Privacy

Privacy Policy Bon Dossier Mac

This page explains what data the app processes and how to contact us with privacy questions.

Bon Dossier Privacy Policy

Last updated: 9 August 2026 
Version: 1.0

Summary

Bon Dossier is designed to store receipts privately and recognise them on the device. The app does not require a Bon Dossier account, contains no advertising and uses no tracking, third-party analytics, or external OCR or AI services. Receipt recognition takes place locally on the Apple device.

Receipts and original scans are stored locally. If iCloud sync is available and enabled, Bon Dossier syncs this data through the user’s private iCloud database. For a normal first installation, this setting is enabled by default and can be turned off in Bon Dossier’s settings. The change takes effect after the app is restarted.

This Privacy Policy explains what data Bon Dossier processes, why it is processed, where it is stored, and what choices and rights the user has.

Who is responsible?

To the extent that Rose Development determines the purposes and means of processing, the data controller is:

Rose Development 
Dirk Altalaan 8 
8881 EV Terschelling-West 
The Netherlands 
Chamber of Commerce number: 01060354 
Email: info@rosedev.nl 
Telephone: +31 (0)6 53182418 
Website: https://rosedev.nl

Apple processes certain data in connection with the App Store, Apple Accounts, iCloud, CloudKit, device security and other Apple services under Apple’s own terms and privacy documentation. Rose Development does not manage the user’s Apple Account or the iCloud service.

Scope

This Policy applies to Bon Dossier on iPhone, iPad and Mac, including the share extension, Spotlight integration, local reminders, backup, restore and export features.

It does not apply to files that the user stores or shares outside Bon Dossier, to third-party websites or services, or to processing that Apple carries out independently for the App Store, payments, Apple Accounts or iCloud.

What data does Bon Dossier process?

Receipt content and archive data

Depending on what the user scans, imports or enters, Bon Dossier may process:

  • original scans, images, PDFs, text files, shared attachments and relevant text from imported email files;
  • OCR text and recognised information such as merchant name, merchant address, purchase date, amounts, currency, VAT, payment method, receipt number, line items, quantities and prices;
  • information added or corrected by the user, such as notes, categories, folders, flags and custom categories;
  • return deadlines, warranty dates and the information required to schedule local reminders;
  • technical archive information such as internal identifiers, file names, page numbers, checksums, creation and modification times, sync status, and recognition quality or confidence values.

A receipt may incidentally contain personal data relating to the user or another person, such as a name, customer number, partial payment-card number, location, purchasing behaviour, or information from which sensitive circumstances could be inferred. Rose Development does not ask the user to include such information. The user decides which documents to add and is responsible for having a lawful basis when storing documents relating to other people or business records.

Device access and user input

Bon Dossier processes information from the following sources only when the user chooses to use the relevant feature:

  • the camera, to scan a receipt;
  • the photo library, to select and import an existing scan;
  • Files or the document picker, to open, save, import or restore files;
  • the iOS, iPadOS or macOS sharing facility, when the user intentionally shares content with Bon Dossier;
  • the keyboard and app interface, for corrections, notes and settings entered by the user.

Bon Dossier does not request access to contacts, location, the microphone, health data or advertising identifiers.

Local settings and diagnostics

The app stores preferences and functional information locally, including the iCloud sync choice, display settings, reminder preferences, export history and limited iCloud sync diagnostics. These diagnostics may contain error domains, error codes, timestamps and technical messages, but they are not sent to Rose Development automatically.

If a user chooses to copy a diagnostic report and send it to Rose Development, Rose Development processes the information supplied only to handle the support request.

How is the data used?

Bon Dossier processes data only to:

  • scan, import, recognise, display, correct, organise, search and store receipts;
  • associate original scans with recognised information;
  • display spending summaries, return deadlines and warranty dates;
  • provide local Spotlight search results and local reminders;
  • create exports and backups selected by the user, or restore a backup;
  • sync through the user’s private iCloud database between the user’s devices when iCloud sync is enabled;
  • investigate errors and provide support when the user contacts Rose Development and supplies information;
  • secure the app, prevent misuse and comply with legal obligations.

