Privacy Policy

With your permission, Borneo reads the following from Apple Health:

Borneo writes one kind of data back to Apple Health: the minutes of a breathing session you complete in the app, saved as a Mindfulness session.

Borneo also reads your step count from your iPhone's motion sensor (Core Motion) for the hourly "time to move" reminder.

None of this is transmitted anywhere. It is queried from Apple Health on the device, used to draw a screen or decide a mood, and discarded. It is not uploaded, not backed up by Borneo, not shared, and not sold. Borneo's app privacy declaration on the App Store therefore does not list health data as collected, because it is not.

The one exception is a challenge leaderboard, and only with your explicit consent — see §3.

You can withdraw access at any time in Settings › Privacy & Security › Health › Borneo. The app keeps working; the screens that need the data go empty.

If — and only if — you switch on "Connect calendar", Borneo reads your calendar events to find a free slot in your day and suggest a walk. Events are read on the device and never stored or transmitted. Turning the setting off stops the reading immediately. Borneo never creates, edits or deletes anything in your calendar.

A challenge is a shared step competition you create or join by link. It uses your own iCloud account's private storage, shared with the other participants through Apple's standard sharing mechanism (CKShare).

Nothing of yours is shared until you join, and joining is an explicit step: you open the challenge, read what it shares, and pick the name you want to appear under. If you join, what is written is:

• the name you chose for this challenge — anything you like, and not connected to your Apple ID, your device name or any other challenge you are in;
• your iCloud user record ID — an identifier Apple gives your account for this app. It is used for one thing: recognising which row on the leaderboard is yours, including after you reinstall the app;
• your steps on each day of the challenge's date range;
• your total steps over that range, and how many days you met the challenge's goal.

The daily figure is a change from earlier versions of Borneo, and it is a real one: a day-by-day number is more than a total. It is there because the challenge screen draws a day-by-day comparison between you and one other participant, which cannot be done from totals. It is still only a step count per day, for the dates of that challenge, and nothing else — no individual Health samples, no sleep, no heart rate, no location, and nothing from outside the challenge's dates. Everyone else in that challenge can see it, which is what a leaderboard is.

Leaving. You can leave a challenge at any time from its own page. It is one action: the challenge leaves your phone, and your row — your name, your totals and your daily figures — is deleted from the shared storage, so your steps stop being counted for it and the others stop seeing you.

Retention: a challenge and everything in it is deleted 30 days after its last day, automatically, and its page counts that date down for you once it is over. Only the person who created it can end it for everybody; when they do it is deleted immediately and completely — the whole shared container goes, with every participant's step data in it, and nothing is kept behind to mark that it existed. The others are still told it was ended rather than finding it silently gone: that notice is produced by each person's own phone, from what it remembers of the challenges it joined, not from anything left on the server.

On iPhones that support Apple Intelligence, Borneo can hold a short conversation and write a sentence or two about your week's activity. This runs on Apple's on-device foundation model. Your prompts and your statistics are processed on the iPhone itself. Nothing is sent to Apple's servers, to OpenAI, or to any other provider, and there is no Borneo server to send it to. On iPhones without Apple Intelligence the feature is simply absent.

Tapping share renders an image of your own statistics and hands it to the standard iOS share sheet. Where it goes from there is entirely your choice. Borneo does not upload it, does not keep a copy, and does not learn what you did with it.

Your goal, deadline, language, streak, honey and the list of apps you chose to block are stored on the device, in a container shared between the app, its widgets and its Screen Time extensions. This is ordinary local storage. It is included in your iPhone backup if you back your iPhone up, and it is destroyed when you delete the app.

Borneo uses Apple's Screen Time (Family Controls) framework to shield the apps you chose until you reach the day's goal. Apple's design means Borneo never learns which apps you picked. The system hands the app opaque tokens, not names, and the shielding is applied by iOS. Borneo cannot see, store or transmit your app usage, and it does not try to.

• No account, no sign-up, no password, no email address.
• No advertising, and no advertising identifier.
• No analytics, no crash reporting, no telemetry of any kind.
• No third-party SDKs. Borneo uses only Apple's own frameworks.
• No tracking, as the App Store defines it, and no data shared with data brokers.
• No sale of personal data, and no sharing for cross-context behavioural advertising.
• No profiling, and no automated decision-making with legal effects.

Borneo is not directed at children under 13 and does not knowingly collect anything from them. It has no public area and no way for one user to send anything to another: a challenge is visible only to the people its creator invited with a link.

Because there is no Borneo server, most of your rights are exercised directly in the app or through Apple, and they take effect immediately:

• Access and portability — your statistics live in Apple Health; export them from the Health app. Your challenges are visible in Borneo.
• Erasure — delete or leave a challenge in the app; delete the app to destroy all local data. To remove everything Borneo has ever stored in your iCloud account, use Settings › [your name] › iCloud › Manage Account Storage.
• Withdraw consent — revoke Health, Motion, Calendar, Notifications or Screen Time access at any time in iOS Settings.
• Objection and restriction — stop using the feature concerned; nothing further is written.

Under the GDPR, the lawful basis for the two features that transmit anything is your consent (Art. 6(1)(a)), given by choosing to create a challenge, agreeing to the on-screen prompt before your step totals are shared, or tapping share on a stats card. Everything else runs on your device on the basis of performing the service you asked for (Art. 6(1)(b)).

Data in Challenges is stored by Apple in its iCloud infrastructure under your own Apple Account and Apple's terms. Apple's privacy policy: apple.com/legal/privacy

You have the right to complain to a supervisory authority. In Germany this is the data protection authority of your federal state.

If this policy changes materially, the version published at this address is updated and the date at the top changes with it. The app's release notes will say so.

Questions about this policy and requests about your data go to that address.