Legal

Privacy Policy

This policy explains what happens to your data when you use the Bojanote iOS app or this website. It is written to meet the requirements of the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).

1. Who is responsible

The controller within the meaning of Art. 4(7) GDPR is:

2. The short version

• Bojanote does not run its own user database. We never see your notes or your library.
• Your books, covers, chapter lists, and notes are stored in your own iCloud account via Apple CloudKit. They sync between your devices under Apple's terms.
• When you ask Bojanote to read a table of contents from a photo, that single photo is sent to OpenAI for text extraction and then discarded. We do not keep it.
• On this website, the only personal data we process is the email address you voluntarily enter to join the waitlist.

3. Data processed in the app

a) Content you create (books, photos, notes)

All content you create in Bojanote — book entries, cover images, chapter lists, and your per-chapter notes — is written to your private iCloud container via Apple CloudKit. This data never passes through a server operated by us. We have no technical ability to read it. Apple is the processor for this storage; its handling is governed by the Apple Privacy Policy and your iCloud settings.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract — providing the app's core function).

b) Photos sent for chapter extraction (OpenAI)

To turn a photo of a book's table of contents into a chapter list, the app sends that single image to the OpenAI API (operated by OpenAI, L.L.C., United States). OpenAI returns the extracted text; we pass it back to your device and it is stored only in your iCloud. We do not retain the image or the extracted text on our infrastructure. Per OpenAI's API data policy, data submitted to the API is not used to train their models by default.

This involves a transfer of personal data to a third country (USA). The transfer is covered by OpenAI's participation in the EU–US Data Privacy Framework and the EU Standard Contractual Clauses.

Legal basis: Art. 6(1)(b) GDPR (providing the feature you actively invoked).

Further info: openai.com/policies/privacy-policy

c) Analytics, tracking, advertising

None. Bojanote contains no third-party analytics, no advertising SDKs, and no tracking identifiers. The app does not use the IDFA.

4. Data processed on this website

This site is hosted on Cloudflare Workers. When you submit your email address on the waitlist form, we store it — together with submission time, your browser's user-agent string, the referring URL, and the two-letter country code provided by Cloudflare — in a Cloudflare KV store, for the sole purpose of notifying you when the app launches.

Legal basis: Art. 6(1)(a) GDPR (your consent, given by submitting the form). You can withdraw consent at any time by emailing us; we will delete your record.

Standard server logs (IP address, request, timestamp) may be processed transiently by Cloudflare for security and abuse prevention under Art. 6(1)(f) GDPR. See Cloudflare's privacy policy.

5. Consent by installation

By installing and using Bojanote, you acknowledge this policy and consent to the processing described above — in particular, the transmission of table-of-contents photos you explicitly capture to OpenAI for text extraction. If you do not agree, please do not install the app, or delete it; no data remains on our side because none was stored there.

6. Retention

• In-app content: kept in your iCloud for as long as you keep it there. Deleting Bojanote or signing out of iCloud removes it from our reach instantly, because we never had it.
• OpenAI requests: not retained by us; see OpenAI's policy for their short-term processing window.
• Waitlist email: kept until launch notification is sent, or until you ask us to delete it, whichever comes first.

7. Your rights under GDPR

You have the right to:

• access your personal data (Art. 15);
• rectification (Art. 16);
• erasure (Art. 17);
• restriction of processing (Art. 18);
• data portability (Art. 20);
• object to processing (Art. 21);
• withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal (Art. 7(3)).

To exercise any of these rights, email alex.reinicke@icloud.com. Because Bojanote holds no user database, we will usually ask you which device or which waitlist email the request relates to.

8. Right to lodge a complaint

You may lodge a complaint with a supervisory authority. In Austria, that is the Austrian Data Protection Authority (Datenschutzbehörde, Barichgasse 40–42, 1030 Wien, dsb.gv.at).

9. Children

Bojanote is not directed at children under 16. We do not knowingly process data of children.

10. Changes to this policy

We may update this policy to reflect changes to the app or the law. The "last updated" date at the top reflects the current version.

11. Contact

Questions about privacy: alex.reinicke@icloud.com.