BonCadre Privacy Policy

Effective date: 4 July 2026

This Privacy Policy describes how PRODUCTIVITY TOOLS LIMITED ("we", "us") collects, uses, and shares information when you use the BonCadre mobile application ("the App").

1. Information We Collect

Account information

When you sign in with Google or Apple (via Firebase Authentication), we receive your name, email address, and a unique account identifier from the sign-in provider. We do not receive or store your password.

Photos you upload

Photos you submit for analysis are uploaded directly to our cloud storage. We store the original photo, the AI analysis results (scores, feedback text, and annotation data), and — if you use the AI improvement feature — the AI-generated improved version of your photo.

BonCadre analyzes the aesthetic qualities of your photos — composition, lighting, framing, colour, focus, and similar. The App does not perform facial recognition, does not detect or identify individuals, and does not create, extract, or store any biometric identifier or biometric information (such as faceprints or face geometry). We never use your photos to identify any person.

Chat messages

Follow-up questions you ask about an analysis, and the AI's responses, are stored with that analysis.

Purchase information

When you buy a subscription or AI tokens, the purchase is processed entirely by Apple App Store or Google Play. We receive purchase confirmation data (product identifier, transaction identifier, expiry/renewal status) to activate your plan. We never see or store your payment card details.

Push notification tokens

If you enable notifications, we store a device token (Firebase Cloud Messaging) to send you reminders such as daily challenges.

Usage data

We use Firebase Analytics to collect pseudonymized usage statistics (screens viewed, features used, device type, app version) to understand how the App is used and improve it. This data is tied to a random analytics identifier, not directly to your name. Where the law requires it — including in the EEA and UK — we ask for your consent before enabling analytics, and you can change your choice at any time in the App's settings.

2. How We Use Your Information

• To provide the service: analyzing your photos, generating improved versions, answering follow-up questions, tracking your history and challenge progress.
• To manage your subscription: validating purchases and applying your plan's quotas and tokens.
• To send notifications you have opted into.
• To improve the App using aggregated usage analytics.

We do not sell your personal information. We do not use your photos for advertising or for training our own AI models.

3. Legal Bases (EEA/UK users)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Providing the App (accounts, photo analysis, improved images, chat, history, challenges) — performance of our contract with you.
• Subscriptions and purchase validation — performance of a contract and compliance with legal obligations.
• Push notifications — your consent, which you can withdraw at any time in your device settings.
• Product analytics — your consent where required; otherwise our legitimate interest in improving the App.
• Security, fraud prevention, and enforcing our Terms — our legitimate interests.
• Responding to legal requests and defending claims — compliance with a legal obligation and our legitimate interests.

4. AI Processing and Third-Party Services

To deliver the App's core features, your data is processed by the following service providers:

Photos and chat messages are sent to OpenAI's API solely to produce your analysis and image results. Under OpenAI's API terms as of the effective date, data submitted via the API is not used to train OpenAI's models; OpenAI may retain API inputs for a limited period (currently up to 30 days) for abuse monitoring before deletion.

5. International Data Transfers

BonCadre is operated from Hong Kong, and the providers listed above process data in the United States and other countries. Your information may therefore be transferred to and processed outside your own country, including outside the European Economic Area (EEA) and the United Kingdom, where data-protection laws may differ. Where we transfer personal data of EEA or UK users to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, incorporated into our data-processing agreements with each provider, together with additional safeguards where appropriate. To request a copy of the relevant safeguards, contact privacy@productivitytools.app.

6. AI-Generated Content

Improved images produced by the App are AI-generated. They are created from your original photo and may differ from reality. You can report inappropriate AI-generated results directly in the App; reports are reviewed and used to improve our content safeguards.

7. Data Retention

• Your photos, analyses, chat messages, and AI-generated images are retained until you delete them or delete your account.
• When you delete your account, your account record, photos, analyses, chats, and generated images are deleted immediately from our production systems. Residual copies in encrypted backups are purged within 30 days.
• Purchase records may be retained where required for tax, accounting, or legal compliance.
• Anonymized analytics data is not tied to your deleted account.

8. Deleting Your Account

You can delete your account at any time:

1. In the App: Profile → Delete account.
2. Without the App: email support@productivitytools.app from the email address associated with your account, and we will delete it within 30 days.

See our Account Deletion page for details.

9. Your Rights

Depending on your location (including under GDPR and CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact privacy@productivitytools.app. You also have the right to lodge a complaint with your local data protection authority.

10. