Terms of Service

Article 1 — Introduction & Definitions

1.1 Introduction

Welcome to ScanAnalyzer, an AI-powered geophysical analysis application provided by Noetic Lab, the specialized development department of X6 Geo Plus IKE. These Terms of Service ("Terms") govern your use of the ScanAnalyzer application, related services, and the website noetic-lab.com. By accessing or using our Services, you expressly agree to be bound by these Terms.

1.2 Who We Are

X6 Geo Plus IKE is a technology solutions and software development company. The services are provided by:

• Company Name: X6 Geo Plus IKE
• Headquarters: Mesogeion Ave & Thermopylon 2, P.C. 15341, Agia Paraskevi, Athens, Attica, Greece
• Development Department: Noetic Lab
• Email: grdetectors@yahoo.com
• Phone: +30 211 0010316

1.3 About Noetic Lab

Noetic Lab is the specialized AI arm of the X6 Geo Plus Group. It integrates the expertise of EU Detect Force Ltd (London, United Kingdom) and operates from a production center in Athens, through strategic partnerships with leading scientific research centers and technology institutes.

1.4 Definitions

• "Services": The ScanAnalyzer application, the noetic-lab.com website, and all related functionality.
• "User": Any natural or legal person who accesses or uses the Services.
• "Credits" / "Tokens": Usage units (GeoScan Credits) consumed for AI actions.
• "Input": Data, files, and queries submitted by the User.
• "Output": Analytical data and reports generated by the AI.

Article 2 — Registration and Access

2.1 Minimum Age

You must be at least 18 years of age (or the legal age in your country of residence) to use the Services.

2.2 Registration Process & Declared Information

Registration to ScanAnalyzer AI begins from the User within the Software environment (X6 Subsurface 4D). Identification is performed via Firebase Authentication (Google LLC, as sub-processor — see Article 9.4) with email/password sign-in or a device-bound custom-token session (issued by device-init at activation).

Information collected at registration:

• Mandatory: Email address (or a device-bound Firebase UID issued via the activation code), acceptance of Terms & Privacy Policy.
• Optional (Profile): First name, Last name, Phone, Company, Address, ZIP, City, State/Region, Country, Profile photo (stored as Base64 in encrypted local SharedPreferences).
• Automatically collected:
  • device_id — unique device identifier (generated from hardware fingerprint).
  • activation_code — format GSCAN-XXXX-XXXX, issued upon first successful activation.
  • App version, device model/manufacturer, Android API level, system language.

Storage: All profile data is stored locally on the device with AES-256-GCM encryption via Android Keystore (hardware-backed master key). Central servers (Firestore) retain only: Firebase UID, token balance, list of activated devices (1 per account) — not profile data or scan results.

2.3 Acceptance of Terms

To complete registration and use ScanAnalyzer AI, the User's full and unconditional acceptance of these Terms and the Privacy Policy is required. Acceptance is logged with timestamp in Firestore.

2.4 Account Credentials

You must provide accurate information during registration. Sharing your account credentials with third parties is prohibited. You are solely responsible for any activity carried out through your account.

2.5 Device Binding

Each account may be activated on 1 device. The activation_code is device-bound and non-transferable. In case of device change, the User may request reset via grdetectors@yahoo.com with proof of purchase. In case of device loss/theft, the User must notify within 48 hours for immediate device_id suspension.

2.6 Withdrawal of Consent & Account Deletion

The User may at any time:

• Withdraw consent to processing of optional data (Article 8.3).
• Request full account deletion (right to be forgotten — GDPR Art. 17) via email at grdetectors@yahoo.com. Deletion is executed within 30 days. Any unconsumed tokens are not refunded monetarily (see Article 4.2).
• Request data export (data portability — GDPR Art. 20) in JSON format.

Article 3 — Capabilities of ScanAnalyzer AI

3.1 Digital Assistants

Through ScanAnalyzer AI, the User can submit queries to digital assistants trained on the procedures and functionalities of the Software. The assistants provide guidance for successful task completion, answer operational questions, and perform supportive actions where feasible.

3.2 Subsurface Geological Analysis

Advanced subsurface geological analysis capabilities are integrated into the core entities of the Software. These services analyze, summarize, and surface critical information from scan data, helping the User to isolate substantive elements and obtain documented answers.

