Draft — not yet legally final. This text is still under legal review and may change.

Privacy Policy

Last updated: 24 October 2026

1. Introduction

BillieMe ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use and protect your data when you use our app and website.

Controller: [BV name] (in formation), [address], Chamber of Commerce (KvK) number [KvK number]. Privacy questions: privacy@billieme.com.

2. Data we collect

2.1 Data you provide to us

  • Account information (name, the phone number you sign in with, email address, profile photo or avatar)
  • Payment information: payments, top-ups, your balance, Billies and pots. Card and bank details are processed by Stripe; we only see, for example, the last 4 digits of a card
  • Verification of your wallet (ID document, address, bank account): Stripe carries out this check; we only keep the outcome and the status
  • Contact information when you contact us
  • Your date of birth, to check that you are 18 or older (including when you order alcohol)
  • Tickets and sign-ups for events (which event, which ticket type, when)
  • Orders at a venue, including a request or allergy alert you enter yourself with an order

2.2 Allergies and diet (health data)

In the app you can set your allergies and diet, so that the menu shows what suits you. Allergies are health data (Art. 9 GDPR). By default your profile is stored only on your device. Only if you switch on the option to keep it in your account do we store it; we do so on the basis of your explicit consent (Art. 9(2)(a) GDPR), together with the date of that consent. If you switch it off or delete your account, we erase the profile. Your preferences are never sent to a venue automatically. A venue only sees an allergy alert that you enter yourself with an order, with that order.

2.3 Data you share on your device

  • Location (only with your permission, while using the app): to show what is open near you. We do not store your location on our servers
  • Contacts (only with your permission, also for some of your contacts): your address book stays on your device. Only for the contacts you choose to add to a group do we send the phone number or e-mail address to our server to see whether that person already uses BillieMe; we do not send names. You invite people who aren't on BillieMe yourself, through Messages. For an invited number we keep only a hash, salted per invitation, to link the invitation to that person. We do not store your address book
  • Camera, photos and Bluetooth: only for the feature you use them for (for example scanning a code, choosing a profile photo, or confirming at the bar that your order was scanned)

2.4 Data from others: the guest list

An organiser, artist or promoter can put you on the guest list of an event or private party. Your name and, if you receive the ticket by email, your email address are then held by us, even if you do not have an account. The organiser is responsible for this; BillieMe keeps the list on behalf of the organiser and uses it only to let you in and to deliver your ticket. 90 days after the end of the event we automatically erase your name and email address.

2.5 Automatically collected data

  • Crash reports and technical data (app version, device type, operating system), via Firebase Crashlytics; you can switch this off in the app
  • App usage data (features you use): only if you switch on "Share usage statistics" in the app; it is off by default

3. How we use your data

We use your data for:

  • Providing and improving our services
  • Processing payments and transactions
  • Communicating with you about your account and our services
  • Analysing app usage to improve the user experience (only with your consent)
  • Complying with legal obligations

4. Cookies and tracking

We do not track you across other companies' apps and websites. At the moment our website only uses what it needs to work; your choice in the cookie consent banner is stored in your own browser. We only use analytics cookies if you consent to them in the banner.

  • Essential cookies: Necessary for the website to work
  • Analytics cookies: For anonymous user statistics (optional, only with consent)

5. Sharing data

We do not sell your data and do not share it with third parties, except:

  • Stripe (Stripe Payments Europe Limited), for payments, your wallet, the BilliePas and verifying your identity. Stripe itself is responsible for the verification and the payment services
  • The hospitality venue where you place an order: your display name and your order (with an allergy alert or request if you enter one) are shared with that venue to handle your order (legal basis: performance of the contract, Art. 6(1)(b) GDPR)
  • The organiser of an event for which you have a ticket or signed up: your ticket and whether you are inside, for access at the door (Art. 6(1)(b) GDPR). If your order contains alcohol, staff only see that it is an 18+ order, not your date of birth
  • Friends in a group, Billie or pot: they see your name, avatar and what you contributed or still owe
  • Service providers that help us deliver our services: Google Firebase / Google Cloud (sign-in, storage, servers and notifications; our database is in the EU region europe-west4, the Netherlands), Apple (push notifications, Apple Pay), SendGrid (email) and Twilio (SMS)
  • When required by law

6. Your rights (GDPR)

Under the General Data Protection Regulation (GDPR) you have the following rights:

  • Right of access: You can request which data we hold about you
  • Right to rectification: You can have incorrect data corrected
  • Right to erasure: You can request that your data be deleted
  • Right to restriction: You can restrict the processing of your data
  • Right to object: You can object to certain processing
  • Right to data portability: You can receive your data in a structured format
  • Withdrawing consent: where we rely on your consent (usage statistics, your allergy profile in your account, location, contacts), you can always withdraw it in the app or in your device settings

In the app you can download your data yourself (Profile → Privacy → Export your data) and delete your account (Delete account). For the other rights, contact us via privacy@billieme.com or our contact page. We respond within 30 days. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

7. Security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss or destruction. This includes:

  • Encryption of data in transit (HTTPS)
  • Secure storage of data
  • Regular security audits

8. Data retention

We keep your data only as long as necessary for the purposes for which it was collected, or as long as required by law. We keep payments, orders and tickets for 7 years (tax retention obligation); data about transactions and the verification of your wallet for 5 years after your account ends (Dutch anti-money-laundering act, Wwft). We erase names and email addresses on a guest list 90 days after the end of the event. We erase records of emails and text messages sent after 90 days.

If you delete your account, we erase your profile (name, phone number, email address, photo, date of birth), your allergy profile and the allergy alerts on your orders. The financial records we have to keep are kept without your name and contact details.

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will inform you of important changes through the app or by email.

10. Contact

For questions about this Privacy Policy or your data, contact us via: