Privacy policy
Controller
Noel Tim Geldschläger, Dietrich-Bonhoeffer-Straße 6, 70794 Filderstadt, Germany. Email: noel@boocord.com; phone: +49 (0) 151 29004766. This policy describes the native apps and the web version of Boocord Boards.
Content and settings on your device
Boards, documents, tasks, tables, drawings, images, attachments, profiles you create and settings are stored on your device for the app features you choose. The native apps use their application storage; the web version uses IndexedDB and browser storage. A profile is not a public account. Without sync enabled, your board content is not sent to our server. Processing is necessary to provide the application (Article 6(1)(b) GDPR). Necessary device storage is used under Section 25(2)(2) TDDDG. Content remains until you delete it. Browser settings or storage cleanup can also remove browser data. Uninstalling may remove application data; system backups depend on your device settings. The native app retains one previous board version to recover from damaged writes. Deleting a board also removes that version’s content; exported files or system backups created separately must be managed separately.
Web hosting
Requests to boards.boocord.com cause the web server to process connection data needed to deliver and secure the website, including IP address, time, requested address, browser information and response status. The legal basis is Article 6(1)(f) GDPR. According to the existing hosting configuration, this website uses GERLACH SYSTEMS – SynHost, Adlerstraße 65, 14612 Falkensee, Germany, with servers in Frankfurt am Main. Logs are retained only as required for operation and investigation of security incidents. Operators of self-hosted installations determine their own hosting, logging and retention and must provide separate information.
Fonts, icons and tracking
Manrope, Inter, Material Symbols and app graphics are bundled with the app or delivered by the same web server. Loading them does not contact Google Fonts or an external icon CDN. The Apple apps also use operating-system symbols and input features. Boocord Boards includes no analytics SDKs, advertising trackers or tracking cookies. It performs no advertising profiling or automated decisions with legal effect. Necessary browser storage supports settings, content and sync that you configure.
Optional iCloud sync
When you enable iCloud sync in a native app, boards, attachments, profiles, workspaces and the identifiers, timestamps and deletion records needed for sync are stored in your iCloud Drive area. Apple processes account and connection data under its privacy terms. Your own Apple Account is required. The web version does not access iCloud Drive directly. Sync is provided at your request under Article 6(1)(b) GDPR and can be disabled at any time. Disabling sync does not delete content already stored in the cloud. Management and deletion of iCloud data and backups also depend on your Apple settings. For Apple’s processing, recipients and potential transfers outside the EEA, see https://www.apple.com/legal/privacy/.
Optional self-hosted sync server
When you configure a server address and access key, your content, including attachments and profiles, plus technical identifiers, revisions, timestamps and deletion records is transmitted to that server. The native app keeps the key in the device Keychain; the web version stores it in the browser so requested sync can continue after a restart. Keys are excluded from exported board backups. HTTP and HTTPS are supported. HTTPS encrypts transport; HTTP transmits content and access keys without encryption. Board content is not end-to-end encrypted; the server operator can access stored content. Your chosen operator is responsible for its server, access logs, location, processors and backups. Using someone else’s server does not give us access to its content. For servers outside the EEA, consult that operator’s information on international transfers. The purpose and legal basis are the cross-device sync you request (Article 6(1)(b) GDPR). Disabling sync does not remove server data. Deletion in an actively synced library is transmitted on the next successful sync. Deletion records remain to prevent older devices from restoring removed items. The server operator can delete accounts and related data; existing backups are removed according to its retention policy. The operator can revoke or replace access keys.
Files, photos, camera and stylus
Import and export process files you select. If you choose iCloud Drive or another storage provider as a destination, that provider processes the file under its terms. Photo and file access uses selection dialogs you open. The camera is used only for a document scan you initiate. Stylus input and drawings are stored as document content. The legal basis is Article 6(1)(b) GDPR. You can manage system permissions in device settings.
Links and previews
When you insert or update a link, the native app may use Apple LinkPresentation to request the destination and retrieve a title and preview image. The destination receives necessary request data, including your IP address and the requested URL; linked image resources may also be retrieved. Retrieved data is stored in the board. The new web version creates link cards from the address and title you supply without automatically querying Microlink, Google favicons or another metadata service. Deliberately opening a link is subject to the destination provider’s terms. Depending on the destination, processing outside the EEA may occur. The legal basis for a preview you request is Article 6(1)(b) GDPR.
Contact and support
If you contact us, we process your email address, message and voluntary information to answer your request. The legal basis is Article 6(1)(b) GDPR for contract-related enquiries and Article 6(1)(f) GDPR for other correspondence, based on our interest in appropriate communication. We retain this information for handling the enquiry and applicable legal retention duties. Please provide only content needed for your request.
Your rights
Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction, portability and objection under Articles 15–21 GDPR. Where processing is based on consent, you may withdraw it for the future. You may object to processing based on legitimate interests for reasons relating to your particular situation. Contact noel@boocord.com. For data on a sync server you selected, also contact its operator; for data held only on your device, use the app’s deletion and export functions. You may complain to a data protection authority, including the LfDI Baden-Württemberg, Postfach 10 29 32, 70025 Stuttgart, Germany, poststelle@lfdi.bwl.de; see https://www.baden-wuerttemberg.datenschutz.de/beschwerde/.
Updates
We update this information when the described features or legal requirements change. The version shown in the app includes its update date.