3.2.1 Offline-First Operation (Directive #21 · 2026-05-27)

The following scan fields incorporate an on-device AI engine that operates without an internet connection:

• AR 3D X-RAY — ARCore Geospatial augmented reality subsurface scan
• GEO X6 AI Scanner — geophysical field scan using the X6 Multy Grounding Scanner system or phone magnetometer
• AR Scanner SAR — Synthetic Aperture Radar augmented reality scan
• AETHER — 3D voxel tomography grid

In offline mode, the on-device model produces a preliminary classification verdict with a confidence cap of ≤75%, displayed with an OFFLINE badge. Upon reconnection to the internet, the cloud ensemble (X6 MATRIX AI) automatically re-evaluates the same data and may produce a CLOUD VERIFIED or REVISED verdict with full confidence scoring. The final cloud verdict always takes precedence over the offline preliminary result.

All other fields (CSV/TXT import analysis, X-Ray RF Tomography, AI Chat) require an active network connection.

3.3 Artificial Intelligence — Accuracy Disclaimer

The Services use AI technology to analyze geophysical data.

• "As is": Results are provided "as is". Noetic Lab does not guarantee absolute accuracy, as it depends on the quality of input data and the evolution of algorithms.
• User Responsibility: The User is solely responsible for the final interpretation of results and decision-making based on them. You should not rely on Output as the sole source of truth or as a substitute for professional advice.

3.4 Mandatory Use of GPS / Location (Scientific Accuracy)

The application uses the device's GPS / geolocation receiver. The User expressly acknowledges and accepts that an active and accurate location is considered essential for the correct operation and the scientific accuracy of the analysis. The precise scan-location data feeds the AI with critical geophysical context prevailing during the scan, such as:

• Soil composition & type (e.g. sandy, clay, limestone, granitic) and the corresponding dielectric constant, sourced from geological databases by coordinates.
• Weather & environmental conditions (soil/atmospheric humidity, temperature, barometric pressure) at the time of the scan, which affect conductivity and signal propagation.
• Magnetic parameters & anomalies of the Earth's field (intensity, declination, inclination per WMM/IGRF) at the specific point, required for calibration and correct interpretation of the measurements.

Without an accurate location, the AI lacks this context and the analysis is neither scientifically valid nor functionally possible. The collection and use of GPS data is governed by the Privacy Policy (§8) and the Local-First principle (§9): coordinates are used solely for the geophysical calibration of the analysis.

Article 4 — Tokens Policy (GeoScan Credits)

4.1 Token Characteristics

4.2 Right of Withdrawal

Due to the nature of GeoScan Credits as digital content delivered immediately, the User expressly consents to the loss of the 14-day right of withdrawal once tokens are credited to their account.

4.3 Refunds & Token Refund Policy

Cash refunds are processed only in the following cases:

1. Proven technical error rendering tokens unusable.
2. Incorrect or duplicate charge.
3. Webhook propagation failure within 7 days after successful payment (no token credit).

Mid-session network failure — Token Refund Rules (Phase 1A · 2026-05-04):

• ✅ Automatic token refund: when failure originates from cloud or application issues (e.g. HTTP 5xx from geoscan-proxy, X6 MATRIX AI API outage, server-side error). The proxy logs the traceId and automatically reverses the charge within 24 hours.
• ❌ No token refund: when failure originates from the User's network (e.g. weak cellular signal, Wi-Fi loss, no active data plan, offline mode outside coverage). The User bears full responsibility for device connectivity.
• Distinction: The proxy returns a clear error code to the client (CLOUD_FAIL vs CLIENT_NETWORK_FAIL) so the User knows upfront whether a refund applies. In case of dispute, the server-side log (audit trail) prevails.

Cash refund requests are sent to grdetectors@yahoo.com with Stripe session ID or Payment Intent ID. Automatic token refunds (cloud failures) require no request — they are executed by the proxy. Manual request processing within 14 business days.

4.4 Token Purchase Flow

The GeoScan Credits purchase process follows these steps:

1. Package selection from in-app Token Store (PRO: Starter €100 / Basic €25 / Pro €80 / Gold €160 · MAX institutional: €250–€1,600 on request).
2. In-App payment via Stripe Payment Sheet (PCI-DSS Level 1 certified, 3D Secure 2 supported). Accepted cards: Visa, Mastercard, Amex, Maestro. Payment is processed directly by Stripe Inc. — Noetic Lab does not store card details.
3. 3D Secure verification (if required by issuing bank): browser redirect for OTP/biometric authentication.
4. Payment confirmation: Stripe returns payment_intent_id. App sends ID to Cloud Run proxy (/purchase/sync-pi).
5. Server-side webhook: Stripe calls webhook on proxy (checkout.session.completed / payment_intent.succeeded) and automatically updates Firestore users/{uid}.tokens.
6. Manual sync fallback: If webhook delays (>30 sec), app performs manual POST /purchase/sync for immediate update.
7. Receipt: Stripe automatically emails receipt to User (includes VAT if declared).

