Privacy Policy

Last Updated: October 10, 2026

BoonTools ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App").

Please read this Privacy Policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Personal Information

We collect the following personal information when you create an account:

  • Email Address: Required for account creation and authentication
  • Display Name: Optional, used for personalization and sharing features
  • Profile Photo: Optional, used for user identification in shared features
  • User ID: Automatically generated unique identifier

1.2 User-Generated Content

When you use the App, we store the content you create so it can sync across your devices:

  • Reminder lists and items, including places you save for location reminders (see Section 1.4)
  • To-do items, subtasks and notes
  • Daily routines, habits and step goals
  • Menstrual cycle and symptom data (see Section 3.6)
  • Budget, spending, net worth, debt and expense-splitting data, and photos you attach to an asset
  • Work Flow projects and tasks
  • Grocery lists, pantry items and shopping history, which Foresight uses to predict what is running low
  • Chores: the first names, age bands, avatars, chores, stars, rewards and allowance you enter for your children (see Section 8)
  • Contact names you choose to tag in a reminder
  • Any other content you create within the App

1.3 Usage Information

Usage statistics (optional, off until you say yes). The first time you open the App, we ask whether you want to share anonymous usage statistics. Nothing is sent to our analytics provider unless you say yes. If you update from an earlier version, we ask you once more. You can change your answer at any time in Profile → Share Analytics, and switching it off takes effect immediately.

First-time setup counters (anonymous, not optional). While you go through first-time setup, the App adds one to a counter on our own servers each time a setup step is shown or left, and when setup is finished. Each request contains only the name of the step, how you left it (next, back, closed the app or finished) and a coarse time range such as "under 5 seconds". It contains no account ID, device ID, name, email or anything you typed, we do not store it per person or with a timestamp, and the App sends nothing of this kind after setup. Like any internet request, it reaches our cloud host from your IP address, which the host uses to deliver the request; we do not store it with the counters and our reports cannot show it. We use these counters to find where people give up on setup and fix it. Because they cannot be traced to you, they work the same whether or not you share usage statistics.

When it is on, the App sends usage events to Google Analytics for Firebase (provided by Google LLC). Every event is a category, a number or a yes/no value — never text you typed. The events are:

  • Onboarding: which onboarding screen was shown, how long you stayed on it, and how you left it (next, back, closed the App, or finished)
  • Subscription screens: that a paywall was shown, which plan tier and billing period (monthly or yearly) you looked at or chose, and whether a trial started, a purchase completed or was cancelled, or Restore was tapped
  • Tools: which tool you opened and how long you used it (in whole seconds, with an upper limit)
  • General kinds of action inside a tool, such as "item created", "item completed", "item edited", "item deleted", "exported", "shared", "AI used", "synced" or "setup completed". We never record the content, titles, names, amounts or notes of what you created.
  • Two settings of your device or account: your subscription tier (Plus or Pro) and the App's language
  • Information Google collects automatically with its analytics tool: first open, session start, App version, iOS version, device model, and a country that Google derives from your IP address. Our reports do not show IP addresses.

Google Analytics identifies an installation with a random, per-install identifier (the Firebase app-instance ID). The iOS software may also read the identifier-for-vendor, a per-app device ID that cannot identify you across other companies' apps. We do not attach your account ID, email address or name to these events. We do not collect the advertising identifier (IDFA), we do not show the iOS tracking permission prompt, and Google signals and ad personalisation are turned off.

What is never included. Cycle Track records no analytics event of any kind — not even that the tool was opened or how long it was used. Your ADHD Mode setting is not recorded. In Chores, only the general action types above are counted, never anything about your children.

Who sees the results: only the owner of BoonTools. Events are copied to Google BigQuery and summarised into totals on a private dashboard that requires an administrator sign-in with a second factor. Any breakdown with fewer than 5 users (for example one country or one App version) is hidden from that dashboard.

Service records, separate from analytics. To enforce the daily AI fair-use limit, we keep, in your account, counts of how many AI requests you make and how large they are — not the text, photos or results of those requests. Earlier versions of the App also kept per-account usage-event records in our database. Those are no longer written, and any that exist are erased with your account (Section 6.2).

