Marc Neumann, Schwabenstraße 47, 71101 Schönaich, Germany
Email: marc.neumann.neu@gmail.com
BonSafe is an offline app for receipts and warranties. Retailer, purchase date, amount, item name, categories, notes, warranty and return deadlines, and receipt photos are stored exclusively locally. No user account is required. We operate no own server and use no analytics, tracking or advertising SDKs.
Photos are processed only when you actively select the feature. They are stored in the app's private storage area on your device. The app uses the Android system photo picker or system camera dialog and has no access to the rest of your media library.
Reminders are scheduled and triggered entirely locally on your device. No push or notification server is used for this. You can revoke the permission at any time in Android settings.
If you actively use the backup feature, receipts including photos are uploaded as a backup file to the hidden app-specific appDataFolder of your Google Drive account. The transfer is encrypted (TLS). We have no access to the backup. Google Ireland Limited processes account data as an independent controller under Google's privacy policy. The app receives your email address to display the connected account. You can stop the backup, sign out and delete the backup. Once set up, the app refreshes the backup automatically on launch as soon as the last one is more than seven days old. It always overwrites the same file; older versions are not kept.
BonSafe Pro is a one-time in-app purchase. Google handles payment and account data as an independent controller. We receive no payment or identity data, only the purchase status; the unlock is stored locally.
Backup files and PDF exports are created locally. They are shared only when you actively open the system share dialog; you choose the recipient.
Delete individual receipts in the app. Remove all local data by uninstalling or using Android's Clear storage option. Delete a Drive backup in the app or in your Google account under Google Drive → Settings → Manage apps → BonSafe. Deleted receipts first move to the trash and stay restorable there for 30 days; after that they are permanently removed from the device together with their photos. You can also delete them permanently right away from the trash.
Settings may show a "More apps" area. The list used for it is fetched together with the legal texts from the same public repository, at most once every 24 hours; the same note about your IP address applies as for fetching the legal texts. No information about you or your receipts is transmitted, and the list is not personalised. Opening an entry launches the Google Play Store, for which Google is independently responsible. The legal basis is our legitimate interest in informing you about our own apps (Art. 6(1)(f) GDPR).
To keep the legal notice and privacy policy current, the app fetches the public legal texts from GitHub Pages or raw.githubusercontent.com at most once every 24 hours. This technically transmits your IP address to GitHub. No app content or usage profile is transmitted to us. Without an internet connection, the versions bundled with the app are shown. The fetch is based on our legitimate interest in keeping mandatory information current (Art. 6(1)(f) GDPR).
Under the GDPR you have, in particular, the rights of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to lodge a complaint with a data protection supervisory authority. App data is generally stored locally under your control, so you can inspect, change or delete it there. For data in a Google account used voluntarily, Google is the relevant contact.
This privacy policy is updated when the app, the services used or the data processing changes. The current version is available in the app and at the linked address.