Last updated: 7 October 2026
1. Controller
Controller within the meaning of Article 4(7) GDPR:
Dimitri Valjuzenic
Brauhausstr. 17 B
26506 Norden
Germany
Email: contact@glassydev.de · Privacy: privacy@glassydev.de · Support: support@glassydev.de
No data protection officer has been appointed because the statutory requirements do not apply. VAT identification number: DE464279698.
2. Scope
This privacy policy applies to BelegDepot for iOS (bundle ID de.belegdepot.app, including Share Extension de.belegdepot.app.ShareExtension) and macOS (bundle ID de.belegdepot.mac), and its URL import features.
BelegDepot manages tax and business-related content, especially receipts, mileage log entries and optional rental data. Receipts are stored locally by default. Text recognition uses Apple Vision on the device. The App is not designed for tracking, advertising or audience measurement.
Published legal documents:
- Privacy policy: /apps/belegdepot/privacy.html
- Legal notice: /apps/belegdepot/imprint.html
- Project website: /apps/belegdepot/index.html
These URLs are publicly accessible and linked in the App under Settings → Legal.
3. Brief processing overview
| Area | Data | Storage location | Third parties |
|---|---|---|---|
| Receipt management and text recognition | Receipt images, recognized text and receipt details you add | Locally on your device; OCR on the device | None for OCR |
| Mileage log | Routes, distances, locations | Mainly locally on your device | Apple MapKit |
| Share Extension | Shared attachments/content | Locally in the App | None |
| URL import | URLs, files | Locally in the App | None |
| NAS synchronization (optional) | Receipts/data collections | Local + storage you select | Your NAS/server or a folder selected in Files/Finder (SMB, WebDAV, HTTP/HTTPS, FTP/FTPS) |
| iCloud (optional) | Receipts, associated files, trips and selected settings | Apple iCloud | Apple CloudKit and iCloud Drive |
| Exchange rates (optional) | Currency pair and receipt date, not receipt content or amount | Frankfurter API; rate also cached locally | api.frankfurter.dev |
Tracking: No analytics, advertising or tracking SDKs. NSPrivacyTracking is set to false. There is no App Tracking Transparency because no tracking occurs.
4. Processing in the main App
4.1 Receipt management
BelegDepot processes receipts you enter or import locally on your device by default. Optical character recognition (OCR) uses Apple Vision directly on the device; images and recognized text are not sent to the app provider or an OCR server for recognition. BelegDepot does not operate its own central cloud storage.
Legal basis: Article 6(1)(b) and (f) GDPR.
4.2 Mileage log
Trip and route data is primarily stored locally.
Legal basis: Article 6(1)(b) and (f) GDPR.
4.3 Optional iCloud synchronization
If you enable optional iCloud synchronization, receipts and associated files, trips and selected settings are synchronized through Apple iCloud (CloudKit, iCloud Drive and key-value store) between your devices using the same Apple ID. Synchronization requires an available iCloud account and the relevant App feature. The app provider does not operate its own cloud storage and cannot access your private iCloud content. Apple processes data as part of its own services. Apple privacy policy: https://www.apple.com/legal/privacy/de-ee/
Legal basis: Article 6(1)(b) GDPR (synchronization selected by you).
4.4 Optional automatic exchange rates
If you use automatic exchange rate retrieval, the App requests the rate for a currency pair and, if available, the receipt date from Frankfurter. Currency codes and the date are transmitted. Receipt images, text, amounts, names and other receipt details are not sent to this service. Retrieved rates are cached locally. Service information: frankfurter.dev.
Legal basis: Article 6(1)(b) GDPR (feature requested by you).
5. Share Extension
iOS passes attachments temporarily to the extension. The extension imports content exclusively locally into the app container or app group. No upload to the app provider or third parties.
Legal basis: Article 6(1)(b) GDPR.
6. URL import
BelegDepot reads received URLs/files temporarily and stores imported receipts locally. No transmission to the app provider.
Legal basis: Article 6(1)(b) GDPR.
7. Location, maps and Apple MapKit
BelegDepot uses Apple Maps through MapKit for maps, location selection and route calculation in the mileage log.
No tracking or background monitoring. Location requests only during active use of map/route features.
Apple privacy: https://www.apple.com/legal/privacy/
Legal basis: Article 6(1)(b) GDPR; consent under Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG for optional location access.
8. Optional NAS and folder synchronization
The NAS feature transfers data directly between your device and the destination you configure. SMB, WebDAV, HTTP/HTTPS and FTP/FTPS are supported. You may also use a folder selected through Files (iOS) or Finder (macOS). No BelegDepot server acts as an intermediary. Server credentials are stored locally in Keychain; the app provider receives neither those credentials nor access to transferred content. With unencrypted connections (HTTP or FTP), others on the network may read data; use HTTPS, WebDAV over TLS or FTPS where possible. The privacy terms of the selected server or folder provider/operator also apply.
Legal basis: Article 6(1)(b) GDPR.
9. Categories of personal data
Content, financial/business, location, import and connection data, depending on use.
10. Recipients and service providers
Apple Inc. (MapKit, optional iCloud/CloudKit and iCloud Drive, and StoreKit for the optional “BelegDepot Pro” in-app purchase); Frankfurter (api.frankfurter.dev) when exchange rate retrieval is active; optionally your NAS/server provider or selected folder provider; and the app provider when you contact support. No advertising or analytics providers.
Apple (StoreKit 2 / App Store) processes the BelegDepot Pro purchase status. The app provider receives no credit card data and does not link the purchase to an identity in the App. Scanning and sorting remain available without a purchase.
11. Transfers to third countries
When using Apple services (MapKit, iCloud and StoreKit), Apple’s information on international transfers applies. Frankfurter’s privacy policy applies to that service. Further information: Apple privacy and Frankfurter.
12. Retention periods
- Receipts/mileage log entries: until you delete them
- Synchronized copies on NAS, server or selected folder: until you remove them from that storage location
- iCloud copies: according to your iCloud settings and Apple’s deletion/retention rules
- Exchange rate cache: locally in the App; older entries may be replaced by newer rates
- After uninstallation: iOS removes local app data (see Section 13 for backups)
- Support emails: at most 24 months, unless statutory obligations require otherwise
13. iOS backups, app group and data sharing
App data may be included in iCloud/iTunes backups (Apple/user responsibility). The main App and Share Extension share data through an app group on the device. No provider backup.
14. Your rights as a data subject
Access, rectification, erasure, restriction, data portability, objection (Article 21 GDPR for processing under point (f)), and withdrawal of consent.
Contact: privacy@glassydev.de
Right to complain: State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hannover, poststelle@lfd.niedersachsen.de, https://lfd.niedersachsen.de
15. No obligation to provide data / children
Use is voluntary. The App is not intended for children under 16.
16. App Store Connect and Privacy Nutrition Labels
Tracking: No. No linking to your identity by the provider. Location only during active map use. Purchases (StoreKit, BelegDepot Pro) are not linked to identity or used for tracking. No advertising/analytics SDKs.
Privacy policy URL: /apps/belegdepot/privacy.html
17. Changes to this privacy policy
Material changes are indicated in the App under Settings → Legal and/or on the website. Update date above.
Last updated: 7 October 2026