Mobile app privacy policy

Last updated: 10 October 2026. This policy covers the BookEnu mobile app for iOS and Android. Polska wersja.

About the app

The BookEnu app is the client portal on your phone: you send documents to your accountant, read their messages and see your invoices. It is for clients of accounting practices that use BookEnu. You sign in with the account your accountant invited you to; the app does not create accounts.

The app itself holds very little. Once you choose a country it opens that country's BookEnu portal, and everything you do there is handled by the portal, exactly as it would be in a web browser. This policy explains what the app adds on top, and who is responsible for what.

Who is responsible

One app serves two BookEnu services, each run by a different company:

The app is published by Kiran sp. z o.o., which is why that name appears as the developer in the App Store and on Google Play whichever country you choose. Kiran sp. z o.o. publishes the app and operates its notification delivery; for clients of the United Kingdom portal it does so on behalf of EnuSoft Ltd, under a written agreement between the two companies.

Your accountant decides what bookkeeping records are kept about you and why. For the documents and figures in the portal, your accounting practice is the data controller, and the company running the portal processes them on the practice's instructions.

What the app handles

What the app does not do

• No advertising, and no advertising identifiers.
• No analytics or usage tracking, and no tracking across other apps or websites.
• No access to your location, contacts, microphone or calendar.
• No selling or renting of personal data.

Push notifications

If you allow notifications, the app registers your phone with the portal you signed in to. When your accountant sends you a message, your phone shows the name of the practice and the subject of the message. The body of the message is never put in a notification; you read it in the app after signing in. A number on the app icon shows how many messages are unread.

You can turn notifications off at any time in your phone's settings. Signing out removes your phone from the portal, so it stops receiving notifications for that account.

Lawful bases

• Keeping you signed in and showing your portal - performance of the service you use through your accountant.
• Push notifications - your consent, given when you allow notifications on your phone and withdrawn by turning them off.
• Camera and photo library - your consent, given through your phone's permission prompt, and used only when you start an upload.
• Security and preventing misuse - our legitimate interest in keeping the service safe.

Who else receives data

• Google (Firebase Cloud Messaging) - delivers push notifications to Android phones and passes them to Apple for iPhones. It receives the notification token and the text of the notification.
• Apple (Apple Push Notification service) - delivers push notifications to iPhones.
• The providers used by your portal - hosting, email and similar, as listed in that portal's privacy policy.

The App Store and Google Play handle the download itself under Apple's and Google's own privacy policies; we do not receive your store account details.

International transfers

Personal data moves between the United Kingdom and Poland where the two companies above work together, which the UK and the EU each treat as providing adequate protection. Google and Apple may process notification data outside the UK and the European Economic Area; where they do, the transfer relies on an adequacy decision (including the EU-US Data Privacy Framework and its UK extension) or on standard contractual clauses.

Deleting your data

• Sign out to remove your phone's notification registration and the files the app downloaded.
• Remove the app to delete everything it stored on your phone.
• Delete your portal account in the portal under Settings, "Delete account". You can do this in the app or in a browser.
• Records your accountant holds about you are kept or deleted by your accounting practice, which may be required by law to keep them for a set period. Ask your accountant, or contact us and we will pass the request on.

Your rights

You have the right to access your personal data, have it corrected or erased, restrict or object to its use, receive it in a portable form, and withdraw consent at any time. To exercise these rights, contact the company that runs your portal:

• United Kingdom portal - EnuSoft Ltd, info@bookenu.com. You can complain to the Information Commissioner's Office at ico.org.uk.
• Poland portal - Kiran sp. z o.o., info@bookenu.pl. You can complain to the President of the Personal Data Protection Office (UODO) at uodo.gov.pl.

For anything about the app as such, write to either address and we will make sure it reaches the right company.

Children

The app is a business tool for clients of accounting practices. It is not intended for children, and we do not knowingly collect their personal data.

Changes to this policy

We will update this page when the app changes what it does with personal data, and change the date at the top.

Contact

Questions about this policy? Email info@bookenu.com (United Kingdom) or info@bookenu.pl (Poland).