1. Who we are
BoletoNeo is a private journal for overseas readers. It helps you write daily pages, keep cycle notes, tick care habits, collect souvenirs, and — if you choose — bind a page with a title and a gentle reflection. This policy explains what stays on your device and the single case in which a short summary leaves it.
2. Your secrets stay on this device
Journal pages, feeling tags, mood flowers, photos, care habits, cycle notes, bookmarks, souvenirs, ink-drop balances and your bookplate name are stored only on this iPhone or iPad. There is no cloud account, no backup server and no sync between devices. We cannot open your journal or read your pages.
3. The one thing we send
When you choose Page Sealed (20 ink drops), a short summary of that page — your words, feeling tags, mood, care-habit note and cycle day if you use it — is sent to our own writing service so it can suggest a title and a reflection. The request is processed for a moment and then deleted. Photos, your display name, your balance, device identifiers and location are never included.
If you choose Save page instead, nothing is sent. A failed binding does not spend drops, and the page you already wrote remains on the device.
4. Voice ink
Speak into the page uses Apple Speech Recognition to turn speech into text. Recognition prefers this device. If on-device recognition is unavailable, Apple may process the audio under Apple’s terms. We never send your speech to BoletoNeo servers. Microphone and speech-recognition permission are requested only when you tap Voice ink.
5. Photos and camera
You may attach up to nine photos to a page from the camera or the photo library. Photos are compressed and kept in the app’s sandbox. They never leave the device except when you export a page and save or share the image yourself. Camera and photo-library permission are requested only when you add or export a picture.
6. Ink drops and App Store purchases
Ink drops are a virtual supply used inside BoletoNeo. Purchases are processed by Apple. We receive a transaction identifier so we can credit drops once and never twice. We do not receive your payment card details. Apple’s privacy policy applies to the payment itself.
7. Sign-in
Unlocking the journal creates a local session on this device so the drawer stays open until you choose Lock Journal. That session is not a social login and is not used to identify you across other apps.
8. What we never collect
- Advertising identifiers, analytics or crash brokers from third parties
- Precise location
- Contacts, calendars or health-kit databases
- Push-notification tokens — BoletoNeo never asks for notification permission
We do not use a third-party AI provider, advertising network or analytics broker. Nothing about you is sold or shared.
9. Permissions at a glance
- Camera — capture a still for today’s page
- Photo library — attach a memory, or save an exported page
- Microphone & speech recognition — Voice ink dictation
You can withdraw any permission in iOS Settings. The rest of the journal keeps working without that feature.
10. Deleting everything
Burn Journal in the settings pocket removes all pages, photos, bookmarks, cycle notes, habits, souvenirs and ink records from this device. That action cannot be undone. Uninstalling the app also removes local data. Because there is no cloud copy, we cannot restore a burned or uninstalled journal.
11. Children
BoletoNeo is intended for adults keeping a personal journal, including optional cycle notes. It is not directed at children under 13.
12. Changes
If this policy changes, the updated text will appear on this page with a new effective date. Continued use after a change means you have read the new page.
13. Contact
Questions about privacy: jcheng73@126.com