Boba Time — Privacy Policy

1) Scope & Roles

This Policy governs information handled by the Boba Time iOS application (the “App”). The App processes your content on your device. A & A Design Inc. does not receive, collect, or host your drink entries, photos, or location history. For any information you send us directly (e.g., support emails), A & A Design Inc. is the controller for that communication only.

2) Categories of Data Processed (On-Device)

• Drink Logs & History. Drink type/name, notes, ratings, date/time, streak counters, completion flags; place you select on a map (place name, address, coordinates).
• Photos. Images you take or attach to entries. Stored in the App sandbox only unless you export/share. No uploads or analysis by us.
• Settings & Preferences. Timer configuration, language/theme, local notification settings.
• Location (optional). If you grant “While Using the App” location access, we use it only to make the map more relevant (e.g., show nearby shops or pre-position the map). You can use the App without location.
• Local Notifications. The App schedules local notifications (no push tokens).
• Diagnostics (Apple). If you opted into Apple’s system setting “Share with App Developers,” Apple may provide anonymized crash logs and device/OS info. Crash logs never include your content.

3) Third-Party Services

• Apple Maps / MapKit. Map tiles, place search, and geocoding are provided by Apple and subject to Apple’s terms and privacy policy. Queries may be processed by Apple to provide results. We do not receive your map search history.
• Apple Crash Reporting. Aggregated, anonymized crash info may be visible to us in App Store Connect if you opted in at the OS level. We do not receive your entries, photos, or precise location via crash reports.
• No other SDKs. The App includes no analytics SDKs, no ad networks, and does not request IDFA.

4) How the App Uses Data

On your device, the App uses data to run the timer and reset schedule; maintain history and streaks; allow photo attachments; let you choose and save a place; show local notifications; and remember your preferences. We do not use your data for advertising, profiling, or automated decision-making.

5) Sharing, Sale, and Tracking

• No collection by us. We do not collect or receive your in-app content.
• No selling or sharing. We do not sell or “share” personal information as defined by the CCPA/CPRA, nor engage in cross-context behavioral advertising.
• No tracking. We do not track users across apps or websites and do not request the IDFA.
• Nothing is shared with A & A Design Inc. Your drink logs, photos, and places remain on your device unless you choose to export or share them.

6) Backups & Storage

Your data is stored in the App’s iOS sandbox. Depending on your Apple settings, the App’s data may be included in iCloud or encrypted iTunes device backups. Backups are controlled by you and Apple—not by us. If you prefer data not be backed up, adjust your device/backup settings accordingly.

7) Security

We rely on iOS security features, including app sandboxing and, when your device is passcode/Face ID protected, data-at-rest encryption implemented by iOS. While no method of security is infallible, we strive to design the App to minimize risk by keeping data on device and avoiding unnecessary data flows.

8) Your Choices & Controls

• Permissions. Manage Camera/Photos, Location, and Notifications in iOS Settings. You can use the App without Location access by selecting places manually on the map.
• In-App Deletion. Delete individual entries/photos or use any “clear data” options provided by the App.
• Device-Level Deletion. Deleting the App removes its sandboxed data from your device (backup copies may persist according to your Apple settings).

9) Children’s Privacy

The App is a general-audience utility and may be used by anyone. We do not knowingly collect personal data from children because we do not run servers. Parents/guardians should manage a child’s device permissions (e.g., Location, Camera). If a child contacts us by email, a parent/guardian may request deletion of that correspondence at alex@designwithaa.com.

10) International Users & Legal Bases

We do not transfer your in-app content to our servers. Apple may process limited data (e.g., map queries, crash diagnostics) on infrastructure it operates globally per Apple’s privacy policy.

Where the EU/EEA, UK, or similar laws apply, our limited processing (e.g., responding to support emails) is based on one or more of: (i) performance of a contract (support you request), (ii) legitimate interests (ensuring functionality and safety), or (iii) your consent (e.g., OS-level permissions). You may withdraw consent at any time by revoking the permission in iOS.

11) Your Rights (GDPR/EEA/UK, CCPA/CPRA and similar)

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, object to processing, or request portability of personal data. Because your App content remains on your device, you can exercise most rights directly (view/export/delete entries; revoke permissions; delete the App). We do not sell or share personal information and do not use sensitive personal information for purposes beyond those permitted by the CPRA.

For rights related to information you send us (e.g., emails), contact alex@designwithaa.com. We may ask for information sufficient to verify your identity or device ownership; we will not ask for copies of your on-device drink logs or photos.

12) Data Retention

In-app content persists until you delete it (in-app or by deleting the App). Support emails are retained only as long as needed to address your request and for routine record-keeping, then deleted.

13) “Do Not Track”

We do not track users across third-party apps or websites and therefore do not respond to “Do Not Track” signals.

14) Changes to This Policy

We may update this Policy to reflect app, legal, or operational changes. Material changes will be indicated by updating the Effective date above and the in-app/web link to this page. Your continued use after an update constitutes acceptance of the revised Policy.

15) Contact

16) Definitions & Miscellaneous (Legalese)

Definitions

• Personal Data means any information relating to an identified or identifiable natural person, as defined by applicable law. For App content kept solely on your device, we do not act as a controller because we do not receive or access that content.
• Process/Processing means any operation performed on Personal Data, such as storage, use, or disclosure.

Governing Law; Venue

To the extent permitted by law, this Policy and any dispute arising out of or relating to it are governed by the laws of the District of Columbia, USA, without regard to its conflicts-of-law rules, and subject to the exclusive jurisdiction of courts located in Washington, DC.

Severability; Waiver

If any provision of this Policy is held unenforceable, the remaining provisions will remain in full force. Our failure to enforce any provision shall not constitute a waiver.

Assignment

We may assign or transfer our rights and obligations under this Policy in connection with a merger, acquisition, corporate reorganization, or sale of assets, provided the successor honors this Policy or provides a policy with equal or greater protections.

Third-Party Beneficiaries

This Policy does not create third-party beneficiary rights.

Entire Agreement

This Policy, together with any in-app disclosures, constitutes the entire privacy agreement between you and A & A Design Inc. regarding the App’s data handling.