Privacy
Your photos never leave your device
Who is responsible
Bon is a free app by nealvdv, with its registered office in Ternat (Belgium). For the little data that does pass a server during a visit (see “Hosting and technical logs”), nealvdv is the controller. Contact: contact@nealvdv.be.
Everything on your own device
Your receipts and photos are kept in your own browser’s storage (IndexedDB), on this device. They do not go to a server of ours or anyone else’s. Bon does not even have a server that could receive them: technically, the site allows no connections to the outside.
No text recognition by an outside service
Bon does not read your receipts automatically through an outside service. You type in what is on them yourself. That way the photo never leaves your device.
What else your browser remembers
Your own VAT estimates per type and the details you type on an expense claim (name, account number), in your browser’s small storage (localStorage). Your preferences (light or dark, Reading comfort) are kept separately.
Cookies
Bon sets one functional cookie, NEXT_LOCALE, which remembers the language you read the site in. There are no analytics cookies and no advertising cookies, so no cookie banner is needed. Light or dark and Reading comfort are kept in your browser’s storage, not in a cookie.
Erase and take with you
Under ‘Accountant’, ‘Forget everything’ erases every receipt, every photo and your preferences in one go. That is also where you make a backup: a file on your own computer, which Bon does not upload.
What you send on yourself
A CSV, ZIP or backup is an ordinary file in your downloads. If you send it to your accountant, it goes through your email or your storage, and their rules apply.
Hosting and technical logs
The site runs on Vercel Inc., our processor. Like every web server, Vercel keeps short technical logs (such as the IP address and time of a page visit) to keep the site running safely. They contain no receipts or photos. Legal basis: our legitimate interest in a safe site (Article 6(1)(f) GDPR). Vercel keeps those logs for a limited time under its own policy; we do not store them ourselves and do not use them to follow visitors.
Bureel Plus
If you connect Bon to Bureel Plus, your browser keeps a proof signed by Bureel (localStorage). It only says whether you have Plus, until when, and a pseudonym for Bon; never your email address and never a receipt. Bon checks it in your browser and sends nothing to a server. “Disconnect this device” or “Forget everything” removes it.
Your rights
You have the right of access, rectification, erasure, restriction and objection. What is on your device, you manage yourself: we cannot reach it. For everything else, email contact@nealvdv.be. If you are not satisfied with our answer, you can lodge a complaint with the Data Protection Authority (www.dataprotectionauthority.be).
Last updated on 29 October 2026.