Nederlandse versie: Privacyverklaring
Last updated: 1 October 2026 · applies from app version 7.1.0
This privacy policy explains which personal data we process when you use the APPlause by #JAMES app (“the app”) and the website bnbbutler.be, why we do so, and which rights you have.
1. Who is responsible?
James bv, trading as #JAMES the BnB Butler, Magere Schorre 9, 8300 Knokke, Belgium, company number BE 0777.963.457, is the data controller.
Privacy contact: hallojames@bnbbutler.be.
2. What data do we process and why?
Mobile number – account, login and verification
Your account is linked to your mobile number. We use it to create your account, to let you log in, and to verify your number with a one-time code, which you receive via WhatsApp or by text message (SMS). To send and check this code we work with Twilio (Twilio Verify), which receives your mobile number and the code. A code is valid for 10 minutes. To prevent abuse, we record when a code was requested, for which number or email address, from which IP address, and whether the code was correct. We do not store the code itself.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR). For recording requests: legitimate interest (Art. 6(1)(f) GDPR), namely keeping your account secure.
WhatsApp updates – only with your consent
After you confirm your number, we ask whether you want to receive updates via WhatsApp. Nothing is pre-selected. If you choose “yes”, we send you updates via WhatsApp. Your WhatsApp ID is your mobile number. For this we work with WhatsApp (Meta). We store your choice and when you made it. Without your consent, we do not send you WhatsApp updates. A verification code sent via WhatsApp is not an update and is not covered by this consent. You can withdraw your consent at any time by replying “STOP” or by emailing hallojames@bnbbutler.be. This does not affect messages we sent before.
Legal basis: consent (Art. 6(1)(a) GDPR).
Email address – password reset
We use your email address to send you a code when you want to reset your password. You can also receive this code via WhatsApp or SMS. We send emails through Mandrill (Mailchimp Transactional).
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Face ID / Touch ID – on your device only
If you enable login with Face ID or Touch ID, recognition happens entirely on your device, through the operating system. We never see or store your face or fingerprint data. Your device only tells the app whether the check succeeded or failed.
Push notifications – only with your consent
If you allow notifications, your device receives a push token, which we link to your account to send you notifications. Notifications are delivered through Expo and through Apple’s (iPhone) or Google’s (Android) notification service. You can turn notifications off at any time in your device settings.
Legal basis: consent (Art. 6(1)(a) GDPR).
Error reporting – Sentry (EU)
If the app crashes or runs into an error, we send a technical error report to Sentry, with data stored in the European Union. Such a report contains technical data such as device type, operating system and app version, the time, and what went wrong. We do not include your name, email address or mobile number. We use this only to find and fix errors.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR): a stable and secure app.
App updates
The app downloads small updates from Expo’s servers. This involves technical data such as your IP address and app version.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR): a secure and up-to-date app.
Data you enter yourself
Your name, profile photo, mobile number, email address, stays and reservations, service requests, and messages in the chat with your butler. We use this data to provide the app’s services.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
We do not sell your data and do not use it for automated decision-making or profiling.
3. Who do we share data with?
We work with service providers (processors) that process your data only on our behalf and according to our instructions:
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Hosting on Rails | Servers for the app data | Account data and everything you enter in the app | European Union |
| Twilio Inc. | Verification codes via WhatsApp or SMS (Twilio Verify) | Mobile number, code | US |
| WhatsApp / Meta Platforms Ireland Ltd. | WhatsApp updates (consent only) and codes via WhatsApp | Mobile number (WhatsApp ID), messages | EU / US |
| Mandrill (Mailchimp Transactional, The Rocket Science Group LLC / Intuit) | Emails, including password reset | Email address, email content | US |
| Functional Software Inc. (Sentry) | Error reporting | Technical data | EU |
| Expo (650 Industries, Inc.) | Push notifications and app updates | Push token, technical data | US |
| Apple / Google | Delivery of push notifications, download via the App Store and Google Play | Push token; otherwise according to their own privacy policies | – |
| Google Ireland Ltd. / Google LLC (Google Analytics 4, Google Tag Manager) | Website statistics (see section 9) | Cookie IDs, pages visited, device and browser data, approximate location | EU / US |
| Meta Platforms Ireland Ltd. (Meta Pixel) | Measuring and showing ads (see section 9) | Cookie IDs, pages visited and actions on the website, device and browser data | EU / US |
We also disclose data where required by law.
4. Transfers outside the EU
Some providers process data in the United States. Mandrill (The Rocket Science Group LLC / Intuit) is covered by the EU-US Data Privacy Framework. For other providers outside the EU, such as Twilio, Meta, Google and Expo, we rely on appropriate safeguards: the EU-US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.
5. How long do we keep your data?
- Account data and what you enter in the app: as long as your account exists. If you delete your account, we erase this data within 30 days, unless a legal retention obligation applies.
- Verification codes: valid for 10 minutes. The record of requests (number or email address, IP address, time): as long as needed to keep your account secure.
- WhatsApp consent: until you withdraw it. We keep proof of consent for as long as needed to demonstrate it.
- Error reports in Sentry: up to 90 days.
6. Security
We protect your data with appropriate technical and organisational measures, such as encrypted connections (HTTPS), restricted access and a limited number of attempts when entering codes. No system is 100% secure, but we do our utmost to protect your data.
7. Your rights
You have the right to access, rectify or erase your data, to restrict processing, to object and to data portability. You can withdraw any consent at any time.
You can delete your account in the app via ⋮ → profile → delete account, or by emailing hallojames@bnbbutler.be.
Send your request to hallojames@bnbbutler.be. We will respond within one month.
If you are not satisfied, you can lodge a complaint with the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be.
8. Children
The app is not intended for children under 13. We do not knowingly collect data from children under 13. If we find out that this has happened, we will delete that data. If you are a parent or guardian and you know that your child has given us personal data, please contact us.
9. Website: cookies, statistics and advertising
Cookies are small files that a website stores on your device, for example to recognise you on a later visit.
The website bnbbutler.be uses the following services, which use cookies or similar technologies:
- Google Analytics 4, loaded through Google Tag Manager (Google Ireland Ltd.): to see how visitors use the website, for example which pages are visited, for how long and from which country. Purpose: statistics, to improve the website.
- Meta Pixel (Meta Platforms Ireland Ltd.): to measure how well our ads on Facebook and Instagram perform and to show ads to people who visited our website. Purpose: advertising. Meta may link this data to a Facebook or Instagram account and is itself responsible for its own processing.
These services process, among other things, cookie IDs, the pages you visit and what you do there, data about your device and browser, and your IP address or an approximate location derived from it. Data may also be processed in the United States (see section 4).
You can refuse or delete cookies in your browser settings. You can also block Google Analytics with Google’s opt-out browser add-on (tools.google.com/dlpage/gaoptout) and adjust your ad preferences with Meta in your Facebook or Instagram settings.
The app itself does not use advertising cookies, Google Analytics or the Meta Pixel.
The website may contain links to other websites, which are not operated by us. We therefore advise you to read their privacy policies. We are not responsible for the content or privacy practices of third-party websites or services.
10. Changes
We may update this privacy policy, for example with a new app version. The date at the top shows the latest change. We will notify you in the app of significant changes.
11. Contact
Questions about privacy? Email hallojames@bnbbutler.be.