4.5 Token Cost — Block-Based Pricing Model (Phase 1A · 2026-05-04)

ScanAnalyzer applies differentiated billing per feature: (a) Field scans (AR SAR, CSV/TXT, VOXEL 3D, GPR, X-Ray RF) — 1 token (€5) opens a Scan Block covering one full field scan up to 200 m², charged upfront at opening time. (b) AI Chat (text & voice) — 1 token per calendar day: charged on the first question of the day and covering unlimited questions until local midnight (00:00).

4.5a — User Categories: PRO & MAX (Token Cost per Category)

GeoScan Credits are offered in two user categories. The cost in tokens per action is the same for both categories; what differs is the price per token, the depth of AI analysis and the range of unlocked features.

VAT — flat Greek VAT of 24%: All prices above are NET (excl. VAT). A flat Greek VAT of 24% is added for all customers (no per-country VAT). Corresponding prices incl. VAT: PRO — Starter €124 · Basic €31 · Pro €99.20 · Gold €198.40· MAX — Activation €1,240 · Max Basic €310 · Max Pro €992 · Max Gold €1,984. For the MAX category (wholesale/professional), VAT is deductible for VAT-registered businesses. The final amount including VAT is shown before payment and stated on your invoice/receipt.

Cost per action (same for PRO & MAX): File AI Analysis 1 token · VOXEL 3D Visualization 1 token · AR SAR Subsurface Scan 1 token · Chat X6AI query 1 token · Grid Survey tiered (1 token / 200 m²) · Space Scan (passive RF) free. Full packages and prices: Token Store.

🗝️ AENIGMA (PRO only): Map/symbol interpretation 1 token / analysis · Mission (each route point via quantum entropy) 1 token / point. Full charging and access details: AENIGMA page + §4.5e below.

4.5e — 🗝️ AENIGMA (PRO USERS ONLY) — NEW · 2026-06-26

AENIGMA is a module inspired by randonautica-style processes, with two pillars:

• (a) Interpretation (decode): The User uploads a photo of a map/markings/clues; AI agents recognize symbols and directional elements and produce a suggested route (waypoints) with historical/folklore context.
• (b) Suggestion (fate-mode): A point/route is generated within a radius around the User using real quantum entropy (ANU QRNG), with optional anchoring to real POIs.

⛔ Access Restriction — PRO ONLY: The AENIGMA feature is available exclusively to GeoScan PRO users. It is NOT included in the MAX packages (Activation/Basic/Pro/Gold), nor in FREE. This exception is an explicit owner directive (2026-06-25). If you are a MAX-tier user and wish to gain access, please contact grdetectors@yahoo.com.

⚠️ Scientific Honesty & Limitation of Liability: AENIGMA DOES NOT guarantee the existence or discovery of treasure, objects, or antiquities at any suggested point. All results are interpretations with a confidence score, explicitly distinguishing: documented historical facts · traditions/legends · conjecture. Noetic Lab / X6 Geo Plus P.C. assumes no liability for time, cost, or resources expended based on the module's suggestions.

⚖️ Legal Framework (Antiquities & Property): The User bears sole responsibility for compliance with the laws of their country regarding: (a) metal detecting, (b) ground excavation or disturbance, (c) finding and acquiring antiquities or movable monuments, (d) access to private, public, or military land. In Greece, Law 3028/2002 (Protection of Antiquities & Cultural Heritage) applies — any find must be reported to the competent Ephorate of Antiquities. Before any action in the field, the User is obliged to verify and comply with applicable laws.

Right to Modify: Noetic Lab reserves the right to modify, suspend, or upgrade the AENIGMA feature without prior notice. Tokens consumed in AENIGMA are not refunded in case of modification/suspension of the feature (consistent with §4.2).

4.5.1 When the User Is Charged

• Upfront charge: The proxy deducts 1 token from token_balance at the moment the User enters the scan screen or sends the first chat message after an idle/closed state.
• Acknowledgement via Terms of Service: By accepting these Terms at signup (§2.3), the User explicitly acknowledges the cost (1 token = €5 per block) and the block limits. No per-action confirmation dialog is shown before each scan/chat — acceptance of the Terms is sufficient. For changes to this policy, see §15.
• No pro-rata refund: If the User stops at 50 m² or 3 questions, the token remains consumed. The advantage of the block model is cost predictability, not pay-per-use billing.

4.5.2 What "Closing the Topic" Means in Chat

Under the new daily model (from 2026-07-02), AI Chat is charged 1 token per calendar day. The charge occurs on the first question of the day; until local midnight (00:00) the User may ask unlimited questions (text or voice) and close/reopen the conversation at no additional charge. After midnight, the first new question charges 1 token again. "Close Topic" no longer triggers a new charge within the same day.

