1. Scope
The provider of Proofara Receive is schukai, Eichenstraße 26, 82290 Landsberied, Germany, email: hey@schukai.com. Full contracting-party details are in the imprint. The Android package ID is com.schukai.proofara.
Proofara is intended for business goods-receipt and evidence workflows. This information applies to employees, agents and other users acting for an organization. It creates no private purchase or subscription contract. The Privacy Policy for Proofara Receive applies separately.
2. Business contract and authorized users
A single device can create a local organizational workspace without a Proofara account. This does not make the individual user a private contracting party. The organization decides who sets up Proofara for its business, which roles apply and whether to purchase a Sync or storage service.
The scope of a managed service follows the contract between schukai and the organization. This information governs safe use by authorized persons and replaces neither an order nor a product specification.
3. Local setup, devices and roles
Users set up a local organization only with business authorization. Organization, location, device and role information must follow organizational rules. A shared device PIN or unprotected device can impair accountability.
Device activations, one-time codes, recovery files and export passwords must remain confidential. Suspect devices or lost access must be blocked through the intended revocation and organizational procedures.
4. Capture and evidence
Check photographs, quantities, damage, signatures, partner details and reports before completing a case. Do not falsify evidence, confirm it under an incorrect role or reuse evidence from another case. Use the intended correction and addendum functions so that history is preserved.
Proofara assists documentation but does not decide whether evidence is legally sufficient in a particular case or which commercial, tax or regulatory retention period applies. The organization makes those decisions.
5. Encryption, keys and recovery
Business contents are stored encrypted locally. With Proofara Team Sync enabled, they are end-to-end encrypted; schukai holds no organization or case keys for that purpose. With the optional Nucleus connection, however, the confirmed Nucleus recipient receives readable records for authorized users. Team encryption does not promise Nucleus storage unreadable by its operator. Deliberately released exports and connector jobs are likewise readable by their intended recipients; the connector can decrypt the addressed mail text and selected PDF. The organization creates the offered encrypted recovery packages, protects export passwords separately and tests restoration before retiring a device.
If the last suitable keys and backups are lost, schukai cannot recover the encrypted evidence. Exports stored outside the app must be protected and erased under organizational security rules.
6. Optional organization Sync
Sync is a separate organizational entitlement, bound to the organization and device through its intended activation procedure. Without an active entitlement, local capture, reading, recovery and export of existing data remain available.
Connection to a Nucleus tenant, local use and Team synchronization are separate operating modes. Disconnecting Nucleus does not erase records already stored there; outstanding transfers retain their original recipient.
Connectivity can be temporarily unavailable. Check the transfer and confirmation status displayed in the app before resetting a device or treating a case held only locally as backed up elsewhere.
7. Privacy, retention and erasure
The organization is normally the controller for employee, supplier and business data captured in Proofara. Users follow its instructions, permissions, legal holds and retention rules. App language, device location or organization country does not automatically select a legal or retention rule.
Local erasure, an exported archive and erasure of synchronized data are separate operations. Before erasing, check whether a confirmed archive, legal hold or business retention duty prevents that action.
8. Support, suspension and end of access
The organization's responsible department is the first contact for roles, business cases and organizational decisions. Send support data only through the intended deliberately triggered function and without additional secrets or unredacted real-world data.
Authorization ends when the organization revokes it, the employment or agency relationship ends or the business contract provides for it. Return or securely remove managed devices, recovery materials and exports under organizational instructions.
For connector delivery, check recipient, contents, selected PDF and server before confirmation. A technical acceptance status is not proof of delivery. The organization determines operation and retention at mail and connector providers.
9. Date and changes
Updated: 1 November 2026.
This version applies to organizational access for which it has been validly communicated. A new website version does not automatically replace existing business contracts. Changes are coordinated with the organization and communicated to affected users through a suitable channel.