Bon Dossier does not use receipt content for advertising, marketing, user profiling, data sales or the training of external or central AI models. Corrections may be stored locally on the device to support recognition for that user. They are not sent to Rose Development automatically.

Legal bases under the GDPR

To the extent that the GDPR applies to processing by Rose Development, the processing relies on one or more of the following legal bases:

  • performance of a contract: for features required to provide Bon Dossier, including storage, recognition, search, export, backup, restore and sync selected by the user;
  • consent or an intentional user choice: where required by law, including system permission for the camera, photos and notifications, and the user’s intentional sharing or sending of information;
  • legitimate interests: for limited support, security, error investigation and the protection of legal rights, after balancing those interests against the user’s privacy interests;
  • compliance with a legal obligation: where information must be processed or retained to comply with applicable law or a binding request.

Consent can be withdrawn for the future through the device settings or Bon Dossier’s settings. Withdrawal does not affect processing that was lawful before consent was withdrawn.

Local recognition and automated processing

OCR, image recognition, categorisation and receipt parsing run on the device using local Apple technology and models supplied with the app. Scans, OCR text and recognised fields are not sent to an external OCR or AI provider.

Recognition is probabilistic and can make mistakes. The user can review and edit recognised information. Bon Dossier does not make decisions based solely on automated processing that produce legal effects or similarly significantly affect the user.

iCloud and Apple

When iCloud sync is enabled and the device is signed in to iCloud with an eligible Apple Account, Bon Dossier uses CloudKit to mirror receipt data, archive structure and original scans to the user’s private iCloud database. This enables sync between the user’s own devices and uses the user’s iCloud storage allowance.

Under CloudKit’s technical design, the private database is accessible only to the relevant user by default and its contents are not visible in the developer portal. Rose Development therefore does not routinely receive access to private receipt content. Apple operates the iCloud infrastructure and applies its own security, retention and international-transfer rules. More information is available in Apple’s privacy and iCloud security documentation:

The user can disable iCloud sync in Bon Dossier. The change becomes active the next time the app starts. Disabling sync does not automatically delete data that already exists in iCloud or on other devices. The user can also manage iCloud as a service through the Apple device’s iCloud settings.

Sharing with third parties

Rose Development does not sell personal data and does not share receipt content with advertisers, data brokers, analytics services or external AI services.

Data can leave the app only when:

  • the user enables iCloud sync, for which Apple provides the iCloud infrastructure;
  • the user chooses to save or share an export, backup, scan or other file with an app, person or service selected by the user;
  • the user contacts Rose Development and supplies information;
  • disclosure is required by law or is necessary for the establishment, exercise or defence of legal claims.

If Rose Development appoints a service provider to process personal data on its behalf for support or business operations, that provider will be contractually required to maintain appropriate confidentiality and data protection. Rose Development remains responsible for its own choice of processors.

No tracking, advertising or third-party analytics

Bon Dossier:

  • does not track the user across apps or websites owned by other companies;
  • does not use an advertising identifier and does not display advertising;
  • contains no third-party analytics or crash-reporting SDK;
  • does not build user profiles for advertising or marketing;
  • does not sell or rent personal data.

Spotlight and notifications

Bon Dossier can index receipt information and OCR lines in Apple Spotlight on the device, allowing the user to find their own receipts through system search. This index remains local and is updated or cleared when the related archive changes or is deleted.

With the user’s permission, Bon Dossier can schedule local notifications for return and warranty dates. The app uses push registration only for technical iCloud or CloudKit change notifications, not for marketing. Receipt content is not used in marketing notifications.

Notification permission can be withdrawn at any time through the system settings. Reminders can also be disabled in Bon Dossier.