4.5.3 Block Expiry by Inactivity

Each block (scan or chat) expires automatically after 30 minutes of continuous inactivity (no scan progress, no chat message). After expiry, the token is considered consumed and continuing the activity requires a new token. The app notifies the User 5 minutes before expiry with a persistent notification.

4.5.4 200 m² Limit for Scan Blocks

The 200 square-meter limit is measured via the GPS bounding box of the scan (perimeter of recorded geographic coordinates). When the perimeter exceeds 200 m², the app prompts the User to open a new scan block (new 1-token charge) to continue.

4.5.5 Server-side Validation & Cost Protection

Before each cloud AI call (classification, narrative, chat), the proxy checks: (a) token balance in Firestore, (b) presence of an active block, (c) block limits (m² / question count / idle time). On insufficient balance or block expiry, the request is rejected with HTTP 403 and the User is notified via in-app toast.

Hybrid AI Architecture (Directive #21 · 2026-05-27 update): From Phase 1A onward, the default architecture is cloud-based classification. However, AR 3D X-RAY, GEO X6 AI Scanner, AR Scanner SAR, and AETHER include a scoped offline exception: when no internet connection is available, the on-device AI produces a preliminary METAL/VOID/NEUTRAL verdict (confidence cap ≤75%, badge: OFFLINE). All other modes show "—" or "DETECTING" when offline. Upon reconnection, cloud re-evaluation upgrades the verdict to CLOUD VERIFIED or REVISED. See §11 for AI Act compliance.

4.5f — 🛰️ X6 GEO-SAT: Satellite Archaeology (NEW · 2026-07-14)

The X6 GEO-SAT field performs satellite remote sensing of the area marked by the User (multispectral Sentinel-2, Landsat thermal, Sentinel-1 SAR, Copernicus DEM) with cloud AI analysis (independent-method agreement probability map, candidate anomalies, holographic 3D reconstruction hypothesis, analytical report and PDF). Available to the PRO, MAX, MAX FBI and TEAM categories.

Scientific transparency: X6 GEO-SAT results are candidate indications from indirect satellite remote sensing (cropmarks, soil moisture, thermal footprints, micro-relief, radar) — not confirmations. The satellite does not image the subsurface and provides no depth; depth estimates come exclusively from ground scanning with X6 equipment. The 3D building reconstruction is an AI hypothesis with a permanent watermark. InSAR records millimetre-scale surface deformation (an indirect indication) with approximate georeferencing. InSAR result files are hosted on NASA/ASF infrastructure and retained there for a limited period (~14 days).

4.5g — 🚁 Aerial Capture (Drone): Area Analysis (NEW · 2026-07-20)

The Aerial Capture feature applies cloud AI analysis to photographs the User has taken with their own drone over an area the User has defined. It is available to the PRO, MAX, MAX FBI and TEAM categories. As a reminder, the application does not operate or control drones; §14.4 applies in full.

How the "same area" is determined: Identification is performed exclusively by our servers, based on the geometry of the defined area (vertices, centre, surface area) and the take-off point. The check includes a small tolerance so that ordinary GPS deviations are not treated as a new area. The guaranteed way to repeat an area without an additional charge is the "↻ Repeat scan" button within the application, which loads the stored area unchanged. An area that is re-drawn manually, displaced, or altered in size or shape is treated as a new analysis and is charged normally.

Duration and expiry: The 30-day period begins with the first charged analysis of the area and is not renewed by intermediate repetitions. After it expires, a further analysis of the same area is charged again based on its area and starts a new 30-day period. The absence of an additional charge applies irrespective of the amount initially charged (an area that cost 130 tokens repeats with no additional charge just as one that cost 10). The expiry date is displayed in the application.

Very large areas & failed analysis: To protect our infrastructure, areas exceeding 1,000,000 m² per mission are not accepted; the application indicates this before the flight and asks for the mission to be split into smaller ones. If, despite the charge, the analysis does not complete for a reason attributable to the Service, the tokens are automatically refunded to the User's balance, in accordance with §4.3.

Scope: This clause concerns the Aerial Capture feature exclusively and does not extend to other services — in particular it does not apply to X6 GEO-SAT (§4.5f), where every scan or re-assessment is charged separately.

4.5h — 🎁 Referral Program "Invite to Earn" (NEW · 2026-07-30)

Each registered User may obtain a personal invite code in the app (format X6REF-XXXX-XXXX) and share it with friends.

