Privacy Policy

The Borago Board mobile app ("App") is a thin client for the hosted service at https://board.boragosoft.com. It stores no board database on your device and does not run AI agents. Most personal data is processed by the hosted service — see the Web Privacy Policy, which this policy incorporates.

1. Data processed via the App

• Account data — the email and password you use to sign in (transmitted to the Service over TLS; the Service checks the password against a scrypt hash and holds it in memory only for that request, stores only the hash, and on the account's very first sign‑in also uses it there to open your secret data key so your recovery code can be issued, see the Web Privacy Policy §1 and §8). An authentication token is stored on your device to keep you signed in. You may keep more than one account signed in on the same device and switch between them from the App's menu; a token for each is stored on the device until you log that account out. The App itself does not currently request a notification permission from your device. If browser notifications are ever offered for the hosted board on this device (they are not at present), they would be delivered for the account currently in use, and switching accounts would re‑associate that push registration with the account you switch to (see the Web Privacy Policy §1).
• Content data — projects, tasks (including text/output that may contain code snippets), comments you view or edit, and, on a plan that includes attachments (Pro or Max, and the trial), attachment metadata and files, all synced through the hosted Service.
• Technical/security data — IP address and request metadata (for authentication rate‑limiting/abuse prevention) processed by the Service.
• Device permissions (only if you use the feature) — files/photos for attachments; the camera, to take a photo you then attach to a task or to scan a Borago Board sign-in code (either to link your desktop app to your account, or to sign in on this phone from a device where you are already signed in — the code identifies a pending sign-in and carries no password or access token, and the sign-in only completes when you approve it on the device that is already signed in). The camera runs only while that screen is open, behind the operating system's own permission prompt; frames are processed on the device and only a photo you choose to attach is uploaded. The App does not collect location or contacts, has no microphone access, and requests no notification permission today; if it gains push notifications, this policy and the store disclosures will be updated first.
• Unlocking with biometrics (optional, off unless you turn it on) — you can require Face ID, Touch ID or a fingerprint to open the App. The check is performed entirely by your device's operating system: we never receive, store or transmit your biometric data, and the App is told only whether the check passed. What the lock protects is the sign-in token already held on your device (§2); turning the setting off removes the requirement. Your device's biometric data is governed by Apple's or Google's own privacy terms, not by this policy.
• Diagnostic reports you choose to send — Settings → Diagnostics lets you send us a bug or error report from the App: your message and, if you include it, your browser identification string (the App keeps no log, so none is attached). Nothing is sent automatically, you see the exact payload first, and no account or device identifier is attached. We may analyse a report with an AI coding assistant, which transmits its content to the assistant's provider (currently Anthropic, PBC, United States) — see the Web Privacy Policy §1 and §4.

2. On‑device storage

Secrets stored on your projects (AI API tokens, Git credentials, environment variables) are held by the cloud service as ciphertext only, under a key Borago Soft never stores, and you can stop any of them syncing per project — see Web Privacy Policy §1a. A consequence worth knowing: because the service does not keep the key, secrets are viewable only in the desktop app.

If you set a project credential or environment variable from the App, the value you type is passed through the service to your own desktop app, which encrypts and stores it — it is never encrypted or stored by the App, and never kept by the service. A saved key or a self‑hosted service key can be entered only in the desktop app. It does reach the service in readable form for the moment it takes to forward it; see Web Privacy Policy §1a for the full description and the reason the desktop app remains the stronger place to enter one.

The App stores your session token and app preferences locally (in the app container / secure storage). It does not store your board data or secrets on the device.

3. What we do NOT do

• We do not run AI agents from the App or send your data to any AI provider (Anthropic, OpenAI, xAI, Google) from the App — that occurs only on your desktop peer, under your own key. The one exception is a diagnostic report you choose to send (§1), which we may analyse with an AI coding assistant.
• The App contains no third‑party advertising SDKs and, by default, no analytics/tracking. If analytics are added, this policy and the store labels will be updated first.

4. How data is used, shared, retained

Purposes, legal bases, sub‑processors (hosting, storage, email, payments), sharing, retention, international transfers, and security measures are as described in the Web Privacy Policy.

5. Your rights & account deletion

You have the rights described in the Web Privacy Policy (access, correction, deletion, portability, objection, complaint to a supervisory authority). You can delete your account from within the App, which initiates deletion of your account and content per that policy. The steps, what is deleted and what is kept are set out at https://boragoboard.com/delete-account/, which also works without the App installed. Requests: privacy@boragosoft.com.

6. App store data disclosures

We separately declare data handling in the Apple App Store "App Privacy" section and the Google Play "Data Safety" form. Those declarations are kept consistent with this policy.

7. Children

The Service is for adults: it is not directed to anyone under 18, account creation requires confirming you are 18 or older, and we do not knowingly collect data from anyone under 18.

8. Changes & contact

Updates will be posted with a new effective date; material changes will be notified in‑app or by email. Controller: Borago Soft Limited · privacy@boragosoft.com · 7a Garner Place, Glenfield, Auckland 0629, New Zealand. No EU/UK representative or DPO is appointed — direct requests to privacy@boragosoft.com.