Legal
Privacy Policy
BorrowBack is a free iPhone app for keeping track of items you lend. This Privacy Policy explains how BorrowBack (“BorrowBack,” “we,” “us,” or “our”) handles information when you use the app and this website. The short version: your loan records are stored on your device and may also be stored in your private iCloud account to keep them synchronized across your devices. We do not receive or have access to those records.
Information we collect
The app has no BorrowBack account, analytics, advertising, or developer-operated backend. It may use Apple's iCloud service to synchronize your data across devices signed in to your Apple Account. Apart from this optional synchronization, your app data remains on your device and is not sent to us:
- Loan records — item titles, borrower names, loan and due dates, return dates, and the information needed to keep active and archived loans available between app launches. These records are stored locally and may also be stored in a private iCloud database for synchronization. We never receive or have access to these records.
- Selected contacts — if you choose a borrower with the system contact picker, the app stores that contact's display name and identifier with the loan. BorrowBack cannot browse your contacts database and receives no details about contacts you do not select. If iCloud synchronization is used, the stored name and identifier may be synchronized as part of the loan record.
- Website log data — opening a page on this site produces standard server logs at our hosting provider, including your IP address, the requested URL, the time of the request, and your browser's user agent.
How we use information
iCloud data is used only to keep your loan records available and up to date across your devices. We do not use that data for analytics, advertising, profiling, or any other purpose and cannot access it.
Server log data is used only to deliver this website and keep it secure, on the basis of our legitimate interest under Art. 6(1)(f) GDPR. It is not combined with anything else and is not used to identify you or build a profile. We do not sell personal information or use it for advertising.
Service providers
This website is hosted by Vercel Inc., which processes the log data described above as our processor under a data processing agreement. Apple distributes the app through the App Store and handles that relationship under its own privacy policy. If iCloud synchronization is used, Apple also transmits and stores the synchronized app data in your iCloud account under Apple's terms and Privacy Policy. We do not operate the iCloud infrastructure and cannot access the private records stored there.
Retention and deletion
You can delete individual loan records in the app at any time. When iCloud synchronization is used, deletions may be synchronized across your devices. Deleting the app from one device removes its local data but may not delete records that remain in iCloud or on another device. You can manage iCloud storage and synchronization in your Apple device settings. Server logs expire according to our hosting provider's retention schedule. We hold no user database, so there is no app data for us to delete on your behalf.
Security and international processing
This site is served over encrypted connections. Because Vercel is based in the United States, the log data described above may be transferred to a third country; that transfer is safeguarded by the EU Standard Contractual Clauses included in Vercel's data processing agreement. Apple protects iCloud data according to its own security practices and may process it in the locations described in its Privacy Policy. No system is completely secure.
Your choices and rights
Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and objection, and you may lodge a complaint with a supervisory authority. In practice we hold no app data that identifies you and cannot access data stored on your device or in your private iCloud account. You can manage that data through the app, your device settings, and Apple. A request to us can therefore only concern the hosting log data described above.
Children's privacy
BorrowBack does not knowingly collect personal information from children or anyone else. The app sends no personal information to us; if iCloud synchronization is used, app data is stored by Apple in the user's iCloud account. BorrowBack contains no advertising, tracking, public sharing, or social features.
Contact us
For questions, feedback, or feature requests, please open a GitHub issue or email us at borrowback@itstimo.me.
Last updated: 12 September 2026