This is a translation for information purposes. The German version is legally binding.

Privacy Policy

for the app “Querno” (iOS) · As of: 3. November 2026

1. Controller

VALNIO Solutions, Inhaber: Manuel Gjergjaj
Werastraße 36
88045 Friedrichshafen, Germany
Email: info@valnio.net

2. The most important points in brief

3. Processing in detail

3.1 Data on the device

Profile (federal state, legal form, small business rule (Kleinunternehmerregelung), advance return frequency, etc.), photographed letters, analysis results, deadlines, chat histories, drafts and income for the small business watchdog are stored in the app database on your device. Reminders are local notifications of your device. You can delete all data at any time in the settings (“Delete all data”). Legal basis: Art. 6(1)(b) GDPR (provision of the app).

App lock (Face ID / Touch ID): If you turn on the lock, your iPhone checks your biometrics when the app is opened. This happens entirely on the device through iOS; the app and we only receive the feedback “unlocked” or “not unlocked”, never biometric data.

3.2 Analysis of letters

When you scan a letter, the photos are transmitted encrypted to our server (Supabase, data center in Frankfurt am Main) and passed on from there to the Anthropic API (Anthropic PBC, San Francisco, USA), which reads the letter and summarises it in a structured way (type, sender, amount, deadline, contact and bank details, recommended steps). The result goes back to your app and is stored there. Our server does not store the photos permanently; Anthropic processes the data as a processor under the Anthropic Commercial Terms, does not use it for training and deletes it within the periods stated there. The transfer to the USA relies on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses (Art. 45, 46 GDPR). Legal basis: Art. 6(1)(b) GDPR. Only scan letters that are addressed to you or your business or for which you are authorised.

3.3 Questions & answers, drafts

Your question, the previous course of the conversation, photos that you attach to a question (e.g. receipts or letters), details from your profile (federal state, legal form, small business rule, advance return frequency) and, if you ask about a letter, its summary are transmitted to Anthropic as described in 3.2. Conversations are stored on your device and can be deleted there individually. The same applies to drafts of letters to authorities (additionally your name and the tax number from the letter, where available). Legal basis: Art. 6(1)(b) GDPR.

3.4 Quota and subscriptions

The app generates a random device ID (not an advertising ID, no link to your Apple account). For this, our server stores, per calendar month, the number of scans and questions as well as your plan. For a subscription, the app transmits the transaction signed by Apple (product, term, environment) so that the server can verify the plan. We do not receive payment data; the purchase is processed exclusively through Apple (Apple Distribution International Ltd., Ireland). Legal basis: Art. 6(1)(b) GDPR. Storage period: counters are deleted after 12 months.

3.5 Account and synchronisation (optional)

You can create an account so that letters, deadlines and profile are the same on all your devices. There are three ways to sign in:

With an account, we store on our server (Supabase, Frankfurt am Main): user ID and email address, your profile (name, address, tax settings), your letters including photos, analysis results and deadlines, your quota and, if connected, the mailbox connection from 3.7. Chat histories stay on the device. The sign-in procedures are operated by Supabase (Auth) on our behalf. Legal basis: Art. 6(1)(b) GDPR. You can delete the account together with all server data at any time yourself in the app (Settings → Account → “Delete account”); local data remains on the device in the process. You can additionally revoke access via Apple or Google in your Apple or Google account.

3.6 Team (Business plan)

For the Team plan you need an account (3.5). Within your organisation, letters (including photos), deadlines, names and roles of the members and invitations are stored on our server (Supabase, Frankfurt) and synchronised between the members. The owner of the organisation decides who is a member. Legal basis: Art. 6(1)(b) GDPR. The data is deleted when the organisation is deleted or you delete your account.

3.7 Email connector (Gmail, Microsoft 365)

Optionally, you can connect your Google or Microsoft mailbox in order to send replies to authorities directly from the app. In doing so, you grant the app via OAuth only the permission to send emails on your behalf and to read your email address; we do not read any mailbox content. The access token is stored on our server, used only for sending and deleted or revoked when you choose “Disconnect mailbox”. For each sending, we store the recipient, subject and time for 12 months; the content of the email is not stored. You can also revoke access at any time in your Google or Microsoft account. Legal basis: Art. 6(1)(a) GDPR (consent); for Google data additionally: the use of information received via Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

3.8 Dictation (voice input in the chat)

You can dictate questions in the chat. For this, the app asks for permission for the microphone and speech recognition. The conversion of speech to text is handled by the speech recognition of iOS (Apple); depending on the device and language, Apple processes the recording on the device or on Apple servers in accordance with Apple’s privacy terms. We do not receive audio recordings, only the text that you then send yourself. Legal basis: Art. 6(1)(a) GDPR (consent via the permission, revocable at any time in the iOS settings).

3.9 Notifications (push)

If you allow reminders, the app additionally registers with the Apple Push Notification Service. We store the device token generated in the process, together with the device ID, the app language and, if you are signed in, your user ID, on our server in Frankfurt in order to send you notices about deadlines and letters. Delivery is handled by Apple. The app itself schedules deadline reminders locally on the device. You can turn off notifications at any time in the iOS settings; we delete invalid tokens. Legal basis: Art. 6(1)(a) GDPR (consent via the permission).

3.10 Server logs

When our server functions are called, technically necessary connection data (IP address, time, status code) is stored in the host’s logs and deleted after a short time. Legal basis: Art. 6(1)(f) GDPR (operation and security).

4. Recipients and processors

5. Storage period

Data on the device: until you delete it or remove the app. Quota counters: 12 months. Account data (profile, letters, photos, deadlines): until you delete the account in the app. Team data: until the organisation or the account is deleted. Email tokens: until the mailbox is disconnected; sending log 12 months. Photos on our server (team only): until the letter is deleted.

6. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21), as well as the right to withdraw a consent you have given at any time with effect for the future (Art. 7(3)). To do so, contact info@valnio.net. You can also lodge a complaint with a data protection supervisory authority, e.g. the State Commissioner for Data Protection responsible for your place of residence.

7. Children

The app is aimed at self-employed people and not at persons under 16 years of age.

8. Changes

We will update this policy when the app or the legal situation changes. The current version is linked in the app under Settings → Legal.