← Back

Privacy policy

In force: 2026-10-29

1. In short

Stornio does not collect the data you enter in the app: we have no access to it. There is no account, no analytics of our own, no advertising and no server of ours that stores data. What you enter in the app – including your profile – is stored on this device. Exceptions: (1) the optional AI feature, off by default, which sends only text you approve; (2) technical data traffic of the text recognition modules, only with your separate consent (see "Text recognition"); (3) when you e-mail or write to us; (4) if you buy a Stornio Plus subscription: Apple or Google handles the purchase (see "Contact; paid features"). This document informs you about data processing: you do not have to accept it, only read it.

2. Controller

Operator and controller: Süleyman Kayışkır (private individual, developer of the app) · Postal address: 1133 Budapest, Pannónia utca 72–74., Hungary · E-mail: skayiskir@hotmail.com. We have not designated a data protection officer; for data protection matters, contact us at the e-mail or postal address above.

3. What the app stores, and where

The subscription details you enter (provider, amount, dates), the invoices, photos and PDFs you add, letter drafts and your profile (name, e-mail, address) are stored by the app in the device's own storage (database and profile file; browser storage in the web version) so that the app can work. The app's preferences file contains only settings: language, country, whether the AI feature is on and its daily counter, when and which version of the notices you accepted, and the time of your last backup; it does not contain your name, contact details or subscription data. Storage on the device: in Hungary, under Section 155(4) of Act C of 2003 on electronic communications (Eht.), data may be stored on a device only with the user's consent after being informed; we ask for it at first launch, and you can withdraw it by deleting the data or removing the app. In Germany, the storage is strictly necessary for the service you expressly requested (Section 25(2) No. 2 TDDDG), so no separate consent is needed there.

4. Who receives data

The operator does not receive or see the data stored in the app. Exceptions: the AI feature, the technical data traffic of the text recognition modules and messages you send us (see below). You send the letters yourself: if you use the e-mail or share function, the content is handled by the other app you choose (mail, cloud, etc.) under its own rules. When you open external sites (e.g. a cancellation page, a conciliation board), your browser connects to that site.

5. Text recognition (OCR) and PDF

Text is extracted from photos and PDFs on the device; neither your images nor the recognised text reach us or Google. On iPhone and Android, text recognition from images is done by Google ML Kit. According to Google, ML Kit sends Google technical data about the use of the feature: device information (manufacturer, model, OS version), the app's identifier and version, a device or per-installation identifier, performance data (e.g. latency), feature configuration (e.g. image format, resolution), input and output size, event type and error codes. Google uses this data to measure performance, debug, maintain and improve the feature and to detect misuse or abuse (developers.google.com/ml-kit/terms; policies.google.com/privacy). In the web version, recognition is done in your browser by the Tesseract.js program; your browser downloads the program and the language data from the jsDelivr public content delivery network (cdn.jsdelivr.net), so your IP address and the browser's usual technical data reach jsDelivr; the image stays in your browser. Before you use text recognition from images for the first time, the app asks for your separate consent; this consent is the legal basis for these two data flows (Art. 6(1)(a) GDPR; for sending data from the device also § 155(4) of the Hungarian Electronic Communications Act in Hungary and § 25(1) TDDDG in Germany). Without consent, recognition does not start and you can fill in the data by hand. You can withdraw your consent at any time in Settings; withdrawal does not affect the lawfulness of earlier processing.

6. Artificial intelligence (optional)

The AI features (filling in from an invoice, statement matching, contract terms, letter wording, reply analysis, questions) are off by default. They can only be switched on in Settings with a separate consent, and only by users aged 16 or over. Using AI is not a condition for using the app.

What is sent: before every send we show you the exact text, you can edit it, and it is sent only after you approve. Before sending, the app removes or masks IBANs, card numbers, e-mail addresses, phone numbers, long identifiers, web addresses, your address and the name in your profile on the device. This filtering is not perfect: the text may still contain personal data (e.g. other people's names, amounts, provider names); you can delete these in the preview. No photos are sent, only text recognised on the device (for statements, only shortened line items without identifiers).

Legal basis: your consent (Art. 6(1)(a) GDPR). If the text contains special category data (e.g. an item pointing to a healthcare provider, trade union membership or a religious community), by sending it you explicitly consent to this as well (Art. 9(2)(a) GDPR); if you do not want that, delete it in the preview. You can withdraw your consent at any time by switching the feature off in Settings; withdrawal does not affect the lawfulness of earlier processing.

Who is involved: the operator is the controller. The approved text is relayed by a server we operate (Cloudflare Worker, Cloudflare, Inc.) to Microsoft Azure OpenAI (EU data zone), which produces the answer. Both providers act as our processors under a contract with us. In the EU data zone, processing takes place in EU member states and, according to Microsoft, in some cases in EFTA countries (e.g. Norway or Switzerland). Microsoft does not use requests to train models; as part of abuse monitoring it may store requests flagged as suspicious, and authorised staff located in the EEA may review them. When you use AI, the relay uses your device's IP address only to rate-limit requests against overload and abuse (our legitimate interest in protecting the service, Art. 6(1)(f) GDPR); we do not log the IP address or link it to the content.

