Privacy Policy

Last updated: 3 August 2026

BoardSnap ("the app", "we", "us") is published by BeFunnyStudio. This policy explains what we collect, what we do not, and what you can do about it.

The short version

Your board photos and the documents BoardSnap generates stay on your device. They are never uploaded to our servers, never stored by us, and never seen by us. To analyse a photo, your device sends it directly to our AI provider; we are not in that path.

What we do hold is the minimum needed to run accounts and the credit allowance: an account identifier, your email address if you give us one, your subscription status, and a one-way hash of a device identifier used to stop the free credits being claimed over and over.

What we collect

Account data. When the app first opens it creates an anonymous account so you can try it without signing up. If you later create a real account, we store your email address and a password hash held by our authentication provider. If you sign in with Google, we receive your email address and profile name from Google.

Subscription data. If you subscribe, we store the product purchased, the status of the subscription and its renewal date, as reported by Google Play through our billing provider. We never see or store your payment card, your billing address, or any other payment detail — those stay with Google.

Usage allowance. We store the identifier of the AI key issued to your account and the total amount spent against it, in US dollars. This is what enforces your credit quota. It is a running total: it does not describe, record or reveal what you analysed.

A device identifier, as a hash. The app reads the Android identifier ANDROID_ID and sends it to our server, which stores only its SHA-256 hash. The raw identifier is never stored. This exists for one purpose: the 10 welcome credits are granted per device, so that reinstalling the app does not mint an unlimited supply of free credits. It is not used for advertising, profiling or tracking you across apps.

Diagnostics you choose to send. If you use the feedback form, we receive what you write and the email address you send it from.

What we do not collect

• Board photos. They are stored on your device and sent directly from your device to our AI provider. They do not transit or rest on our infrastructure.
• Generated documents, their titles, their content, and any study material produced from them. All of it lives in the app's local storage on your device.
• Your name, unless Google supplies it when you sign in with Google.
• Location data, contacts, calendar, or the contents of your device storage beyond the photos you explicitly select.
• Advertising identifiers. The app contains no advertising and no analytics SDK.

Who processes your data

⚠️ Transfers outside the EEA. Our account database is hosted in Australia, and our AI and billing providers are in the United States. Using BoardSnap means your account data is processed outside the European Economic Area. We rely on the transfer mechanisms provided by each processor's data processing agreement.

About the AI provider. Photos you submit are processed by OpenRouter to generate your document. Please review OpenRouter's own privacy terms at openrouter.ai/privacy. Do not photograph a board containing confidential or personal information that you are not entitled to share with a third-party processor.

Legal bases (GDPR)

• Performance of a contract — running your account, issuing your AI allowance, delivering a subscription you paid for.
• Legitimate interests — the hashed device identifier, used solely to prevent repeated claiming of free credits.
• Consent — the feedback you choose to send us.

How long we keep it

Account data is kept for as long as your account exists. When you delete your account, it is erased immediately (see the Delete Account page).

One exception, stated plainly: the hashed device identifier is retained after deletion, with its link to your account removed. It is a salted one-way hash — it identifies no one and cannot be reversed into a device identifier. Erasing it would make the free-credit grant claimable again simply by deleting an account, which is the abuse it exists to prevent. This is retention for fraud prevention.

Purchase records are retained for 5 years, as required by the tax and accounting law of the United Arab Emirates.

Your rights

If you are in the EEA or the UK, you have the right to access, correct, delete and export your personal data, to object to processing based on legitimate interests, and to lodge a complaint with your supervisory authority.

You can delete your account and all its data from inside the app: Settings → Account → Delete my account. You can also request it from the Delete Account page. For any other request, write to contact@befunnystudio.com; we answer within 30 days.

Children

BoardSnap is not directed at children under 13. We do not knowingly collect data from them. If you believe a child has created an account, write to us and we will delete it.

Security

Account data is protected by row-level security: the tables holding AI keys and device hashes are unreachable by any client, including their owner, and are only written by server-side functions. The AI key issued to your device is stored in the app's private storage and is excluded from Android's automatic cloud backup, so it is never copied to your Google Drive.

No system is perfect. If you find a security issue, please write to contact@befunnystudio.com before disclosing it publicly.

Changes

We will update this page when the app changes, and update the date at the top. If a change materially affects how we handle your data, we will tell you in the app.

Contact

contact@befunnystudio.com