1.4 Location Information

The App uses your precise location only if you create a reminder that should fire when you arrive at or leave a place. In that case:

  • The coordinates of the place you saved are stored with that reminder.
  • Your device checks whether you have arrived or left. Your ongoing location is not sent to us or stored on our servers.
  • "Always" location permission is requested only when you add your first place-based reminder, and you can decline it — every other feature works without location.

The App also reads your device's time zone to schedule reminders correctly.

2. How We Use Your Information

2.1 Service Delivery

  • Create and manage your account
  • Sync your data across devices
  • Provide cloud backup of your content
  • Enable collaboration features (sharing lists, reminders)
  • Process subscription payments

2.2 App Improvement

  • If you have opted in (Section 1.3), analyze anonymous usage statistics, such as where people leave onboarding and which tools are used, to improve the App
  • Fix bugs and technical issues
  • Develop new features
  • Optimize performance

2.3 AI Features (optional)

Some features can use an AI provider to understand what you type, read a photo you choose, or suggest ideas. AI is optional: before any of your information is sent to an AI provider for the first time, the App shows a screen naming the providers and the kinds of data involved, and asks for your permission. If you choose "Not now", every tool keeps working without AI. You can change your choice at any time in Profile → Privacy. See Section 3.4 for details.

2.4 Communication

  • Send important service updates
  • Respond to support requests
  • Notify you of new features (if opted in)

3. Third-Party Services

We use the following third-party services to operate the App:

3.1 Firebase (Google)

  • Firebase Authentication: Account creation and login
  • Cloud Firestore: Data storage and sync, and the AI request counters described in Section 1.3
  • Firebase Storage: Photos you attach to a property or vehicle asset
  • Firebase Cloud Messaging: Notifications about shared lists and groups
  • Firebase Remote Config: App configuration
  • Google Analytics for Firebase and Google BigQuery: Only if you opt in (Section 1.3). Google acts as our service provider (data processor) for the anonymous usage events, which are stored in our Google Analytics account and copied to our BigQuery project. We have turned off Google signals and data sharing with other Google products and services, and we do not link the data to advertising. Details: https://support.google.com/analytics/answer/6004245
  • Privacy Policy: https://firebase.google.com/support/privacy

3.2 Google Sign-In

3.3 RevenueCat

3.4 AI Providers (OpenAI and Google Gemini)

With your permission (Section 2.3), AI-assisted features send the information needed for that request to OpenAI or Google Gemini. The App may fall back from one provider to the other automatically, so either may receive a request. Nothing is sent to an AI provider until you have agreed, and we do not keep the content of AI requests or responses on our servers.

Depending on the feature you use, a request may include:

  • Text you type into an AI feature — for example a reminder, a task, or Smart Input (which may include names you type, including a child's name)
  • A photo you choose to analyse — a fridge, a receipt, a document, or a property or vehicle
  • Email and calendar items you choose to import into Work Flow from Microsoft 365 (Section 3.5)
  • A postal code, address details or vehicle details you enter for a value estimate
  • Summaries of your own usage (for example counts of completed tasks or budget totals) for insights and the daily briefing
  • A child's age band and chore titles, for Chores ideas (never a child's name)

Cycle Track data is never sent to an AI provider (Section 3.6).

3.5 Microsoft (Work Flow integration)

If you connect Microsoft 365 in the Work Flow tool, the App uses Microsoft Graph to read the Outlook email and calendar items you choose, so it can turn them into tasks. This only happens after you sign in to Microsoft and authorise it, and you can disconnect at any time. Turning an email into tasks uses an AI provider (Section 3.4), with your permission.

3.6 Sensitive health data (menstrual cycle)

Cycle Track stores menstrual cycle and symptom information, which is treated as sensitive personal information under laws including the EU GDPR (Article 9 special-category data) and Washington State's My Health My Data Act.

