Privacy Policy — Bildirium

Loading the current text…

The current text of this page loads via JavaScript. In short: Bildirium processes your personal data only to do its job; health, diet and document data stays on your device, the server holds account and notification data and, if you connect a mailbox, email scan results; there is no ad network or user tracking. The Google user data section is below. Full text: destek@bildirium.com

Google user data (Gmail) and connected mailboxes

Connecting Gmail is optional and happens only when you connect it from the Bills Assistant. Bildirium requests only these Google scopes: gmail.readonly (read-only access to your email), email and openid (to show which account is connected). It cannot send, delete or modify email.

How Gmail data is used

Bills Assistant: when you open the Bills Assistant, our server reads bill, subscription and payment emails from the last 90 days, extracts fields such as amount, due date and provider, and sends only those fields (with the short matching text fragments) to your device. Message bodies, subjects and senders are not stored on the server. Bills you confirm are kept only on your device.
Security scan (Cyber Watch Center): while enabled, our server checks new incoming emails for phishing and fraud signals using rule-based analysis. Message bodies are analysed in memory only and are not stored. Only for emails found suspicious or dangerous, the subject, sender name, message ID, risk score and reasons are stored as a security finding and shown to you in the app. You can turn this scan off in Settings → Data sources → Gmail.

Storage, sharing and deletion

Your Google token is stored on our server encrypted with AES-256-GCM.
Data obtained from Google is not used for advertising, is not sold, is not transferred to data brokers or other third parties, and is not used to train AI or machine-learning models.
No human reads your data, except with your explicit consent, for security purposes (such as investigating abuse), or to comply with applicable law.
When you disconnect in Settings → Data sources, Google access is revoked and the encrypted token and the security findings derived from that mailbox are deleted. Deleting your account deletes all of it. You can also revoke access at myaccount.google.com/permissions.

Bildirium's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

iCloud Mail and Yahoo Mail

These mailboxes connect with an app-specific password you create in your account; your normal password is never requested. The password is stored encrypted and used only for the Bills Assistant scan under the rules above. You can revoke it from your Apple or Yahoo account at any time.