Datenschutzerklärung
Version 2026-11-06 · Zuletzt aktualisiert 6. November 2026 · Movibyte Studio
Vondi 2.0 ist ein Dienst für den Scanner und den Market. In der App und auf dieser Website kannst du mit geschützter Zahlung kaufen, Gebote abgeben, chatten und boosten, in den Niederlanden, Belgien, Frankreich, Spanien und Portugal. Gescannt wird in der App.
This Privacy Policy explains how Movibyte Studio processes personal data when you use Vondi: the Vondi app (price scanner, Vondi Pro and Vondi Market), the website vondi.co and related services. It applies to visitors, account holders and people whose data a User enters, for example as a delivery address or in a chat. Terms with a capital letter have the meaning given in the Terms of Use.
1. Who is responsible
The controller is Movibyte Studio, a sole proprietorship trading as Vondi, Hamerbijl 32, 4906 LJ Oosterhout, the Netherlands, KvK 99969696. Contact for all privacy questions: info@movibytestudio.com. We have not appointed a data protection officer because the law does not require one for our activities.
2. Which data we process
- Account and sign-in: email address, password (stored only as a hash by our hosting provider), identifiers and name or email shared by Sign in with Apple or Google, language, settings, and records of your acceptance of our documents (version, time, channel, language, IP address and browser or app identification).
- Device and app: device type, operating system, app version, an anonymous session before you create an Account, push notification token, hashed device identifiers used for scan limits and for restoring your data on a new device, and technical device and bank fingerprints that we use to enforce one person per Account and permanent bans.
- Scanner: the photos you scan, the results (title, brand, estimated price), your inventory, the number of scans and your subscription status (product, purchase and renewal dates, no card details).
- Market profile: username, display name, profile photo, bio, country and city, follows, saves, blocks, holiday mode, reviews and ratings.
- Listings: photos, title, description, brand, size, condition, price, category, city and the results of moderation, image checks and the luxury visual check.
- Chat and offers: messages, photos, offers and counter-offers, system messages, and reports you make or receive.
- Deals and payments: amounts, fees, status, refunds, chargebacks and Stripe references. We never receive your full card number.
- Payout and identity: your Stripe account reference, verification status and the legal name Stripe returns, and a pseudonymous identity key (a hash of name, date of birth and country) to enforce one person per Account; we do not store your date of birth. Buyers also complete Stripe verification before their first purchase.
- Shipping and returns: names, addresses, phone numbers and email addresses for the label, pickup point, tracking events, cancellation reasons, return reasons and return photos.
- Support: your messages to the Vondi help chat and to us, and the answers. To answer, the help chat can see your own account data, but not your bank or payment details.
- Use and security: app events (for example screens opened and steps completed), crash and error reports, IP addresses, and logs used for security and rate limiting.
- Location: if you allow it, your location is used on your device to show distances. It is not sent to our servers.
We do not ask for your citizen service number (BSN) or tax identification number. We do not process special categories of personal data on purpose; please do not put such data in listings or chats.
3. Why we process your data and on which legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and secure your Account, sign-in, settings | Performance of the contract (Art. 6(1)(b)) |
| Scanner estimates, inventory, Vondi Pro and scan limits | Performance of the contract (Art. 6(1)(b)) |
| Listings, profiles, chat, offers, Deals, shipping, returns, payouts | Performance of the contract (Art. 6(1)(b)) |
| Moderation, fraud prevention, one person per Account, bans and linked Accounts | Legitimate interest in a safe and lawful marketplace (Art. 6(1)(f)); legal obligations under the Digital Services Act (Art. 6(1)(c)) |
| Automatic translation of chats and reviews, AI help chat | Performance of the contract (Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f)) |
| Service messages by push and email (order, shipping, account) | Performance of the contract (Art. 6(1)(b)) |
| A reminder push after a week of inactivity (at most once every 14 days) | Legitimate interest (Art. 6(1)(f)); you can switch off notifications at any time |
| App statistics, crash reports, security and rate limiting | Legitimate interest in a working and secure service (Art. 6(1)(f)) |
| Proof of acceptance, bookkeeping, legal claims, requests from authorities | Legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f)) |
Where we rely on legitimate interest, you may object (Art. 21 GDPR). We then stop unless we have compelling grounds or need the data for legal claims. If you do not provide data that is needed for the contract (for example an address for shipping), we cannot provide that part of the Service.
4. Artificial intelligence and automated decisions
We use AI and automated systems for:
- estimating resale values in the Scanner and suggesting listing texts from photos;
- checking listing, profile and return photos (prohibited content, AI-generated images, photos copied from elsewhere, the luxury visual check);
- filtering texts and chats for contact details, off-platform payment and prohibited content;
- translating chats and reviews automatically;
- the Vondi help chat, which is an AI assistant and hands over to a person when needed.
