Privacy policy

1. Controller

The controller responsible for data processing on this website is:

2. Applicable law

This privacy policy is based on the revised Swiss Federal Act on Data Protection (revised FADP, in force since September 2023). Where users from the European Economic Area are concerned, the General Data Protection Regulation (GDPR) applies in addition.

3. What data we collect

We only collect the data needed to operate our service:

• Account data: first name, last name, email address, postal address (for the tax statement)
• Bookkeeping data: transactions, categories, receipts and documents that you record
• Email inbox: if you send receipts to your personal inbox address: sender address, subject, time of receipt and the attachment
• Technical data: IP address, browser type, access times (server log)

4. Purpose of processing

• Providing and operating the bookkeeping platform
• Preparing the tax statement with your address details
• Sending emails for login links and contact requests
• Receiving receipts that you send to your personal inbox address
• Automatically reading your receipts and bank statements to suggest the date, amount and category (see section 6)
• Technical security and troubleshooting

5. Disclosure to third parties

We do not pass on your data to third parties for advertising purposes. We use the following service providers to run the service:

All of the providers listed process the data exclusively on our behalf and according to our instructions; data processing agreements are in place with them or are being concluded. Your application and your database are located in Frankfurt, but these are all US companies, so access from the USA cannot be ruled out.

For these transfers to the USA, we rely, depending on the provider, on the Swiss-U.S. Data Privacy Framework, which the Federal Council has recognised as providing adequate protection since September 2024, or on standard contractual clauses with a Swiss addendum. Standard contractual clauses apply to Anthropic; there, processing actually takes place in the USA (see section 6).

6. AI-assisted receipt reading

So that you don't have to type up your receipts, we have them read automatically. This is the most far-reaching part of our processing — which is why we describe it in detail here:

• What is transmitted: the complete receipt as an image or PDF — not just individual details from it. For bank statements, this is the entire statement with all entries. The names of your categories are also sent so that a category can be suggested.
• To whom: Anthropic PBC, USA, via its application programming interface (API).
• When: automatically, as soon as you upload a document, send a receipt to your inbox address or import a bank statement. It is currently not possible to opt out of individual readings; if you don't want this, record your transactions manually without uploading a document.
• What for: to suggest the date, amount, sender and a suitable category.
• No training: under its commercial terms of service, Anthropic may not use content submitted via the API to train its models.
• Retention at Anthropic: Anthropic generally deletes API inputs and outputs within 30 days. Only content that violates the usage policies or must be retained by law is kept longer.

No automated individual decision-making. What is read is only ever a suggestion. No transaction is booked automatically from it, and no receipt is linked to a transaction on its own — you explicitly accept or reject every suggestion. The reading does not make any decision with legal effects or a significant adverse impact within the meaning of Art. 21 of the revised FADP.

7. Retention period

Your data is stored for as long as your account is active. If you delete your account, your data is removed from live operation immediately — both the database records and the uploaded documents in file storage.

After that, it remains in the database backups for a limited time. Our database provider keeps the database restorable to an earlier point for a certain period so that we can recover from an error or an outage; only when this period expires does deleted data disappear from there too. This period is always shorter than 30 days, so your data is completely gone no later than 30 days after deletion.

Statutory retention obligations remain reserved: data relevant to bookkeeping may be stored for longer owing to the 10-year retention obligation (Art. 958f of the Swiss Code of Obligations).

8. Data security

Your data is transmitted in encrypted form via HTTPS/TLS, including between the application and the database. You log in exclusively via a login link sent by email — there are no passwords that could be stolen. We take technical and organisational measures to protect your data against unauthorised access.

9. Your rights

Under the revised FADP and the GDPR, you have the following rights regarding your data:

• Access: you can request information about the stored data at any time.
• Rectification: you can correct inaccurate data yourself in the settings.
• Erasure: you can delete your account, including all data, yourself in the settings.
• Data portability: you can export your data as CSV at any time.
• Objection: you can object to the processing of your data for certain purposes.

To exercise your rights, please use our contact form .

10. Cookies and embedded videos

We only use technically necessary cookies. These are, on the one hand, the session cookie for logging in and, on the other hand — if you choose “Keep me logged in” when logging in — a cookie that keeps you logged in for 14 days. No tracking or advertising cookies are used, and we do not use any analytics services.

On the home page, we show a video from YouTube (Google Ireland Limited, Ireland; parent company Google LLC, USA). The YouTube player is only loaded when you click “Play” — no request is sent to YouTube before that. We use YouTube's privacy-enhanced mode (youtube-nocookie.com) for this. As soon as you start the video, YouTube receives your IP address and technical information about your browser and may use cookies or similar technologies; data may be transferred to the USA in the process. Google is responsible for this processing, see Google's privacy policy.

11. Changes to this policy

We reserve the right to amend this privacy policy as needed. The current version is always available on this page. Registered users will be informed by email of any significant changes.