Privacy Policy

Information we collect

The app has no BorrowBack account, analytics, advertising, or developer-operated backend. BorrowBack uses Apple's iCloud service automatically when it is enabled for the app in your device settings. There is no separate iCloud switch in BorrowBack; synchronization is controlled through your Apple device settings. Your app data is not sent to us:

• Loan records — item titles, borrower names, loan and due dates, return dates, optional notes, and the information needed to keep active and archived loans available between app launches. These records are stored locally and may also be stored in a private iCloud database for synchronization. We never receive or have access to these records.
• Selected contacts — if you choose a borrower with the system contact picker, the app stores that contact's display name and identifier with the loan, plus one phone number if the contact has one. If the contact has multiple phone numbers, you choose which number to store. BorrowBack cannot browse your contacts database and receives no details about contacts you do not select. If iCloud synchronization is used, the stored name, identifier, and phone number may be synchronized as part of the loan record.
• Website log data — opening a page on this site produces standard server logs at our hosting provider, including your IP address, the requested URL, the time of the request, and your browser's user agent.
• Website analytics — this website uses Vercel Web Analytics to record page views. Data may include the page URL, referrer, filtered query parameters, timestamp, approximate location, and browser, operating system, and device type. Vercel provides aggregated statistics and uses a request-derived hash to distinguish visitors without cookies or identification across websites. Loan records and selected contacts are not part of this website analytics.

How we use information

For a loan linked to a contact with a stored phone number, you can open a reminder sheet with a suggested message containing the item title and due date. You can edit the text, copy it, or choose Send. Send passes the stored phone number and edited message to the system SMS/iMessage composer. You can edit or cancel the message there; it is sent only when you confirm sending in that composer. If you send it, the message is shared with the recipient through Apple's iMessage service or your mobile carrier, depending on the message type. We do not receive the phone number or message content.

Choosing Copy places only the edited message text on the system clipboard so you can paste it into another app. It does not copy the stored phone number or send a message. The text becomes available for pasting outside BorrowBack. Reminder drafts are not saved with your loan records or synchronized through BorrowBack's iCloud database. We do not receive the draft or clipboard content.

iCloud data is used only to keep your loan records available and up to date across your devices. We do not use that data for analytics, advertising, profiling, or any other purpose and cannot access it.

Server log data is used only to deliver this website and keep it secure, on the basis of our legitimate interest under Art. 6(1)(f) GDPR. It is not combined with anything else and is not used to identify you or build a profile. We do not sell personal information or use it for advertising.

Website analytics helps us understand which pages people visit and improve the site. We do not use it for advertising or combine it with app data. Vercel describes its data handling in its Web Analytics privacy documentation.

Service providers

This website is hosted by Vercel Inc., which also provides Web Analytics and processes the website log and analytics data described above under a data processing agreement. Apple distributes the app through the App Store and handles that relationship under its own privacy policy. If iCloud synchronization is used, Apple also transmits and stores the synchronized app data in your iCloud account under Apple's terms and Privacy Policy. We do not operate the iCloud infrastructure and cannot access the private records stored there.

Retention and deletion

You can delete individual loan records in the app at any time. When iCloud synchronization is used, deletions may be synchronized across your devices. Deleting the app from one device removes its local data but may not delete records that remain in iCloud or on another device. You can manage iCloud storage and synchronization in your Apple device settings. Server logs expire according to our hosting provider's retention schedule. We hold no user database, so there is no app data for us to delete on your behalf.

Vercel discards the analytics visitor session after 24 hours; this does not mean all page-view statistics are deleted after 24 hours. Analytics reporting windows depend on the Vercel plan, and Vercel may retain statistics beyond that window, as explained in its reporting-window documentation.

Security and international processing

This site is served over encrypted connections. Because Vercel is based in the United States, website log and analytics data may be transferred to a third country; that transfer is safeguarded by the EU Standard Contractual Clauses included in Vercel's data processing agreement. Apple protects iCloud data according to its own security practices and may process it in the locations described in its Privacy Policy. No system is completely secure.

Your choices and rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and objection, and you may lodge a complaint with a supervisory authority. In practice we hold no app data that identifies you and cannot access data stored on your device or in your private iCloud account. You can manage that data through the app, your device settings, and Apple. A request to us can therefore concern the website log and analytics data described above. We cannot identify an individual visitor in the aggregated analytics statistics available to us.

Children's privacy

The BorrowBack app sends no personal information to us; if iCloud synchronization is used, app data is stored by Apple in the user's iCloud account. BorrowBack contains no advertising, tracking, public sharing, or social features.

Contact us

For questions, feedback, or feature requests, please open a GitHub issue or email us at borrowback@itstimo.me.