Some of these checks can lead to a decision without human involvement, such as pausing a listing, blocking a message, a strike or ban under the ladder in the Terms, or blocking a second Account. These decisions are necessary to perform the contract and keep the Market safe (Art. 22(2)(a) GDPR). You have the right to a human review, to give your view and to contest the decision: reply to the notice or email us. A failed check is not a finding that you committed a crime.
We use business versions of these services and choose settings that do not let the providers use your data to train their own models where such settings exist.
5. Who receives your data
Other Users see what you publish: listings and photos, your public profile (username, display name, photo, bio, country, city), reviews and ratings. The other party to a Deal or chat receives your messages and, where needed for shipping or pickup, your name and address. Your email address, phone number, payment data and identity data are not public.
Processors that process data on our behalf, under a data processing agreement:
- Supabase: hosting of the database, accounts and photos (EU, Paris region).
- Cloudflare: website hosting, security and Turnstile bot protection.
- Google (Gemini, Cloud Vision, Translate): AI estimates, image checks, translation.
- OpenAI: luxury visual check.
- Hive: image moderation and detection of AI-generated images.
- Expo: delivery of push notifications.
- Resend: sending service emails.
- Sentry: crash and error reports.
- RevenueCat: management of in-app purchases and subscriptions.
- Sendcloud and EasyPost: creating shipping labels for the carriers.
Independent controllers, who decide themselves how they use the data under their own privacy policies: Stripe (payments, payouts and identity verification), Apple and Google (app stores, in-app purchases, sign-in and delivery of push notifications, which can show a preview of a chat message), carriers (PostNL, DHL, DPD, Mondial Relay, USPS, UPS, FedEx, Canada Post) and banks. The Scanner sends only item search terms, not personal data, to eBay.
Authorities: police, courts, regulators or tax authorities, only when the law requires it or to protect rights and safety, for example when we report suspected child sexual abuse material or a threat to life.
We do not sell personal data and do not share it for advertising. The app contains no advertising trackers.
6. Transfers outside the European Economic Area
Some providers (for example Stripe, Google, OpenAI, Hive, Expo, Resend, Sentry, RevenueCat and EasyPost) may process data in the United States or other countries outside the EEA. We only allow this with an adequacy decision (such as the EU-US Data Privacy Framework for certified companies, or the decision for the United Kingdom) or with the European Commission’s Standard Contractual Clauses and additional measures. You can ask us for a copy of these safeguards.
7. How long we keep data
- Account: until you delete it. Deletion is completed 30 days after your request; logging in within that period cancels it.
- Anonymous sessions that were never used are removed after 7 days.
- Scans and scan photos: until you delete the scan or your Account.
- Listings and chats: until you delete them or your Account. Data that belongs to a Deal (listing details, messages, photos, tracking and return evidence) is kept as part of the Deal record.
- Deals, payments and payouts: 7 years, because Dutch tax law requires us to keep our records for that long.
- Acceptance records: as long as your Account exists and up to 5 years afterwards (the general Dutch limitation period).
- Strikes: active for 12 months. Ban records and the fingerprints linked to a permanent ban: as long as the ban applies.
- In-app notifications: 90 days. App usage events: 12 months.
- Crash reports and security logs: from a few days up to 90 days, unless needed longer to investigate an incident.
We keep data longer only where the law requires it or while a dispute or investigation is pending.
8. Security
We use encryption in transit, row-level security in the database, private storage for scan and return photos, least-privilege access, rate limits and security headers. Passwords are stored only as a hash. No system is perfectly secure: keep your password secret and tell us if you suspect misuse. If a data breach is likely to pose a risk to you, we report it to the Dutch Data Protection Authority within 72 hours and, if the risk is high, we inform you.
9. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time. Many settings and the deletion of your Account are available in the app; you can also email us from the address linked to your Account. We may ask for extra proof of identity. We respond within one month; for complex requests we may extend this by two months and will tell you why.
You may complain to the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl) or the authority in your own country. Residents of the United Kingdom may contact the ICO. Residents of US states such as California have similar rights to know, delete and correct their data; we do not sell or share personal information for cross-context behavioural advertising.
10. Children
The Service is intended for persons aged 18 and over. We do not knowingly process data of children. If you believe a child has created an Account, please let us know and we will delete it.
11. Notifications and email
We send service messages about your Account, Deals, shipping and returns by push notification, in the app and by email. You can switch off push notifications in your device settings. We do not send marketing newsletters.
12. Cookies and device storage
The website uses only the cookies described in the Cookie Notice. The app stores data on your device (for example your session, settings and offline copies of your scans) because that is necessary for the app to work.
13. Changes
We may update this Privacy Policy. We announce material changes in advance in the app, by email or on the website. The date and version at the top of this page show which version applies.