Boketto Studio LLC, an Illinois limited liability company ("Boketto," "we," "us"), publishes the Boketto iOS app (the "App"). This Privacy Policy explains what information the App accesses, what we collect, how we use it, and the choices you have. If you do not agree with this Policy, please do not use the App.
We designed Boketto so that the things people are most sensitive about — their photos — stay on their device. The sections below describe exactly what does and does not happen.
When you grant Photos access during onboarding, the App reads your Photos library to compute, on your device:
These values are stored in a private SQLite database inside the App's sandbox on your device (Application Support/aesthetic_picker.sqlite). The underlying image data is never uploaded to Boketto or to any third party as part of the App's normal operation.
The App requests read access to Photos (NSPhotoLibraryUsageDescription) and, only if you ask the App to save a result, write access (NSPhotoLibraryAddUsageDescription). Boketto never modifies, deletes, or rearranges photos in your library.
iCloud-resident photos that are not downloaded to the device are skipped.
The categories of information we — or service providers acting on our behalf — actually collect are limited to the following:
If, and only if, you grant analytics consent on the onboarding analytics screen (or later toggle "Help improve Boketto" on in Settings → About), the App initializes our analytics provider (PostHog) and sends product-usage events. Examples of events include:
Until you grant consent, events are buffered locally in memory and dropped if you decline. We do not initialize the analytics SDK and do not transmit any data to PostHog before consent.
We do not send raw image data, image thumbnails, file names, the contents of your Photos library, or anything that could be used to reconstruct your photos. Aggregate or numeric signals about a ranking run (for example, query palette colors, the size of the candidate pool, or asset identifiers used to track de-duplication within a session) may be included in events. These are useful for product debugging and do not contain photographic content.
The App offers an in-app subscription ("Boketto Pro"). When you purchase, restore, or manage a subscription:
If you have analytics consent enabled, our crash-reporting provider (Sentry) may receive technical diagnostic information when the App crashes or hits an unexpected error: the stack trace, App and OS version, device model, and a random installation identifier. Stack traces do not include the contents of your Photos library.
If you tap "Give feedback" in Settings, the App opens our public feedback board (UserJot) in an in-app browser. Anything you choose to post there is processed by UserJot under its own terms and is, by design, publicly visible.
If you tap "Leave a review," the App opens the App Store. Any review you write is processed by Apple under its terms.
We do not see contact information for you unless you choose to email [email protected], in which case we receive the email address you sent from and the contents of your message.
A future version of the App may briefly transmit image embeddings (numeric vectors derived from your photos) to a server we operate for the purpose of computing search results, and discard them immediately after computing the result. This is not active in the current version. When and if this capability ships, this Policy will be updated and you will be informed in-app before the feature is enabled.
We use the limited information described in Section 3 to:
We do not use any of this information to build advertising profiles, sell to data brokers, train third-party machine-learning models, or target ads.
We share information only as described here:
We do not sell personal information for money, and we do not "share" personal information for cross-context behavioral advertising as those terms are used under U.S. state privacy laws.
If you are a resident of California or another U.S. state with a comprehensive consumer privacy law, you may have the right to:
To exercise a right, email [email protected]. Because the App is anonymous, we may have no information that is reasonably linkable to you; in that case we will let you know and, where appropriate, direct you to your device-side controls.
If you are in the European Economic Area, the United Kingdom, or Switzerland, you have rights of access, rectification, erasure, restriction, portability, and objection in respect of your personal data, and a right to lodge a complaint with your local supervisory authority. The legal basis for our processing is your consent (for analytics) and our legitimate interests in operating, securing, and improving the App (for crash reporting and subscription management). Contact [email protected] to exercise any of these rights.
Boketto Studio LLC is based in the United States. Our service providers (PostHog, RevenueCat, Sentry, Apple) may process information in the United States and in other countries. Where applicable, we rely on Standard Contractual Clauses or equivalent mechanisms for cross-border transfers.
We use commercially reasonable administrative, technical, and organizational measures to protect information. Most user data simply never leaves your device, which is the strongest protection available. No method of electronic transmission or storage is 100% secure, however, and we cannot guarantee absolute security.
The App is not directed to children under 13, and we do not knowingly collect personal information from children under 13 (or under 16 in the European Economic Area). If you believe a child has provided us with personal information, please contact us and we will delete it.
The App integrates the following third-party services. Each is governed by its own privacy practices:
The Firebase SDK is linked into the App to support a future feature but is not initialized in this version; no data is sent to Firebase by the current App.
We may update this Policy from time to time. When we do, we will revise the "Last updated" date at the top and, if changes are material, provide a more prominent notice in the App. Continued use of the App after a change takes effect constitutes acceptance of the revised Policy.
Questions, requests, or concerns:
This Policy is intended to satisfy disclosure requirements applicable to iOS apps distributed through the Apple App Store, including the App Store Review Guidelines and App Privacy Details. It supplements — and does not replace — the App's App Privacy "nutrition label" in App Store Connect.