Privacy Policy

1. Controller

The controller for data processing under the General Data Protection Regulation (GDPR) is Global Solutions Systems GmbH, Bessemerstraße 51, 1. OG, 12103 Berlin, Germany, e-mail: info@global-solutions-systems.com.

2. Using this website

When you open this website, your browser transmits technically necessary data to the server: IP address, date and time, the address requested, status code, amount of data transferred, referring page and browser identification. These access data are processed solely to operate and secure the website, are not combined with other data and are deleted after 30 days.

The website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany; the data centre is located in Nuremberg, Germany. Hetzner processes the data as a processor under a contract pursuant to Art. 28 GDPR and solely on our instructions.

The website sets no cookies for analytics or advertising, embeds no tracking services and loads no fonts or scripts from third-party servers.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure and uninterrupted operation).

3. Principle: your data stays with you

ContoTrip is a travel-expense app. It works without a user account and without a server of our own. We operate no database and never receive your expense, trip or receipt data. The app contains no ads, no tracking and no third-party analytics.

Your data is stored solely on your device and — if you use iCloud — synchronised in your private iCloud. Certain features (receipt AI, location-based currency, exchange rates, purchases) use external services; each is described below.

4. Data processed in the app

4.1 Data stored locally

Trips, expenses (amount, currency, category, date, note), converted amounts and scanned receipt images are stored locally on your device (Apple SwiftData). They leave your device only in the cases named below.

4.2 iCloud sync (Apple CloudKit)

If you are signed in to iCloud on your device and iCloud is enabled for ContoTrip, your app data is backed up via Apple CloudKit in your private iCloud database and synchronised between your devices. This data resides in your Apple account; the provider of ContoTrip has no access to it. Apple is the controller for iCloud. You can disable synchronisation at any time in the iOS settings.

Legal basis: Art. 6 (1) (b) GDPR (providing the feature you requested).

4.3 Receipt scanning and AI analysis (optional)

The app uses your device camera to scan receipts. If you use automatic receipt recognition and have stored an AI provider with your own API key, the receipt image is transmitted for analysis (merchant, amount, date, category) to the provider you chose: OpenAI (api.openai.com), Google Gemini (generativelanguage.googleapis.com) or Anthropic Claude (api.anthropic.com).

The transfer goes directly from your device to the provider using your own key; the provider of ContoTrip is not involved and does not receive the images. The privacy terms of the respective AI provider apply. Without a configured provider no such transfer takes place. Your API key is stored in the iOS keychain on the device.

Legal basis: Art. 6 (1) (a)/(b) GDPR (consent through your active use of this feature).

4.4 Location for currency detection (optional)

If you use automatic detection of the local currency, the app determines a coarse location once (accuracy approx. 1 km) and derives the ISO country code from it via Apple reverse geocoding in order to suggest the matching currency. Only the country code or the currency is used — no precise coordinates are stored and no location data is transmitted to the provider. The app requests the “While Using the App” location permission for this; you can revoke it at any time in the iOS settings.

Legal basis: Art. 6 (1) (a) GDPR (consent via the iOS permission).

4.5 Exchange rates

To convert amounts, the app retrieves current exchange rates from public rate services: frankfurter.dev and open.er-api.com. Only a currency code (e.g. “EUR”) is transmitted — no personal data. Your expenses are not transmitted.

Legal basis: Art. 6 (1) (b)/(f) GDPR (providing the feature / legitimate interest in current rates).

4.6 Purchases (ContoTrip Pro)

The purchase of the Pro version is handled via Apple StoreKit and the App Store. Apple processes payment and purchase data; the provider receives only anonymised or aggregated sales information from Apple, no payment data. Apple’s privacy policy applies.

5. Recipients and transfers to third countries

Personal or content data may — only when you actively use the respective feature — reach the following recipients: Apple (iCloud, location geocoding, purchases) and the AI provider you choose (OpenAI, Google or Anthropic). When you visit the website, the host Hetzner Online GmbH is added as a processor, with its data centre in Germany. Some of the named providers process data in the USA; their respective transfer safeguards apply, such as EU Standard Contractual Clauses or the Data Privacy Framework.

6. Retention and deletion

Local data remains stored until you delete individual entries or the app. Deleting the app removes the local data; data backed up in iCloud is managed through your iCloud settings. You can delete individual trips, expenses and receipts in the app at any time. Website access data is deleted after 30 days.

7. Your rights

Under the GDPR you have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21); you can withdraw consent you have given at any time. As the provider does not itself store any personal data about you, these rights concern in particular the data on your device and in your iCloud, which you manage yourself. You can reach us for such matters at the e-mail address given above. You also have the right to lodge a complaint with a data protection supervisory authority.

8. Children

The app and the website are not directed at children and do not knowingly collect data from children.

9. Changes

We update this privacy policy when features or legal requirements change. The current version published here is the one that applies.