Privacy policy

ArboToegang · last changed on 16 October 2026

ArboToegang is an app that lets you sign in with your phone instead of with a code. When you want to sign in somewhere, you get a notification and approve the request with your fingerprint or face. An optional feature also lets you scan documents and send them securely. Below you can read which data that requires, what we do with it and how long we keep it.

Who is responsible

Pro GeJeBa B.V., Bijlestaal 44 M, 1721 PW Broek op Langedijk (Chamber of Commerce no. 98805460) is responsible for processing the data described below. Questions about privacy can be sent to privacy@arbotoegang.nl.

If you use the app to sign in to the website of your employer, occupational health service or another organisation, that organisation manages your account on that website. For questions about that account, please contact that organisation. For the data the app itself uses, as described below, you can contact us.

What data the app uses

Data	Purpose
Device identifier and key	When you pair, our server creates a random device identifier and a secret key. The key is stored encrypted on your phone; we keep only an irreversible derivative (hash) of it. This is how we know an approval really comes from your phone.
Link to your account	The customer number the website uses for you, and which features are switched on for you. We do not receive a name or email address from the website.
Push address and device type	The address at which your phone receives notifications, and whether it is an iPhone or an Android device. Needed to send you a sign-in request.
Sign-in requests	Per request: the website, the time, the IP address and browser of whoever is trying to sign in, and your answer (approved or denied). You see this data in the app, so you can judge whether the request comes from you.
Scanned documents	Only if this feature is switched on for you. The photos are turned into a PDF on your phone, sent encrypted to our server and stored there with restricted access. On your phone the photos and the PDF are deleted immediately afterwards; they never reach your photo library.
Technical log	IP address, type of app or browser and time of requests to our server. Needed to detect abuse and to solve problems.

What the app does not do

Fingerprint and face are checked by your phone itself. The app is only told “succeeded” or “did not succeed”; we never receive biometric data.
The camera is only used to scan the pairing QR code and, if that feature is switched on, to photograph documents.
No advertising, no analytics or tracking services, no location, no access to your contacts or photos. We do not sell data.
A notification on your phone contains only a random request code. The app fetches the details only after it has been unlocked, over an encrypted connection.

Other parties

To deliver notifications and app updates we use:

Google Firebase Cloud Messaging – notifications to Android devices. Google receives the push address and the request code.
Apple Push Notification service – notifications to iPhones. Apple receives the push address and the request code.
Expo – checks whether there is an update when the app is opened. The app version and the device type are sent along.

These parties receive no name, email address, sign-in details or documents. Apart from this, we share data only when the law requires us to.

How long we keep data

Data	Retention
Pairing code (QR)	Valid for 5 minutes, deleted after 1 day
Sign-in requests	Valid for 90 seconds, deleted after 30 days
Technical log	180 days
Device pairing	Until you delete your account
Scanned documents	Until you delete your account

If you remove the pairing in the app, the app erases the key on your phone. Your phone can then no longer approve anything. We delete the registration on our server when you delete your account.

Test accounts in this environment

On m2.arbotoegang.nl you can try the app with a test account. For that we keep your name, email address, mobile number and an encrypted version of your password, plus your sign-in attempts (time, IP address and browser). We use only functional cookies: one to keep you signed in, which expires after an hour, and one that remembers your chosen language. We keep this data until you delete the account. You can do that yourself at Delete account.

Security

All connections are encrypted (HTTPS). We store keys and passwords only as an irreversible hash. Scanned documents are kept out of reach of the website and are accessible only to authorised administrators.

Your rights

You can ask us which data we hold about you, and have it corrected, deleted or transferred. You can also object to its use. To do so, email privacy@arbotoegang.nl; we respond within 5 working days. If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Children

The app is not intended for children under 16.

Changes

If we change this policy, we update the date at the top. For important changes we let you know through the app or the website.