• Reward: The referrer receives 5 tokens, once per invited friend, when the invitee (a) installs the app, (b) enters the invite code on the activation screen before payment, and (c) completes the paid account activation. The invitee also receives 5 welcome tokens, once, upon completing the same paid activation.
• No cap: There is no upper limit on invitations or rewards. The reward is fixed and deterministic — it is not a lottery or game of chance.
• Nature of tokens: Reward tokens are not redeemable for money, are non-transferable, and are governed by the Token Policy of this Article 4.
• Clawback: In case of a chargeback/dispute of the activation payment that triggered the reward, the reward tokens are deducted from both (5 from the referrer, 5 from the invitee), with a minimum balance of zero.
• Abuse: Self-referrals, fake or multiple accounts, use of the same device, or repeated chargebacks constitute abuse; the Company may refuse or revoke rewards and terminate the account under Article 13.
• Modification/termination: The Company may modify or terminate the program under Article 15; rewards already credited are not affected.

4.6 Device Migration

Tokens are device-bound and stored per Firebase UID + activation_code. The User may transfer tokens to a new device once every 90 days by emailing grdetectors@yahoo.com, providing:

• Old activation_code + new device_id (visible in Profile screen)
• Stripe receipt or payment_intent_id of last purchase

Transfer is executed within 48 business hours. The old device is automatically deactivated.

Article 5 — Use of Services

5.1 Permitted Use

Subject to your compliance with these Terms, you may access and use the Services. You must comply with all applicable Greek and European laws.

5.2 Prohibited Use

The following are prohibited:

• Violation of third-party rights or unlawful use.
• Modifying, copying, leasing, selling, or distributing any of the Services.
• Attempting reverse engineering or discovering the source code of the models and algorithms (unless this restriction is prohibited by applicable law).
• Automated or programmatic extraction of data or results without written permission.
• Claiming that AI Output was created exclusively by a human.
• Interfering with or disrupting the Services, circumventing rate limits, security measures, or protective mechanisms.
• Using Output to develop competing models against X6 Geo Plus IKE.
• Using Output to commit illegal acts.

5.3 Assignment — Transfer by User

The User is not entitled, for any reason, to assign (with or without consideration) or dispose, in whole or in part, of the right of access and use of ScanAnalyzer AI to any third natural or legal person, nor to transfer this agreement (including subsidiaries or affiliated companies).

5.4 Output Review and Evaluation

You should evaluate Output for accuracy and suitability for your use case, employing human review where appropriate, before using or sharing the Output.

Article 6 — Intellectual Property

6.1 Company Rights

The entire content of ScanAnalyzer AI (texts, graphics, designs, marks, algorithms, services, etc.) is the intellectual property of Noetic Lab and X6 Geo Plus IKE and is protected by Greek and international law. Any copying, reproduction, transfer, storage, modification, redistribution, sale, translation, or other use is strictly prohibited without prior express written consent of X6 Geo Plus IKE.

6.2 User Content — Input

You retain all ownership rights in the "Input" you provide to the Services.

6.3 AI Output

X6 Geo Plus IKE assigns to you the rights in the "Output" produced for you, subject to your compliance with these Terms.

6.4 Output Accuracy

AI models are probabilistic. Output may not always be accurate or true. You should not rely on it as the sole source of truth or as a substitute for professional advice.

Article 7 — Paid Accounts

7.1 Billing

If you purchase Services, you will provide complete and accurate billing information, including a valid payment method. For paid subscriptions, we will automatically charge your payment method at each agreed periodic renewal until cancellation.

7.2 Taxes & VAT

Listed prices are NET (excl. VAT). A flat Greek VAT of 24% is applied to all purchases (no per-country VAT); it is shown separately before payment and stated on your invoice/receipt. Any other taxes or duties applicable in your country of residence are your responsibility.

7.3 Failed Payment

If your payment cannot be completed, we may downgrade your account or suspend your access to the Services until payment is received.

Article 8 — Privacy Policy (GDPR)

8.1 Data Collection

We collect account data (email), usage data (IP, logs), device data, and geophysical data submitted for analysis. Processing is in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679).

8.2 AI Processing and Data

The AI processes your data for the purpose of providing analyses. We apply data minimization and anonymization principles where feasible. We do not use your data for automated decision-making with legal consequences without human intervention.

8.3 GDPR Rights

You have the right to:

• Access your data.
• Rectification of inaccurate information.
• Erasure ("right to be forgotten").
• Restriction of processing.
• Data portability.
• Object to processing.

To exercise rights: grdetectors@yahoo.com.

8.5 Stealth Bluetooth Discovery Disclosure (GDPR Art. 13)

In compliance with the principle of transparency (GDPR Art. 13) and Greek Law 4624/2019, we explicitly inform about the X6 Multi-Node Network functionality:

• Continuous passive scanning of BLE/Classic BT devices in the environment (without emission — the User's device is not advertised).
• Silent GATT auto-connect (autoConnect=true) to detectable BLE devices with RSSI > −90 dBm, without showing pairing dialog on target device.
• We do not collect any personal information of third parties: only RSSI, BSSID/MAC (anonymized hash) and service UUIDs for multipath analysis.
• BSSIDs/MACs are not stored on central servers. All RF tomography is performed locally on the User's device.

