HAS ONE]. § 5 Abs. 1 Nr. 6 DDG asks for a VAT identification number under § 27a UStG where one has been issued, and for nothing else. A Steuernummer is deliberately not published here.

These details match the website's imprint. Change them in one place and the other goes stale, so change both. businessmeetstech.de

We run no server and collect nothing. Your courses, decks, cards, lecture files, statistics, chats and API keys are stored only in this browser, on this device.

There is no account, no sign-up, no database, no analytics, no cookies and no tracking. No usage data is reported anywhere. Nobody, including whoever gave you this app, can see your material.

Where it is kept: everything except lecture files and slide images lives in this browser's localStorage; lecture files and generated slide images live in its IndexedDB. Both are ordinary browser storage, readable by anyone who can use this device profile, and cleared when you clear site data.

The one exception: when you trigger an AI feature, the relevant content goes directly from your browserto the provider you chose (Anthropic, OpenAI or Google), using your own API key. What is sent depends on the feature: generating cards, an exam or a mind map sends the whole lecture PDF; the chat sends your messages and a summary of your card statistics; typesetting sends the text of the affected cards; and where you tick the box for it, the example cards you saved as a style reference travel with a generation request. That exchange is between you and that provider, under their terms and privacy policy, including whatever those say about retention and about training on submitted data. It never passes through any server of ours, because there isn't one.

Deciding what may be sent is your call. Do not upload material you are not allowed to share with a third party: lecture slides whose rights are not yours to grant, confidential documents, or anything carrying other people's personal data. If you are processing someone else's personal data you need your own legal basis for it and your own agreement with the provider. A consumer-tier AI account is usually not enough.

Your API keyis held in this browser's local storage as plain text, the only place an app with no server can keep it. Anyone with access to this device profile can read it. Use a key with a spending limit, keep it off shared machines, and revoke it in your provider's console if the device is lost. Exported backups deliberately leave keys out.

Data loss: clearing your browsing data, using private mode, or switching browser or device removes everything. Some browsers also clear local storage after long inactivity. Use Settings → Export everything regularly; nobody can recover your data for you.

Flashcards, concept maps, exam questions, model answers, marks and feedback are produced by an AI system. Such systems generate plausible-sounding output that can be factually wrong, incomplete or outdated.

Everything generated here is a study aid only. It is not authoritative and does not replace your lectures, textbooks or instructors. Practice-exam marks are indicative and bear no relationship to any grade from any institution. Verify anything exam-critical, and make sure your use complies with your institution's rules on academic integrity. Those rules are set by your institution, not by this app.

You use this software entirely at your own risk. You are responsible for: your own API key and your provider's terms; all costs billed to your account by that provider; the lawfulness of what you upload and send; the security of your device and keys; your own backups; and any consequence of relying on generated content.

Cost deserves naming separately. One lecture can run to a few ten cents of API credit, and a “generate for every lecture” pass multiplies that by the number of lectures. Set a spending limit in your provider's console before a long run, not after one.

The software is provided "as is", without warranty of any kind, express or implied, including merchantability, fitness for a particular purpose and non-infringement. No guarantee is given that it works without error, that generated content is correct, or that stored data survives.

To the fullest extent permitted by law, the association and contributors are not liable for any damages arising from use of, or inability to use, the software, including lost data, lost time, provider costs, failed examinations or academic disadvantage.

Mandatory liability is unaffected: liability for intent and gross negligence, for injury to life, body or health, and under the German Product Liability Act cannot be excluded and is not excluded here.

Released under the MIT Licence, Copyright © 2026 Business Meets Tech e.V. You may use, copy, modify and distribute it, provided the copyright and licence notice are retained and no warranty is implied.

Built on open-source components under their own licences: Next.js, React, Tailwind CSS, KaTeX, PDF.js, React Flow, Dagre, Recharts, Lucide and the bundled webfonts. Provider names and trademarks belong to their respective owners and are used for identification only.