Privacy policy

BonBox attaches great importance to the protection of your personal data. In this privacy policy we explain which data we collect, why we do so and how we safeguard your privacy.

1. Who are we?

BonBox is an app that lets you scan receipts with AI and keep a digital inventory of your belongings. For privacy questions, you can contact us at info@bonbox.app.

2. What data do we collect?

We collect the following categories of personal data:

Account data

• Email address
• Name (if provided)
• Profile photo (optional)

Inventory data

• Photos of receipts and invoices
• AI-extracted data: product names, prices, store names, purchase dates and categories
• Manually entered data about belongings (value, serial number, brand, condition, warranty information)
• Location and room layouts

Usage data

• Device type and operating system
• App version
• Anonymous usage statistics (if you give consent)

3. Why do we process your data?

We use your data for the following purposes:

• AI scanning: To analyse receipts and automatically extract product information.
• Storage and synchronisation: To securely store your inventory and make it available across all your devices.
• Sharing: To share inventories with people you invite.
• Service improvement: To improve the app based on anonymised usage statistics.
• Communication: To inform you of important changes to the app or this policy.

4. Legal bases

We process your personal data on the following legal bases under the GDPR:

• Performance of a contract: Necessary to provide the app functionality you use.
• Consent: For processing receipt data via AI and sending optional communications.
• Legitimate interest: For anonymised analyses to improve the app.

5. Sharing with third parties

BonBox never sells your data to third parties. We only share data with:

• AI processing: Receipt data is processed by BonBox AI to extract product information. This data is not stored by the AI provider after processing.
• Hosting and storage: Your data is stored with secure cloud providers within the EU.
• People you have invited: When you share a location, invited people get access to the associated inventory.

6. Retention periods

We retain your data for as long as you have an active account. When you delete your account, all your personal data and inventory data will be permanently deleted from our servers within 30 days.

7. Security

We take appropriate technical and organisational measures to protect your data, including:

• Encrypted connections (TLS/SSL)
• Encrypted storage of sensitive data
• Biometric lock in the app (Face ID, Touch ID, Optic ID)
• Access control and monitoring

8. Your rights

Under the GDPR you have the following rights regarding your personal data:

• Right of access: You can request which data we process about you.
• Right to rectification: You can have incorrect data corrected.
• Right to erasure: You can request deletion of all your data.
• Right to data portability: You can request a copy of your data in a common format.
• Right to restriction: You can request that processing of your data be restricted.
• Right to object: You can object to the processing of your data.

To exercise any of these rights, contact info@bonbox.app. We will respond to your request within 30 days.

9. Cookies

For information about the use of cookies on our website, please refer to our Cookie policy.

10. Changes

BonBox may update this privacy policy from time to time. For significant changes we will notify you via the app or by email. We recommend reviewing this policy regularly.

11. Contact

Do you have questions or comments about this privacy policy? Please contact us at info@bonbox.app.