Privacy policy
Last updated: 10 November 2026
This policy explains what the Bonka app ("Bonka", "we") does with your personal data. We write it plainly on purpose. Bonka has no ads, no ad trackers and no sale of data.
Who is responsible
The controller of your data is Bonka (the controller's legal name and postal address will be added here before launch). Contact: support@getbonka.com.
What we collect and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Account: email address, or the identity from Sign in with Apple or Google | To create and secure your account and sign you in | Contract (Art. 6(1)(b)) |
| Your entries: accounts, transactions, categories, budgets, piggy banks, recurring items, comments, settings | To provide the app and sync it across your devices | Contract |
| Voice entries: the audio of a voice entry and the text it produces | To turn what you say into a draft transaction. Audio is processed once and not stored by us or by the provider | Contract (you choose to use voice) |
| Purchase status: subscription state, store purchase records | To unlock paid features on all your devices | Contract |
| Usage analytics: a pseudonymous id and a short list of app events (for example "budget created") | To improve the app | Consent (Art. 6(1)(a)). Off until you allow it, and you can withdraw it any time in Settings |
| Crash reports: error details and device model with a random per-install id, not linked to your account | To find and fix crashes | Legitimate interest (Art. 6(1)(f)). You can switch it off in Settings |
| Update checks: IP address, platform and app version | To deliver app fixes without a store update | Legitimate interest |
| Support messages | To answer you | Legitimate interest and contract |
We do not ask for your location, contacts or photos. We never read your bank. The microphone is used only while you record a voice entry.
Who receives data
| Provider | What for | Where |
|---|---|---|
| Supabase | Database and sign-in | EU (Frankfurt) |
| PostHog | Analytics and crash reports | EU (Frankfurt) |
| Mistral AI | Turning voice into text and a draft entry, with zero data retention | EU |
| Scaleway | Sending sign-in emails | EU (France) |
| RevenueCat | Subscriptions across devices | United States, with Standard Contractual Clauses |
| Expo (EAS Update) | Delivering app updates | United States, with Standard Contractual Clauses |
| Apple, Google | Sign-in, app stores and payments. They act under their own terms | Their own locations |
These providers process data on our behalf under data processing agreements, except Apple and Google, which act independently.
How long we keep data
- Your account data and entries: until you delete your account.
- Entries you delete: removed from your devices at once, and cleared from our servers within 180 days.
- Voice request logs (no audio): 2 days.
- Support access records (a log of when staff opened an account to help): 12 months.
- After you delete your account: your data is removed from our database at once. Requests to our processors (analytics, subscriptions, Apple sign-in) are completed within 30 days. Purchase records stay with Apple, Google and RevenueCat under their own rules.
Your rights
You can ask us for access to your data, correction, deletion, restriction, a portable copy, or object to processing based on legitimate interest. You can withdraw consent any time. Deleting your account in the app (Settings, Account) is the fastest way to erase your data. Write to support@getbonka.com for the rest. We answer within one month.
You may also complain to a data protection authority: in Poland the UODO (uodo.gov.pl), in Ireland the Data Protection Commission (dataprotection.ie), in the United Kingdom the ICO (ico.org.uk).
Security
Data is encrypted in transit. The copy on your phone is stored in an encrypted database, and the optional app lock protects the app on your device. Access to servers is limited and every database table is protected by per-user rules.
Changes
If we change this policy in a way that matters to you, we will tell you in the app before it applies.