Retention and deletion

Bon Dossier applies the following retention principles:

  • active receipts, scans and archive information are retained until the user deletes them;
  • a receipt moved to Trash can be restored for 14 days and is then permanently deleted automatically; the user can empty Trash sooner;
  • local preferences, index data, thumbnails, correction memory, export history and sync diagnostics remain for as long as they are needed for the app feature, until the user erases the data or removes the app;
  • scheduled local notifications remain until they are delivered, rescheduled or removed by the app, or disabled by the user;
  • exports and backups that the user stores outside the app are governed by the selected storage location and are not deleted by erasing or removing the app;
  • support correspondence received by Rose Development is generally retained for no more than 24 months after the request is resolved, unless a longer period is required for a dispute, security investigation or legal obligation.

The user can delete the Bon Dossier archive, scans and related local app data through Settings > Privacy > Delete All Data. When iCloud sync is active, CloudKit processes deletions in the private iCloud database and on other connected devices. This may take some time. Exports or backups saved separately by the user must be deleted separately.

Removing the app deletes its local app data from that device, but does not guarantee deletion of data previously synced through iCloud or exported outside the app. Those copies must be managed through the relevant iCloud, device or file settings.

Security

Bon Dossier uses measures including Apple’s app sandbox, system permissions, local storage inside the app container and a private CloudKit database. Rose Development limits data processing to what is required for the app’s features and does not send receipts to its own servers.

No storage or security method is completely secure. The user remains responsible for device security, the device passcode, Apple Account security, and the secure storage of exports and backups.

International transfers

Rose Development does not send receipt content to its own servers outside the European Economic Area. Apple or a storage or sharing service selected by the user may process data in other countries. The terms, locations and safeguards of the relevant service apply to that processing.

If Rose Development itself arranges for personal data to be processed outside the EEA, it will do so only on a valid legal basis and with appropriate safeguards, such as an adequacy decision or European Commission-approved Standard Contractual Clauses, where required.

Privacy rights

For personal data that Rose Development actually controls, the user may, to the extent provided by the GDPR, request:

  • information and access;
  • correction of inaccurate or incomplete data;
  • erasure;
  • restriction of processing;
  • data portability in a commonly used, machine-readable format;
  • objection to processing based on legitimate interests;
  • withdrawal of consent for future processing.

Because Rose Development does not operate a Bon Dossier account and cannot routinely inspect the private iCloud database, Rose Development will generally be unable to identify, export, correct or delete a local or private iCloud archive remotely. The functions in the app and the Apple or iCloud settings are the appropriate means for doing so. The app provides TSV and Excel export and a full backup feature.

A request can be sent to info@rosedev.nl. Rose Development may ask for reasonable information to verify the requester’s identity and will generally respond within one month. These rights are not absolute and statutory exceptions may apply.

Complaints

For a privacy question or complaint, please contact info@rosedev.nl first so that Rose Development can investigate the matter.

The user also has the right to lodge a complaint with the competent supervisory authority. In the Netherlands, this is the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens 
https://autoriteitpersoonsgegevens.nl

A user in another EU or EEA Member State may also contact the supervisory authority for their place of residence or work.

Children

Bon Dossier is not specifically directed at children, does not request age information and contains no social or advertising features. If a minor uses the app, a parent or legal guardian should supervise which documents are stored and shared.

Changes to this Policy

Rose Development may update this Privacy Policy when the app, applicable law or the services used change. For a material change, the date at the top will be updated and, where appropriate, an additional notice will be provided through the app, the App Store listing or the website. New processing that requires consent will not begin without the required consent.

Contact

Privacy questions, requests or complaints can be addressed to:

Rose Development 
Dirk Altalaan 8 
8881 EV Terschelling-West 
The Netherlands 
Email: info@rosedev.nl 
Telephone: +31 (0)6 53182418 
Website: https://rosedev.nl

Back to Bon Dossier Mac