Boker
§ 1
Who we are
Boker is a daily planner app for iPhone, iPad and Android. It is made and run by The Ark Technology Services Pty Ltd (ABN 49 647 336 687), an Australian company (“we”, “us”). We are responsible for the personal information described in this policy.
This policy covers the Boker apps, the Boker service they connect to, and this website. If you have a question about it, email support@getboker.app.
§ 2
What we collect
Your account
- Your name (optional if you use Sign in with Apple) and email address.
- Your password, which we store only as a one-way hash. We can’t read it.
- If you sign in with Apple or Google, the account ID they give us for you. We don’t store Apple’s sign-in tokens.
- Your settings: time zone, currency, the hours your day starts and ends, and which features you’ve switched on or off.
What you put in Boker
Your routines and their runs, habits and their logs, tasks, events, reminders, expenses, budgets and the receipt photos you attach, projects and boards, shopping lists and trips, and handwritten notes (on Apple devices). This is stored on your device and on our servers, so it stays in sync across your devices and survives a lost phone.
Your subscription
Whether you’re in your free month or subscribed, which plan, and when it renews or ends. This comes from Apple or Google through RevenueCat. We never see your card or bank details.
Your devices
A push token for each device you sign in on, its platform and app version. We use these only for silent sync messages and account notices.
Usage and crash data, if you allow it
The apps send crash reports and simple usage events (for example, that a screen was opened) to Google Firebase Crashlytics and Analytics. These are tied to a random installation ID, never to your name, email or Boker account, and never include what you’ve written. They are on by default. Turn them off in Settings → Privacy → Share usage and crash data.
Security and service records
- Server logs: IP address, time, the request made and any error. We use these to keep the service running and secure.
- App attestation: when you sign in, create an account or use AI capture, the app sends a token from Firebase App Check (using Apple App Attest or Google Play Integrity) that proves the request comes from a genuine copy of Boker.
§ 3
AI capture
When you type into the capture box, Boker first tries to understand the line itself. Lines it can read on its own, such as anything starting with $, ! or +, are never sent to Anthropic.
For anything else, if AI capture is on, our server sends to Anthropic’s Claude API:
- the single line you just typed, and
- a short context note: today’s date, your time zone and currency, and the names of your expense categories, accounts, shopping lists, projects, habits and routines (at most 20 of each). No amounts, no history and no other content.
Claude suggests what the line is. You see a draft and nothing is saved until you confirm it. Anthropic processes this for us as a service provider and, under its commercial terms, does not use it to train its models.
We don’t keep the text you typed. We keep a record of each capture’s outcome (the type suggested, how long it took, how many tokens it used and whether you changed it) for 90 days, to keep costs and quality in check. Your handwritten notes, receipt photos and exports are never sent to Anthropic.
AI capture is explained the first time you use it. To turn it off, go to Settings → AI capture. Boker keeps working without it.
§ 4
What we don’t collect
- Your location, contacts, photos library (other than receipts you choose to attach), microphone or calendar.
- An advertising identifier. Boker shows no ads and doesn’t track you across other apps or websites.
- Your app-lock PIN, Face ID or fingerprint. Those checks happen on your phone and never reach us.
This website sets no cookies and runs no analytics or tracking scripts.
§ 5
How we use your information
- To run Boker: store your data, sync it between your devices, and show it back to you.
- To sign you in, confirm your email with a 6-digit code, and keep your account secure.
- To send emails you need: sign-in codes and important notices about your account or subscription.
- To send silent push messages that tell your other devices to sync. These carry no content.
- To check your subscription, and to make sure the free month is given once per person.
- To fix crashes and understand, in aggregate, which parts of the app are used.
- To prevent abuse and meet our legal obligations.
We don’t use your information for advertising, we don’t build profiles to sell, and we don’t sell or rent it to anyone.
If you are in the European Economic Area or the UK: we rely on contract to provide the service you signed up for, on legitimate interests for security, crash reports and usage statistics (which you can switch off), on your choice for AI capture (which you can switch off), and on legal obligation where the law requires us to keep or share something.
§ 7
Where it’s stored and how it’s protected
- Your account and content are stored on Microsoft Azure in Australia (Australia East), encrypted in transit and at rest.
- Every request is limited to your own account at the database level, not just in our code.
- Passwords, sign-in codes and refresh tokens are stored only as hashes.
- On your phone, sign-in tokens are kept in the iOS Keychain or Android’s encrypted Keystore. Your Boker data is kept in the app’s private storage so it opens without a connection. Home-screen widgets read a small snapshot and never your sign-in.
No system is perfectly secure. If a breach is likely to cause you serious harm, we will tell you and the regulator as the law requires.
§ 8
How long we keep it
- Your account and content: for as long as you have an account. When you delete an item, we keep a deleted marker so your other devices remove it too. When you delete a receipt photo, the file is erased within 7 days.
- AI capture records: 90 days (section 3).
- Server logs: up to 90 days.
- Database backups: rolling, encrypted backups that expire within 35 days.
- Usage and crash data: kept by Google under Firebase’s retention settings, and never linked to your account.
§ 9
Deleting your account
Delete your account in the app at Settings → Account → Delete account, or follow the steps on our account deletion page. Deleting is real, not a deactivation: your content, sign-in details, devices and account are erased from our database straight away. If you signed in with Apple, we also revoke Boker’s access at Apple.
A few things remain, and only these:
- A keyed hash of your email address and of any Apple or Google account ID, stored with the date your free month ended, so the free month can’t be restarted with a new account. A keyed hash can’t be turned back into your email, and nothing else about you is kept with it.
- Receipt photo files, which are erased within 7 days.
- Database backups and server logs, which expire on the schedule in section 8.
- Purchase records held by Apple or Google, and by RevenueCat under an ID that no longer identifies you to us.
Deleting your account does not cancel a subscription. Cancel it in your App Store or Google Play subscription settings.
§ 10
Your choices and rights
- See and take your data: export everything from Settings → Export your data, or ask us for a copy.
- Correct it: edit anything in the app, or ask us.
- Delete it: see section 9.
- Switch things off: AI capture, usage and crash data, and account notices each have a switch in Settings.
- Object or restrict: where the GDPR or similar laws apply, you can object to or ask us to restrict some uses, and ask for your data in a portable format.
Email support@getboker.app to make a request. We will reply within 30 days and may need to confirm it’s you. We won’t treat you differently for using these rights.
If you’re unhappy with how we’ve handled your information, tell us first and we’ll try to fix it. You can also complain to the Office of the Australian Information Commissioner (oaic.gov.au) or to the data protection authority where you live.
§ 11
Children
Boker is not meant for children under 13, and you must be at least the age of digital consent where you live to use it. If you believe a child has given us their information, email us and we will delete it.
§ 12
Changes to this policy
We will update this page when the way we handle information changes, and change the date at the top. If a change matters, for example a new kind of data or a new provider, we will tell you in the app or by email before it takes effect.
§ 13
Contact us
The Ark Technology Services Pty Ltd
Toongabbie, NSW 2146
support@getboker.app