Privacy Policy
Last updated: February 1, 2026
1. Introduction
Bonnenmonster ("we", "us", "our") is an app for digitizing and organizing receipts, developed by Business Data Solutions in Ravenstein, the Netherlands. This privacy policy describes how we collect, use, and protect your personal data.
We respect your privacy and act in accordance with the General Data Protection Regulation (GDPR).
2. Data Controller
Business Data Solutions
Ravenstein, the Netherlands
Email: bonnenmonster@businessdatasolutions.nl
3. What Data We Collect
Data you provide to us:
- Account data: Email address (for registration and login)
- Receipt images: Photos of receipts you scan
- Receipt data: Information extracted from receipts (merchant, amount, date, VAT, line items)
Data collected automatically:
- Usage analytics: Anonymous data about app usage via Firebase Analytics
- Crash reports: Technical information in case of app errors (anonymous)
What we do NOT collect:
- Passwords (securely stored by Firebase Authentication)
- Location data
- Device identifiers for tracking
- Contacts or other personal information
4. How We Use Your Data
| Purpose | Legal Basis (GDPR) |
|---|---|
| Scanning and processing receipts via AI | Performance of contract |
| Storing and displaying your receipts | Performance of contract |
| App improvements and analytics | Legitimate interest / Consent |
| Customer support | Performance of contract |
5. Data Processors and Third Parties
We share your data with the following service providers:
| Service | Purpose | Location |
|---|---|---|
| Google Firebase | Authentication, database, storage | EU (europe-west1) |
| Google Vertex AI (Gemini) | AI analysis of receipts | EU |
| Firebase Analytics | Anonymized app analytics | EU |
All these parties comply with the GDPR. Processing takes place under the Google Cloud Data Processing Addendum.
6. Data Retention
| Data | Retention Period |
|---|---|
| Receipts and images | Until you delete them or close your account |
| Account data | Until you delete your account |
| Analytics (anonymized) | 14 months |
7. Your Rights (GDPR)
You have the following rights regarding your personal data:
- Right of access: You can request which data we hold about you
- Right to rectification: You can have incorrect data corrected
- Right to erasure: You can have your data and account deleted
- Right to data portability: You can export your data (PDF/CSV)
- Right to object: You can object to analytics (opt-out)
- Right to withdraw consent: You can withdraw given consent at any time
For requests, please contact us at bonnenmonster@businessdatasolutions.nl. We will respond within 30 days.
8. Account Deletion
You can delete your account and all associated data via the app (Settings → Delete Account) or by sending an email to bonnenmonster@businessdatasolutions.nl.
See our Delete Account page for more information.
9. Security
We take the security of your data seriously:
- All data is transmitted encrypted (HTTPS/TLS)
- Data is stored encrypted in Firebase
- Access to systems is restricted and secured
- We perform regular security checks
Access by Authorized Personnel
A limited number of authorized staff have access to the management console where your data is stored. This access is necessary for:
- Technical support and troubleshooting
- System maintenance and security
- Compliance with legal obligations
Access is limited to what is strictly necessary and is subject to confidentiality obligations. We use audit logging to monitor access to data.
10. Cookies and Tracking
The Bonnenmonster app does not use cookies. Firebase Analytics collects anonymized usage data to improve the app. You can disable analytics in the app settings.
11. Changes to This Policy
We may update this privacy policy from time to time. In case of significant changes, we will inform you via the app or by email. The "Last updated" date at the top of this page indicates when the policy was last modified.
12. Contact and Complaints
For questions about this privacy policy or your data:
Email: bonnenmonster@businessdatasolutions.nl
You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).