Transfers outside the EU: Cloudflare, Inc. is a US company, as is the parent company (Microsoft Corporation) of the Microsoft service provider. Any transfer to the United States relies on the EU–US Data Privacy Framework and the European Commission's standard contractual clauses; you can request a copy of the latter at the e-mail address above.

Retention: the relay does not log or store the text. The IP-based rate-limit counter counts in a 60-second window and lives only briefly in Cloudflare's system (Cloudflare does not state the exact time). Microsoft keeps requests flagged as suspicious for as long as needed to investigate abuse; it does not state a specific period. The daily total request counter contains no personal data.

The AI can be wrong: the result is only a suggestion, is labelled "AI", and you approve it; it is not legal advice. There is a daily usage limit.

7. Permissions

Camera and photo library: to photograph or pick an invoice. Notifications: reminders (renewal, trial, withdrawal and reply deadlines), scheduled locally by the device. You can revoke permissions at any time in the device settings.

8. Retention, deletion and backup

Data stays on the device until you delete it in the app (one by one or with "Delete all data") or delete the app; deleting the app destroys all data. On iPhone and Mac, the app's database and profile file are excluded from the device's automatic backups (on iPhone, from iCloud and computer backups); on Android, none of the app's data goes into Google backup or device transfer. On iPhone and Mac, the app's preferences file (see above) may be part of the device backup. In the web version, data is kept in browser storage and is lost if you clear the browser's site data. If you want a backup, you can create a password-encrypted backup file in the app; you keep the file, it never reaches us, and it cannot be restored without the password. Without a backup, data is lost when you delete the app or change device.

9. Contact; paid features

If you e-mail or write to us, we use your message and contact details only to reply (legal basis: our legitimate interest in answering your enquiry, Art. 6(1)(f) GDPR) and delete them no later than 12 months after the matter is closed. E-mails are stored in our Microsoft Outlook.com mailbox; Microsoft's parent company is based in the United States, and any transfer there relies on the EU–US Data Privacy Framework. If your message is a consumer complaint, we keep the complaint and our reply for three years under Section 17/A(7) of the Hungarian Consumer Protection Act (Act CLV of 1997) (legal basis: legal obligation, Art. 6(1)(c) GDPR).

Stornio Plus (in-app purchase): the purchase, payment, billing and renewal of the subscription are handled by Apple (App Store) or Google (Google Play) under their own terms and privacy policies, as independent controllers; we do not receive your payment details (e.g. your card number). On the device, the app receives from the store only the subscription status and transaction data (product ID, transaction ID, purchase date and, if the store provides it, the expiry date), and stores in its preferences file only whether Plus is active, until when, and when it last checked, so that it also works offline. This data stays on the device and never reaches us. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

10. Automated decision-making

There is no automated decision-making or profiling. The AI only makes suggestions that you approve or reject; the calculated deadlines and reminders are for information only.

11. Your rights

You have the right to access the data concerning you and to request its rectification, erasure, restriction of processing and data portability; where processing is based on consent, you can withdraw your consent at any time. The operator does not receive the data stored in the app: you can view, correct, delete and export it (encrypted backup file) yourself in the app. We reply to requests about messages you sent us or about AI use, sent to the e-mail or postal address above, within one month (Art. 12(3) GDPR). Because the relay stores nothing, we usually hold no data about AI requests to which we could give access.

12. Right to object

13. Complaint to a supervisory authority

You may lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence or place of work: in Hungary, the National Authority for Data Protection and Freedom of Information (NAIH; 1055 Budapest, Falk Miksa utca 9–11.; postal address: 1363 Budapest, Pf. 9.; naih.hu); in Germany, the data protection authority of your federal state.

14. Children

The app is not intended for people under 16. Only users aged 16 or over may switch on the AI feature (Art. 8 GDPR).

15. Changes

If this policy changes materially, we will show it to you in the app and summarise the change in the "Change log" section. In force: 2026-10-29.

16. Change log

2026-10-29: the operator and controller is now a private individual (Süleyman Kayışkır), new postal and e-mail address; e-mails are stored in a Microsoft Outlook.com mailbox; Stornio Plus: purchases through Apple or Google, subscription status stored on the device.

2026-10-26: full controller details; data traffic of the text recognition modules (Google ML Kit, Tesseract.js/jsDelivr on the web); the profile moved to storage excluded from backups; legal bases, full list of rights and separate right to object; special category data; EU data zone clarified and transfers to the United States; retention criteria; purchase section removed (no paid features); supervisory authority contact details; minimum age of 16 for AI; no automated decision-making. Previous version: 2026-10-21.