Privacy policy

Last changed: 7 October 2026 · Version 1.0 · The Dutch version is leading in case of differences.

In short: BOODSCHAP! has no account, no server of its own, no tracking, no analytics, no crash reporting and no ads. Your lists are stored on your phone. When you share a list, it travels end-to-end encrypted through public third-party servers to the phones you share with. We cannot read your lists, and the app sends us no data. Only Apple and Google may give us anonymous crash reports and statistics, if you allow it (see point 3).

Who we are

BOODSCHAP! is published by De Ronde Engineering (Nick de Ronde), the Netherlands. Contact: info@derondeengineering.nl. To the extent personal data is processed when using the app, De Ronde Engineering is the controller under the GDPR.

About the publisher

De Ronde Engineering (Nick de Ronde), the Netherlands
Email: info@derondeengineering.nl
Chamber of Commerce (KvK) number: 61854735

1. What is stored on your phone

The app stores only on your own device: your lists and their items (name, quantity, note, category, checked), a history of products you entered before (for suggestions), your own category choices, and your settings (such as the chosen relays). The keys used to encrypt shared lists are kept in the secure storage of the operating system (iOS Keychain or Android Keystore). The app does not back up to any cloud of ours. On an iPhone, iOS may include the app data in your own backup (iCloud or computer) according to your settings; on Android, backup is disabled for this app. If you restore such a backup onto another device, the app joins your shared lists as a new device; your lists are kept.

2. Camera

The camera is only used to scan the QR code of a shared list, only when you tap to do so and grant permission. Camera images are never stored or sent. Without a camera you can paste the code instead.

3. No account, no tracking, no analytics, no ads

There is no account and no BOODSCHAP! server. The app contains no analytics, no crash reporting, no ads, no advertising ID and no third-party software that collects data. The app itself therefore sends us no data about you or your use of the app.

Through Apple and Google. If you have allowed it in your device settings (for example "Share with App Developers" on iPhone), Apple and Google may give us anonymous crash reports and aggregated statistics, such as the number of installs or how often the app crashes. Apple and Google collect this data themselves, under their own privacy policies. It contains no content of your lists and nothing that lets us identify you. We only use it to fix problems.

When you share a list, the app sends changes through public servers of the Nostr network, called relays (by default relay.damus.io, relay.primal.net, offchain.pub and nostr.mom; you can change this in the settings). These relays are run by third parties, not by us. The content of your list is end-to-end encrypted on your phone before it is sent; a relay cannot read it.

What a relay can see: a random public key per list and per installation (no name or phone number), when messages are sent, how many and how large they are, and the IP address of your phone or network during the connection. We do not receive this data. The relay operators' own terms apply to what they do with connection data.

5. What remains on relays

Relays are not ours. Encrypted messages may remain there for a long time, even after you delete a list or the app. We cannot have them erased. Because they are encrypted, nobody without the share code can read their content.

The QR code and share code of a list contain that list's key. Anyone who has the code can read and change the list. Only share it with people you trust, and do not post it publicly.

7. Deleting your data

Uninstalling the app erases all local data and keys on that device. You can also delete a list in the app. Shared lists remain on the other phones you share with, unless you choose to delete them on all phones.

8. Children

BOODSCHAP! is not specifically directed at children and does not collect data from anyone, children included.

9. Your rights under the GDPR and contact

Under the General Data Protection Regulation (GDPR) you have, among other things, the right to access, correct and erase your personal data. Because we do not receive or store any of your data, all of it is on your own device and under your control. For questions or complaints, email info@derondeengineering.nl. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.

10. Changes to this policy

If the app changes in a way that affects your privacy, we will update this policy first and mention it in the release notes. The date of the last change is shown at the top. The app's source code is public on GitHub, so anyone can verify what it does.