  • On your device: cycle data is stored on your device in an encrypted database.
  • Backup is optional and end-to-end encrypted: if you turn on cycle backup, your data is encrypted on your device before upload, with a key that stays in your iCloud Keychain. Our servers only ever hold the encrypted copy and cannot read it.
  • No AI: cycle data is not sent to any AI provider.

We do not sell this data, and we do not use it for advertising.

Health and sensitive data and analytics: Cycle Track data is never part of the usage statistics in Section 1.3. No analytics event is recorded from Cycle Track at all.

3.7 Apple/Google Payment Services

3.8 Open Food Facts (Grocery barcode lookup)

When you scan a product barcode in the Grocery tool, the App sends only that barcode number to Open Food Facts, a public food-product database, to look up the product name. No account details, list contents or other identifiers are sent.

3.9 Nutrition Tracker (water log)

The Nutrition tool stores the water you log, your daily target and your streak counts on your device. If your plan includes cloud sync, the same entries are backed up to your private account storage so they survive reinstalls; they are never sold, never used for advertising, and never shared with other users. Hydration reminders are scheduled on your device and their content never leaves it.

4. Data Sharing and Disclosure

4.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4.2 Service Providers

We share data with service providers who help us operate the App (listed in Section 3). These providers are contractually obligated to protect your data.

4.3 Legal Requirements

We may disclose your information if required by law or to:

  • Comply with legal processes
  • Protect our rights and property
  • Prevent fraud or security issues
  • Protect user safety

4.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

5. Data Security

We implement industry-standard security measures to protect your information:

  • Encryption in Transit: All data transmitted between your device and our servers uses HTTPS/TLS encryption
  • Encryption at Rest: Data stored in Firebase is encrypted
  • Secure Authentication: Firebase Authentication with industry-standard protocols
  • Access Controls: Database security rules limit each account to its own data. Administrative access to production data is limited to the account owner and requires multi-factor authentication. The administrator dashboard shows totals and counts, not the content of your lists, notes or cycle entries.
  • Testing: Our database security rules are covered by automated tests.

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

6.1 Active Accounts

We retain your data for as long as your account is active or as needed to provide services.

6.2 Deleted Accounts

You can delete your account from inside the App at any time — Profile → Delete Account. When you do:

  • Your sign-in account is removed immediately, and your name, email and profile photo are cleared from our records straight away.
  • Your remaining data is held for a 30-day grace period, so an accidental deletion can be reversed if you contact us in that window.
  • After 30 days everything under your account is permanently erased — reminders, to-dos, habits and routines, budget, net worth, debt and expense-splitting data, cycle entries, Work Flow projects, Nutrition water logs, AI request counters and any older per-account usage records, and any attachments.
  • We keep one minimal record of the deletion itself — your account identifier, the date you asked, and the date we erased it — so we can show the request was honoured. It contains no name, email, photo or content of yours.
  • Data already shared with other people through a shared group (for example expenses in a group you were part of) may remain visible to those members, since it forms part of their records too.
  • Backups and logs roll off on their own cycle, so a copy may persist in those systems for a short period after erasure.

6.3 Analytics Data (Google Analytics and BigQuery)

The anonymous usage events in Section 1.3 are not linked to your account, so we cannot find and delete one person's analytics when they delete their account. They are kept for up to 14 months in Google Analytics and in our BigQuery copy, and then removed automatically. Switching off Share Analytics stops all further collection immediately. This data contains no name, email or account ID. The first-time setup counters in Section 1.3 are totals per day with no link to any person, so there is nothing to find or delete for one individual.

7. Your Rights and Choices

7.1 Access Your Data

You can access all your data through the App at any time.

7.2 Edit Your Information

You can update your profile information (name, photo) in the App settings.