Permitted Use:

• ✅ Geophysical research on your own or lawfully accessible premises.
• ✅ Archaeological scanning with permit from competent authority (Ephorate of Antiquities).
• ✅ Educational/scientific use in controlled environment.

Prohibited Use (illegal · criminally prosecutable):

• ❌ Surveillance/tracking of persons without consent (stalking — Art. 333 Greek Criminal Code).
• ❌ Commercial surveillance without GDPR notice + opt-in.
• ❌ Unauthorized access to third-party networks (Greek Law 4411/2016).
• ❌ Harassment or threatening third parties.

Noetic Lab and X6 Geo Plus IKE disclaim all liability for unlawful use by the User and reserve the right to cooperate with competent authorities in case of complaint (Article 13).

8.6 v9 BULLETPROOF Security Layer

The application implements professional-grade security measures:

• Encrypted Local Storage: AES-256-GCM EncryptedSharedPreferences with Android Keystore master key (hardware-backed on supported devices).
• TFLite Model Encryption: ML models (.tflite.enc) encrypted · 12-byte nonce + GCM ciphertext.
• Disabled Backup: android:allowBackup="false" · adb backup does not extract sensitive data.
• Network Hardening: HTTPS-only (cleartextTraffic=false) · Cloud Run proxy (no API keys on client).
• App Signing Verification: Runtime SHA-256 cert check — detects tampered APKs (the application is distributed as a signed APK outside the Google Play Store, so the cert check is the primary integrity mechanism).
• Code Obfuscation: R8/ProGuard with hardened rules · Log.v/d/i removal in release builds.
• Stealth Bluetooth: No BLUETOOTH_ADVERTISE permission — device is not discoverable.

8.4 User Control

You are in full control. You can manage and delete your records and analyses at any time.

Article 9 — Local Data Storage (Local-First)

9.1 Local Processing and Storage

The application operates with a "Local-First" philosophy. All data entered or generated by the User, including:

• Geolocation (GPS) data and coordinates,
• Scan files and visual material,
• Reports and analyses generated by AI Agents,

are not stored, uploaded, or retained on the company's central servers. Processing takes place exclusively locally on the User's terminal device (Android Tablet or Smartphone).

9.2 Control and Deletion

• Access and Recall: The User can search and recall any file or report through the application at any time.
• Permanent Deletion: The User retains the right to permanent deletion. Upon deletion, data is permanently lost, as Noetic Lab does not maintain backups.

9.4 Cloud Services & Sub-Processors

In compliance with GDPR Art. 28(3)(d), we declare the processing sub-processors:

Data Retention Policies:

• Cloud Run logs: 30 days (rolling)
• Firebase Auth metadata: until account deletion (Article 2.6)
• Firestore tokens registry: until account deletion
• Stripe payment records: 7 years (tax requirement)
• Cloud AI prompts: not retained — only logs without prompt content

Right to Object (Directive #21 · 2026-05-27 update): From 2026-05-27, the following fields operate with a local AI fallback when offline: AR 3D X-RAY, GEO X6 AI Scanner, AR Scanner SAR, AETHER (confidence ≤75%, badge: OFFLINE). Cloud verification applies automatically upon reconnection. For all other modes, cloud processing is still required. A User who opposes cloud AI processing has the following options: (a) use only the offline-capable fields, (b) request full account deletion under §2.6, (c) contact the AI Compliance Officer at ai-compliance@noetic-lab.com.

9.5 International Data Transfers

All cloud services use EU regions (primarily europe-west3). For any data transfer outside the EU, the following apply:

• EU-US Data Privacy Framework (Google LLC)
• Standard Contractual Clauses (SCCs) as issued by the European Commission (Decision 2021/914)
• Additional technical measures: encryption in transit (TLS 1.3) and at rest (AES-256)

9.3 Device Security

The security of local data (device theft, unauthorized access, etc.) is the sole responsibility of the User. Noetic Lab and X6 Geo Plus IKE bear no responsibility for data loss due to device malfunction or User actions.

⚠️ Free re-scan entitlements — stored locally: Certain entitlements arising from token charges — in particular the free re-scan of an already-paid area (GEO-SAT / void detector / DRONE) — are recorded exclusively on the User's device, in line with the data-minimisation principle of this policy. Accordingly, in the event of app uninstallation, clearing of app data, factory reset, device failure, loss or replacement, such entitlements are permanently lost and a new scan of the same area will be charged again. Noetic Lab and X6 Geo Plus IKE bear no responsibility for this loss and have no technical means of restoring these records, as they are not held on central servers and Android automatic backup is disabled by design. The User expressly accepts this term as the inherent trade-off of local — and therefore private — storage of their data.

