Legal

Privacy Policy

Information we collect

The app has no BorrowBack account, analytics, advertising, or developer-operated backend. It may use Apple's iCloud service to synchronize your data across devices signed in to your Apple Account. Apart from this optional synchronization, your app data remains on your device and is not sent to us:

How we use information

iCloud data is used only to keep your loan records available and up to date across your devices. We do not use that data for analytics, advertising, profiling, or any other purpose and cannot access it.

Server log data is used only to deliver this website and keep it secure, on the basis of our legitimate interest under Art. 6(1)(f) GDPR. It is not combined with anything else and is not used to identify you or build a profile. We do not sell personal information or use it for advertising.

Service providers

This website is hosted by Vercel Inc., which processes the log data described above as our processor under a data processing agreement. Apple distributes the app through the App Store and handles that relationship under its own privacy policy. If iCloud synchronization is used, Apple also transmits and stores the synchronized app data in your iCloud account under Apple's terms and Privacy Policy. We do not operate the iCloud infrastructure and cannot access the private records stored there.

Retention and deletion

You can delete individual loan records in the app at any time. When iCloud synchronization is used, deletions may be synchronized across your devices. Deleting the app from one device removes its local data but may not delete records that remain in iCloud or on another device. You can manage iCloud storage and synchronization in your Apple device settings. Server logs expire according to our hosting provider's retention schedule. We hold no user database, so there is no app data for us to delete on your behalf.

Security and international processing

This site is served over encrypted connections. Because Vercel is based in the United States, the log data described above may be transferred to a third country; that transfer is safeguarded by the EU Standard Contractual Clauses included in Vercel's data processing agreement. Apple protects iCloud data according to its own security practices and may process it in the locations described in its Privacy Policy. No system is completely secure.

Your choices and rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and objection, and you may lodge a complaint with a supervisory authority. In practice we hold no app data that identifies you and cannot access data stored on your device or in your private iCloud account. You can manage that data through the app, your device settings, and Apple. A request to us can therefore only concern the hosting log data described above.

Children's privacy

BorrowBack does not knowingly collect personal information from children or anyone else. The app sends no personal information to us; if iCloud synchronization is used, app data is stored by Apple in the user's iCloud account. BorrowBack contains no advertising, tracking, public sharing, or social features.

Contact us

For questions, feedback, or feature requests, please open a GitHub issue or email us at borrowback@itstimo.me.