7.3 Delete Your Account

You can delete your account and all associated data:

  1. Open the App
  2. Go to Profile → Delete Account (if you have not subscribed, "Delete account" is also on the subscription screen)
  3. Confirm deletion

7.4 Export Your Data

You can export your data in JSON format:

  1. Open the App
  2. Go to Settings → Data & Privacy
  3. Select "Export My Data"

7.5 Usage Statistics (your consent)

Usage statistics (Section 1.3) are off unless you agree when the App first asks. You can change your mind at any time:

  1. Open the App
  2. Go to Profile → Share Analytics
  3. Switch it on or off

Switching it off takes effect immediately and stops all further collection. It does not delete statistics already collected (Section 6.3). The App works the same whichever you choose. This switch does not control the anonymous first-time setup counters in Section 1.3: they are sent only while you go through setup, before this setting can be reached, and they identify no one.

7.6 AI Features

You can allow or stop sharing information with AI providers at any time in Profile → Privacy → "Share data with AI providers". Turning it off takes effect for the next request.

7.7 Marketing Communications

You can opt out of promotional emails by clicking "unsubscribe" in any marketing email.

8. Children's Privacy

BoonTools accounts are for adults. Children do not create accounts, sign in, or provide information to us themselves.

The Chores tool lets a parent or guardian keep a chore chart for their children. To do that, the parent enters, in their own account:

  • Each child's first name (or a nickname), age band and an avatar
  • The chores assigned, their completion history, stars, rewards, badges and optional allowance

This information:

  • is stored in the parent's account and synced across the parent's devices, like the rest of the parent's data;
  • is never used for advertising, never sold, and never shared with other users unless the parent shares it;
  • is not sent to AI providers, except that Chores ideas send a child's age band and chore titles (never a name) when the parent asks for ideas and has allowed AI (Section 2.3);
  • can be deleted at any time by removing the child in Chores, and is erased with the parent's account (Section 6.2).

Kid Mode is a simplified view of the parent's own chart that a child can use on the parent's device; it does not collect any additional information from the child.

If you believe a child has provided us with personal information directly, please contact us at toolsboon@gmail.com and we will delete it promptly.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

By using the App, you consent to the transfer of your information to:

  • United States (Firebase servers, and Google Analytics and BigQuery if you opt in to usage statistics)
  • Other countries where our service providers operate

We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy. For transfers from the EEA or UK to Google, these include Google's Standard Contractual Clauses and, where Google is certified, the EU–US Data Privacy Framework.

10. European Users (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

10.1 Legal Basis for Processing

We process your personal data based on:

  • Contract: To provide the App services you've requested
  • Legitimate Interests: To improve our services and prevent fraud, including the anonymous first-time setup counters in Section 1.3 (we use them only to fix where setup loses people, they identify no one, and nothing is read from or stored on your device for them)
  • Consent (Article 6(1)(a)): For anonymous usage statistics through Google Analytics for Firebase (Section 1.3), and for sending information to AI providers (Section 2.3). You give consent in the App, and you can withdraw it at any time in Profile → Share Analytics or Profile → Privacy. Withdrawing does not affect processing done before.

10.2 Your GDPR Rights

  • Right of Access: Request copies of your personal data
  • Right to Rectification: Request correction of inaccurate data
  • Right to Erasure: Request deletion of your data
  • Right to Restrict Processing: Request limitation of data processing
  • Right to Data Portability: Request transfer of your data
  • Right to Object: Object to processing based on legitimate interests

To exercise these rights, contact us at toolsboon@gmail.com.

11. California Privacy Rights (CCPA)

California residents have specific rights regarding their personal information:

11.1 Right to Know

You have the right to request disclosure of:

  • Categories of personal information collected
  • Sources of personal information
  • Business purposes for collecting information
  • Categories of third parties with whom we share information

11.2 Right to Delete

You can request deletion of your personal information, subject to certain exceptions.

11.3 Right to Opt-Out

We do not sell personal information, so no opt-out is necessary.

11.4 Non-Discrimination

We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at toolsboon@gmail.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the new Privacy Policy in the App
  • Sending you an email notification
  • Updating the "Last Updated" date at the top of this policy

Your continued use of the App after any changes indicates your acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Email: toolsboon@gmail.com

Support: Available in-app via Settings → Help & Support

Website:https://boontools.ca

BoonTools is a product of Sun Orbit Labs

© 2026 Sun Orbit Labs. All rights reserved.