Article 10 — Cookie Policy

We use cookies to ensure functionality and improve experience:

• Necessary: Basic functionality and security.
• Preferences: Storing settings (e.g., language).
• Statistics: Traffic analysis (e.g., Google Analytics).

Manage preferences via the cookie banner on the website.

Article 11 — AI Disclosure (EU AI Act · Regulation 2024/1689)

11.1 AI System Categorization

Under EU Regulation 2024/1689 (AI Act), the X6 Subsurface 4D / ScanAnalyzer application falls under:

• Limited Risk AI (Art. 50): Geophysical anomaly classification — transparency obligations apply.
• General Purpose AI (Art. 51-55): X6 MATRIX AI as foundational LLM via Cloud Run proxy. Noetic Lab = Deployer, Google = Provider.

Does not qualify as High-Risk (Annex III) — not used for critical infrastructure operation, biometric identification in public spaces, employment decisions, or law enforcement profiling.

11.2 AI Systems Used (Directive #21 · 2026-05-27)

Hybrid Cloud + On-Device Architecture: The application combines cloud-based and on-device AI. The cloud ensemble (geoscan-proxy, Cloud Run · europe-west3) is the primary system for all fields. As a scoped exception (Directive #21), the fields AR 3D X-RAY, GEO X6 AI Scanner, AR Scanner SAR, and AETHER include an on-device fallback AI that operates without internet connectivity.

Verdict lifecycle: Offline preliminary verdict (OFFLINE badge, ≤75% confidence) → network restored → cloud re-evaluation → final verdict (CLOUD VERIFIED or REVISED badge, full confidence 0–100). The cloud verdict always supersedes the offline result.

11.3 User Rights under AI Act

• Right to Human Review (Art. 14): Every AI verdict can be challenged. The app does not make autonomous decisions with legal consequences — it is purely a support tool. Recommendation: validation by qualified professional before any excavation or operational use.
• Right to Explanation: Every cloud verdict comes with reasoning (multilingual narrative from NarrativePresenter agent · evidence factors · confidence score 0-100 · server-side traceId for audit). The User may request a detailed AI flow report at ai-compliance@noetic-lab.com.
• Right to Be Informed: The app clearly states in every verdict that it was produced by a cloud AI ensemble (label "AI" on sensor LEDs · prefix "X6 AI" in chat responses · "☁ Cloud Verdict" in the explainability popup).
• Offline Capability Disclosure (Directive #21 · 2026-05-27): The fields AR 3D X-RAY and GEO X6 AI Scanner (also AR Scanner SAR and AETHER) produce a preliminary classification verdict when offline using the on-device AI model (confidence ≤75%, badge: OFFLINE). Upon reconnection, the cloud ensemble re-evaluates and may revise the result (CLOUD VERIFIED or REVISED). All other fields (CSV/TXT Analysis, X-Ray RF Tomography, Chat) show "—" or "DETECTING" when offline and require network connectivity. The User may use the offline-capable fields without cloud processing; for all other fields, cloud processing cannot be opted out of while using the service.
• Right to Object (GDPR Art. 21): Although classification is cloud-only, the User retains the right to object to processing of personal data (e.g. GPS location). In practice, this means inability to use the app, since scanning without GPS context is not functionally possible.

11.4 Algorithmic Transparency & Auditability

• Public documentation of AI engines on noetic-lab.com.
• Server-side anonymized logs · 30-day retention.
• Human Oversight required for all archaeological/defense applications.
• Bias mitigation via LearningFeedbackAgent.
• Annual risk assessment with leading scientific research centers and technology institutes.

11.5 Prohibited AI Practices (Art. 5 AI Act)

The application does NOT use:

• ❌ Subliminal manipulation · ❌ Social scoring
• ❌ Emotion recognition in workplace/education · ❌ Biometric categorization on sensitive traits
• ❌ Real-time remote biometric ID in public spaces · ❌ Predictive policing

11.6 AI Compliance Officer

For AI Act compliance inquiries: ai-compliance@noetic-lab.com.

Article 12 — Informational Messages

The User consents to X6 Geo Plus IKE sending informational messages related to ScanAnalyzer AI through the application or to their email. The User retains the right to withdraw consent at any time.

Article 13 — Termination — Suspension — Deactivation

X6 Geo Plus IKE reserves the right to permanently discontinue ScanAnalyzer AI without notice and without compensation to the User (even if Credits have not been consumed) in the following cases:

1. Single or repeated use of ScanAnalyzer AI for direct or indirect commission of illegal acts (e.g., fraud, copyright infringement).
2. Violation of any term of these Terms of Service.

