Privacy Policy for Arztrechnungen

Effective October 2026

1. Controller

Mathias Todisco

Schleswiger Ufer 5

10555 Berlin

Germany

Email address: hello [at] todisco [dot] de

Phone: +49 179 8174113

Imprint: Imprint

2. Introduction

Arztrechnungen is an app for iPhone, iPad and Mac for managing private medical bills, submissions to your PKV and Beihilfe, and reimbursements. The protection of your personal data is important to me. This privacy policy informs you about how your data is processed when you use the app.

3. Data Processing

3.1 Local Data Storage

Arztrechnungen has no user account and does not use a server of its own for bill data. The following data is stored on your device.

• Bills and documents: scanned, photographed and imported bills, notices and benefit statements, including the amounts read out
• Patient and doctor details: names and assignments you create in the app
• Settings: Beihilfe rates, deductible and other app settings

Bills contain health data within the meaning of Art. 9 GDPR. This data stays with you and is neither viewed nor stored by me.

There is no advertising, no tracking, no analytics tools and no disclosure to third parties.

3.2 Text Recognition and Analysis on the Device

Text recognition runs on your device using Apple Vision. The analysis of bills also runs on the device, either with Apple Intelligence or with a local language model (Qwen). From iOS 27 and macOS 27 the analysis can optionally run through Apple’s Private Cloud Compute. Apple’s privacy policy applies in that case.

The local language model is downloaded once from huggingface.co. No bill data is transmitted during the download.

3.3 Sync via iCloud (optional)

If you turn it on, the app syncs your data through the private iCloud database (CloudKit) of your Apple account. In that case the provider is Apple. I have no access to this data.

3.4 Backup and Sync with a Storage of Your Choice (optional)

You can sync the app with a storage and keep backups there. You can choose between a WebDAV server, Dropbox, Google Drive, Microsoft OneDrive and a local folder.

• Dropbox: permissions files.content.read, files.content.write, files.metadata.read and account_info.read
• Google Drive: the app data folder only (permission drive.appdata)
• Microsoft OneDrive: the app folder only (Files.ReadWrite.AppFolder), plus offline_access and User.Read

Sign-in uses OAuth with PKCE. Access tokens are kept in your device’s keychain. Backups can be encrypted with a password of your choice. Data goes only to the provider you select and is subject to that provider’s privacy terms.

3.5 Permissions

• Camera: to scan bills
• Photos: to import bill images
• Reminders: for payment deadlines
• Local network: for syncing with a WebDAV or Nextcloud server on your home network

The app uses these permissions only when asked. You can revoke them at any time in the system settings.

3.6 Widgets and Share Extension

Widgets and the share extension exchange data with the app only locally through an app group on your device.

3.7 Feedback Function (optional)

If you submit the feedback form in the app, the following is transmitted to my server (api.todisco.de):

• category, subject and message
• optionally your email address
• timestamp and language setting
• device information
• entries from the error log, if you choose to include them
• images you attach yourself

The transmission happens only when you submit the form. Bills and documents from the app are not transmitted, only images you explicitly attach.

3.8 Error Reports (optional)

Error reports are off by default. If you turn them on, crash and error reports are sent to a Sentry server that I operate myself at tip.todisco.de. The reports contain no personal data, no screenshots and no usage history, and texts are redacted. You can turn the reports off again at any time.

4. Legal Basis

• Art. 6 para. 1 lit. b GDPR (contract fulfillment): providing the app functions
• Art. 6 para. 1 lit. a GDPR (consent): access to camera, photos and reminders, sync and backup, error reports and feedback
• Art. 9 para. 2 lit. a GDPR (explicit consent): processing of health data that you enter and transfer yourself in the app

5. Data Sharing

I do not share data with third parties. Data goes only to services you turn on yourself (Apple iCloud, a storage of your choice) and to my own servers api.todisco.de for feedback and tip.todisco.de for error reports, if you use them.

6. Storage and Deletion

Your data stays on your device as long as you use the app. You delete individual bills in the app. You remove all local data by uninstalling the app. Data you have stored in iCloud or another storage is deleted there with the respective provider.

7. Your Rights

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Withdrawal of consent (Art. 7 para. 3 GDPR)
• Right to lodge a complaint with the competent data protection supervisory authority

Your bill data is on your device, where you can view, change and delete it directly. For data that I process (feedback, error reports), please contact the address below.

8. Data Security

The data is kept in your device’s protected storage. Access tokens for storage services are kept in the keychain, and backups can be encrypted with a password.

9. No Profiling

There is no automated decision-making or profiling within the meaning of Art. 22 GDPR.

10. Changes to this Privacy Policy

I reserve the right to update this privacy policy. The current version can always be found at:

https://todisco.de/en/arztrechnungen-privacy

11. Contact

Email: hello [at] todisco [dot] de

Address: Mathias Todisco, Schleswiger Ufer 5, 10555 Berlin, Germany