PRIVACY POLICY — BORED Effective 18 August 2026 THE SHORT VERSION Bored has no accounts, no sign-up and no analytics. What you do in the app — the tasks you finish, the notes you write, the photos you take, your streaks and your puzzle times — is written to your own device and stays there. We cannot read any of it, because it never reaches us. There is no server holding your history. Three things do leave your phone, and only in the circumstances described below: an approximate location when you ask the app to use your surroundings, a purchase receipt when you buy a membership, and an ordinary web request when you open a link the app suggests. Each one is explained in full further down. We do not sell your data. We do not share it for advertising. There is no advertising in this app. 1 · WHO WE ARE Anıl köylü, the developer of Bored, is the data controller for the limited processing described in this policy. Contact: anilsannin@gmail.com 2 · WHAT STAYS ON YOUR DEVICE All of the following is stored locally on your iPhone or iPad and is never transmitted anywhere: · Your task history — what you were suggested, what you did, what you skipped, how long it took, and whether your phone was away. · Your preferences — energy, available time, place, chosen persona, notification and camera settings. · Tasks you marked as loved or blocked. · Time Capsule notes, including their unlock dates. · Photos you choose to take as proof of a finished task. · Streaks, badges, and your puzzle solve times. This data is held in the app's own private storage inside its iOS container. It is included in your device backups if you back up your device, in which case it is subject to Apple's terms rather than ours — we have no access to your backups. It is deleted when you delete the app. You can also clear it from inside the app at any time: Settings offers separate controls for erasing your history and for deleting the proof photos, and deleting the photos deliberately leaves the record that you did the tasks. 3 · LOCATION — ONLY WHEN YOU ASK Bored never accesses your location in the background and never tracks your movement. Location is requested only when you tap "Use my surroundings" on the entry screen, and iOS will ask your permission the first time. If you decline, the app carries on with everything except the two location-dependent signals below. When you do ask, your position is used for exactly two lookups: 3.1 WEATHER — sent to Open-Meteo Your coordinates are rounded to two decimal places — roughly one kilometre — and sent to Open-Meteo (open-meteo.com) to fetch the current temperature and conditions. Nothing identifying you is attached: no device ID, no account, no name, nothing that links one request to another. Open-Meteo's own privacy policy governs what it does with the incoming request: https://open-meteo.com/en/terms 3.2 NEARBY PLACES — handled by Apple The app asks iOS whether there is a park, a library, a café or similar within walking distance, so it can avoid suggesting things that make no sense where you are. This uses Apple's own Maps services on your device, and Apple's Location Services and Privacy policy applies: https://www.apple.com/legal/privacy/data/en/location-services/ Your location is not stored by the app. It is used for these two lookups and discarded. The answers kept in memory are coarse — "it is raining", "there is a park nearby" — not coordinates. You can revoke the permission at any time in iOS Settings → Privacy & Security → Location Services → Bored. 4 · CAMERA If you allow it, the camera is used only when you tap to photograph a task you just finished. Photos are written to the app's private storage on your device. They are not uploaded, not backed up to us, not analysed, and not attached to anything that leaves the phone. You can delete all of them from Settings inside the app. Bored does not read your photo library. 5 · MOTION AND PROXIMITY SENSORS The "Phone Down" mode uses the accelerometer, the proximity sensor and the screen state to work out whether your phone is actually out of sight while a timer runs, and to count how many times you picked it up. All of this happens on the device, in memory, while that one timer is running. The sensors are released the moment the timer stops. Only the summary — whether the phone was away, and how many pickups — is written to your local history. None of this sensor data is transmitted. 6 · PURCHASES Bored works without paying. If you buy a membership, the purchase itself is handled by Apple; we never see your payment details, your card, or your Apple Account credentials. To know whether your membership is active, the app uses RevenueCat, Inc. as its subscription infrastructure. RevenueCat receives: · your App Store purchase receipt, and · an anonymous app user ID that RevenueCat generates itself. That anonymous ID is not linked to your name, your email or your Apple Account, because the app does not have any of those. RevenueCat also receives technical information that accompanies any network request, such as your IP address and device model. RevenueCat acts as our processor for this. Their privacy policy: https://www.revenuecat.com/privacy Apple's own handling of the transaction is governed by the Apple Media Services Terms and Apple's Privacy Policy. 7 · LINKS THE APP SUGGESTS The Internet Gems mode offers a hand-picked list of links. Opening one loads that page in Safari View Controller — a real browser inside the app. From that moment you are visiting a third-party website, which will see your IP address and may set its own cookies, exactly as if you had typed the address yourself. We have no control over and no responsibility for those sites, and this policy does not cover them. The same applies to any audio stream you play in Ambient mode: the station's own server sees the request. 8 · NOTIFICATIONS Notifications are scheduled and delivered locally by iOS. There is no push server, no device token sent anywhere, and no way for us to send you anything. The timer alarm and the trial reminder are both created on your device by the app itself. 9 · WHAT WE DO NOT DO · No account, no sign-up, no email address collected. · No analytics or crash-reporting SDK. We do not know how many screens you opened, which tasks you liked, or that you opened the app at all. · No advertising SDK and no advertising identifier (IDFA). The App Tracking Transparency prompt never appears because there is nothing to track. · No tracking across apps or websites, by us or by anyone on our behalf. · No sale or sharing of personal information as those terms are defined under the California Consumer Privacy Act. · No profiling and no automated decision-making with legal effect. 10 · LEGAL BASES (EEA AND UK) Where the GDPR or UK GDPR applies: · Location lookups (section 3) — your consent, given through the iOS permission prompt and withdrawable at any time in iOS Settings. · Camera (section 4) — your consent, on the same basis. · Purchase verification (section 6) — necessary for the performance of the contract that lets you use a paid membership, and our legitimate interest in preventing fraudulent entitlements. Everything else stays on your device and involves no processing by us. 11 · RETENTION We hold no personal data, so we retain none. Data on your device persists until you erase it in the app or delete the app. RevenueCat retains purchase records for as long as needed to service the subscription and to meet Apple's and its own legal obligations; see their policy. 12 · YOUR RIGHTS Because we do not hold your personal data, most access, correction, portability and erasure requests are things you can satisfy yourself, immediately, from inside the app or from iOS Settings — and that is a deliberate design choice, not an evasion. For the purchase data held by RevenueCat, you can write to us at the address in section 1 and we will pass the request on. If you are in the EEA or the UK you may lodge a complaint with your local supervisory authority. If you are in Türkiye, the KVKK grants you equivalent rights and you may apply to the Kişisel Verileri Koruma Kurumu. 13 · CHILDREN Bored is rated 4+ but it is not directed at children under 13, and it is not distributed in the App Store's Kids Category. We do not knowingly collect personal information from children. Since the app collects no personal information from anyone, there is nothing here for a parent to request the deletion of beyond what deleting the app removes. 14 · INTERNATIONAL TRANSFERS The two services that receive anything — Open-Meteo and RevenueCat — operate servers outside Türkiye and may process requests in the European Union and the United States. Where the GDPR applies, those transfers rely on the European Commission's Standard Contractual Clauses or an applicable adequacy decision. 15 · SECURITY On-device data sits inside the app's sandboxed iOS container, protected by the device's own encryption and passcode. Every network request the app makes uses HTTPS. No system is perfectly secure, but the strongest protection here is structural: there is no central database of user activity to breach, because we never built one. 16 · CHANGES TO THIS POLICY If this policy changes materially, the new version will be published at this address with a new effective date, and the app will be updated to link to it. Continuing to use Bored after a change means you accept the revised policy.