Article 14 — Liability and Disclaimers

14.1 General Liability Disclaimer

X6 Geo Plus IKE bears no liability of any kind (civil, criminal, administrative, etc.) toward the User, authorized Users, representatives, employees, assistants, agents, or third parties, for any damage (direct, indirect, incidental, consequential, lost profits) arising from the use or inability to use ScanAnalyzer AI.

14.2 Disclaimer of Warranties

THE SERVICES ARE PROVIDED "AS IS". EXCEPT WHERE PROHIBITED BY LAW, WE AND OUR PARTNERS PROVIDE NO WARRANTIES (EXPRESS, IMPLIED, STATUTORY OR OTHERWISE) REGARDING THE SERVICES. WE DISCLAIM ANY WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, SATISFACTORY QUALITY, NON-INFRINGEMENT, AND QUIET ENJOYMENT. WE DO NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED, ACCURATE, OR ERROR-FREE. YOU ACKNOWLEDGE THAT ANY USE OF RESULTS IS AT YOUR SOLE RISK.

14.3 Limitation of Liability

NEITHER WE NOR OUR PARTNERS SHALL BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR EXEMPLARY DAMAGES, INCLUDING LOSS OF PROFITS, GOODWILL, USE, OR DATA. OUR TOTAL LIABILITY SHALL NOT EXCEED THE GREATER OF: (A) THE AMOUNT YOU PAID FOR THE SERVICE IN THE 12 MONTHS PRECEDING THE LIABILITY, OR (B) ONE HUNDRED EUROS (€100). SOME COUNTRIES DO NOT ALLOW SUCH LIMITATIONS — IN SUCH CASE, THE TERMS LIMIT LIABILITY TO THE MAXIMUM EXTENT PERMITTED IN YOUR JURISDICTION.

14.4 Aerial (Drone) Capture Feature

The app provides a flight-path planning and image-analysis tool; it does not operate, fly, or control any unmanned aircraft (drones). The User is the sole Pilot in Command and bears full responsibility: (a) for any accident, damage, injury, or crash, even if the flight path was planned using the app; (b) for compliance with airspace rules, No-Fly zones, third-party privacy, and the regulations of the Civil Aviation Authority (CAA)/EASA and any competent authority. The User must hold all required permits and certifications. X6 Geo Plus IKE disclaims all liability for drone use.

Article 15 — Changes to Terms or Services

We may update the Terms or Services due to:

• Changes in legislation or regulatory requirements.
• Protection or security reasons.
• Circumstances beyond our reasonable control.
• Ordinary course of development.
• Adaptation to new technologies.

We will notify you at least 30 days in advance of materially adverse changes, via email or in-product notification. Other changes apply from the time of publication. If you disagree, stop using the Services.

Article 16 — Dispute Resolution & Applicable Law

16.1 Applicable Law

These Terms are governed by the provisions of Greek Law and interpreted in accordance with the rules of good faith, business ethics, and the economic/social purpose of the right.

16.2 Jurisdiction

Competent courts for the resolution of any dispute are exclusively the Courts of Athens, Greece.

16.3 Out-of-Court Resolution

You may use the European Commission's Online Dispute Resolution (ODR) platform: ec.europa.eu/odr.

Article 17 — General Provisions

17.1 Assignment by Company

You may not assign or transfer rights or obligations under these Terms; any such attempt is void. X6 Geo Plus IKE may assign rights/obligations to any affiliated, subsidiary, or successor company.

17.2 Delay in Enforcement / Severability

Failure to enforce a provision does not constitute a waiver of the right to enforce later. The invalidity of a specific term does not affect the validity of remaining terms but ceases to apply automatically only to the extent not permitted.

17.3 Trade Controls

You must comply with all applicable trade laws, sanctions, and export control laws. The Services may not be used: (a) in countries under embargo by Greece or the EU, (b) by natural/legal persons with whom transactions are prohibited, (c) for end-use prohibited by trade legislation.

17.4 Entire Agreement

These Terms constitute the entire agreement between you and X6 Geo Plus IKE regarding the Services and supersede any prior or contemporaneous agreements.

Article 18 — Legal Notice & Contact (Impressum)

• Name: Noetic Lab (Development Department of X6 Geo Plus IKE)
• Headquarters: Mesogeion Ave & Thermopylon 2, P.C. 15341, Agia Paraskevi, Athens, Greece
• Email: grdetectors@yahoo.com
• Phone: +30 211 0010316
• Dispute Resolution (ODR): ec.europa.eu/odr