Privacy Policy
Effective: March 27, 2026
Bokbut ("the Service") takes your privacy seriously. This Privacy Policy describes how we handle information in accordance with the Personal Information Protection Act of the Republic of Korea.
1. Information we collect
The Service can be used without signing up. We do not collect direct identifiers such as your name, email, or phone number.
| Item | Purpose | Retention |
|---|---|---|
| Device identifier (UUID) | Device authentication and text delivery | Until the app is uninstalled |
| Transmitted text | Phone ↔ PC text delivery | Free: 24 hours / Pro: 7 days |
| Push token (FCM) | Notifying you that text has arrived | Replaced when the token rotates |
| Purchase information | Managing your Pro subscription | Cached up to 1 hour after cancellation |
| Usage logs | Service improvement (analytics) | 1 year from collection |
| Error logs | App stability improvements | 90 days |
| Transferred files (images, etc.) | Phone ↔ PC file transfer | Free: 24 hours / Pro: 7 days (auto-deleted after 8 days at most) |
2. Text encryption
All transmitted text is encrypted at rest with AES-256-GCM on the server. When end-to-end encryption is in use, the contents are unreadable to anyone — including the server. All network traffic is encrypted with TLS/HTTPS. Transferred files are encrypted on your device before upload when end-to-end encryption is active (QR pairing), so neither the server nor the storage can read them; with code pairing they are kept in a private bucket protected by TLS and encryption at rest, and deleted automatically when the retention period ends.
3. Sharing with third parties
We use the following processors to operate the Service:
| Recipient | Purpose | Items | Country |
|---|---|---|---|
| PostHog Inc. | Usage analytics | Device identifier, events | United States |
| Sentry (Functional Software) | Error tracking | Error logs, device info | United States |
| RevenueCat Inc. | Subscription billing | Device identifier, purchase history | United States |
| Google (Firebase) | Push notifications | FCM token | United States |
| Cloudflare, Inc. (R2) | Storing transferred files | Transferred files (ciphertext when end-to-end encrypted) | United States (stored in the Asia-Pacific region) |
4. Data deletion
You can wipe all data stored on the server immediately by selecting "Delete data" in the app settings. Text is also auto-deleted once its retention period elapses.
5. Your rights
- Access, deletion, or restriction of processing: app Settings > Delete data
- Contact: support@bokbut.com
6. Privacy officer
Name: Yechan Ahn
Contact: support@bokbut.com
7. Children under 14
The Service does not knowingly collect personal information from children under the age of 14.
8. Changes to this policy
If this Policy changes, we will notify you via the app or this page.