Privacy policy

To provide Pompie, we process the following data:

• Account information — your name, email address and password, which is stored securely as a hash, together with the preferences you provide.
• Optional work profile — the broad work category you choose, or a short answer of your own, and the date on which you change it. You may skip the question or choose not to say. If you enter your own answer, the operator can review it to decide whether a new category would be useful; do not include medical or other sensitive personal information.
• Shifts and calendar data — the consultations, shifts and appointments you enter in Pompie, including times, locations and clients. When you import a calendar, a pasted schedule or a photo of one, our server reads the calendar or text and does not keep it; only the appointments you choose are saved. A photo is read on your phone; the photo itself is not sent to the server.
• Invoices — invoices created through Pompie, including client details and the amounts you charge.
• Transactions through a bank integration — if you choose to connect your business bank account, we read transaction data to match payments to invoices. This integration is optional, disabled by default and can be disconnected at any time.
• Receipts and optional recognition research — receipt files, amounts, dates, merchant names and VAT details you store. Text recognition runs on your phone; normally the server receives only technical scores and whether you corrected suggested fields, not the recognised text. Only when you expressly choose to help with an individual receipt may an administrator open that receipt on a Pompie device and retain a test snapshot of the recognised text, text boxes and parser output. The image itself is not copied into the test case. This choice is disabled by default and does not affect your use of Pompie.
• Calendar sharing — if you generate a private calendar link, we store its secret token so supported calendar apps can retrieve your Pompie schedule. You can renew or disable the link at any time.
• Trip tracking (location data) — if you enable automatic mileage tracking, the app uses a low-power background motion/location check to detect when a drive may start. Precise route points are retained and uploaded only around your planned shifts (by default from one hour before until one hour after a shift, adjustable in the app from half an hour to three hours, and while a trip already in progress finishes). From these we derive your trips — route, distance and times — for your records and invoices. This feature is disabled by default; you enable it yourself and can switch it off at any time.
• Technical trip-tracking status — using a random installation ID, the app reports its platform and version, whether automatic tracking is enabled and whether the required system permissions are available. No locations or routes are included. We use this only to resolve setup problems and improve feature reliability.

We use your data to operate Pompie: to maintain your shifts and calendar, prepare invoices, match payments to invoices and support you when you contact us. We do not use your data for advertising and do not sell it to third parties.

If you voluntarily provide a work profile, we use it at group level to understand which parts of Pompie suit different kinds of work and to improve or later tailor the product. We do not make automated decisions about you from this profile and do not share it for advertising.

If you voluntarily make an individual receipt available for recognition research, we use that receipt and its test snapshot only to test and improve recognition of amounts, dates, merchants and VAT. We do not use either for advertising or to make decisions about you.

We process your data because it is necessary to perform the agreement you enter into when creating a Pompie account. Without this data, we cannot provide the service. Optional features such as bank and calendar sharing and automatic trip tracking are processed because you expressly choose to activate them.

We process the optional work profile for product research and improvement on the basis of our legitimate interest in making Pompie fit its users better. The question is not required, you may choose “prefer not to say”, and you can remove both your answer and its complete change history at any time in Settings.

We use an individual receipt for recognition research only with your express consent for that receipt. Consent is disabled by default. You can withdraw it just as easily on the receipt; we then delete every derived test snapshot. Deleting the receipt or your account does the same.

We occasionally email account holders about new features in Pompie, on the basis of our legitimate interest in telling existing customers about the product they already use. If you signed up from the website without an account, we send it because you asked us to, and we keep a record of when and where you did.

Every newsletter carries a one-click unsubscribe link, and your mail client's own unsubscribe button works too. You can also switch it off under Settings → Account. Email about your account — invoices, password resets and security notices — is not part of this and always arrives. We do not track opens or clicks.

We use a limited number of carefully selected processors to provide Pompie:

• Stripe — to process subscriptions purchased through the website.
• RevenueCat — to synchronise App Store and Google Play subscription status with your Pompie account.
• Apple and Google — to process payments, receipts and subscription management when you subscribe through their app store. They process this data under their own terms.
• Cloudflare — to deliver and secure the website and for cookieless visit statistics (Web Analytics).
• Resend — to send transactional email, including account messages and invoices.
• Sentry — for error reports from the app and the server, so we can find and fix crashes. A report contains the error, the device type, the system version and the app version; no name, email address, IP address or data from your administration. Sentry stores the reports within the European Union.
• Hosting provider — our application servers and database are hosted within the European Union.
• Apple Maps and Google Maps — to provide the background map used to show routes in the mobile app. The map provider may process technical request data under its own privacy terms.

We have data-processing agreements with processors that handle personal data on our behalf. We never share more data than is required for the purpose for which a provider is engaged.

Security logs of password-reset requests, including the submitted email address, IP address and browser or device details, are retained for 90 days.

We retain your data while your Pompie account exists. When you delete your account, we permanently delete the account data and administration stored in Pompie, including your own invoices. Payment providers may independently retain receipts and transaction records they are legally required to keep. Account deletion cannot be reversed, so export any information you need beforehand.

Work-profile changes and their dates are retained while your account exists, so later activity is not incorrectly attributed to a new category. You can remove the current answer and this history earlier in Settings. They are also deleted automatically when the account is deleted.

A test snapshot from a voluntarily shared receipt is retained only while that receipt exists and your consent remains active. Withdrawing consent, deleting the receipt or deleting your account immediately deletes the snapshot. A case an administrator makes from their own lab receipt contains no data from your account.

A shorter, additional limit applies to automatic trip tracking. The raw GPS points a trip is derived from are kept for 30 days. During that period they are used solely to verify the accuracy of the recorded kilometres — including by cross-checking the distance against independent speed measurements from your phone — and to answer questions about a trip or invoice. That verification runs the moment a trip is finalized and its result is stored with the trip, so the raw points are not needed afterwards. Batches older than 30 days are deleted by a periodic cleanup process, which also starts shortly after every application-server restart. Only the derived trip itself (route, distance and times) is retained as part of your records. Deleting your account also deletes all raw GPS points immediately.

Under the GDPR, you have the following rights:

• Access to the personal data we process about you.
• Correction of inaccurate or incomplete data.
• Deletion of your data, including by deleting your account.
• Data portability: you may request your data in a portable format.
• The right to lodge a complaint with the Dutch Data Protection Authority if you believe your data has not been handled carefully.

To exercise any of these rights, send us an email. We respond as soon as possible and within the statutory time limit.

Pompie uses functional session cookies required to keep you signed in and operate the app. One first-party cookie (pompie_first_touch, 30 days) remembers which page of mypompie.nl you first arrived on and from which website or campaign, without any identifying data. If you create an account, that origin is stored with your account so we can see which pages bring new users. If you open a colleague's invitation link, a second first-party cookie (pompie_referral, 30 days) holds only that invitation code until you create an account, so you can both receive the free month. We do not place third-party tracking cookies or use third-party advertising or analytics cookies.

For website visit statistics we use Cloudflare Web Analytics. It measures without cookies and without tracking you across sites or sessions: only aggregated page views, referrer, device and country data are processed, and no personal profile is built.

Questions about this policy or how we handle your data? Contact the operator of Pompie (KvK 42116007 · VAT ID NL005506344B83) at [email protected]. We will be happy to help.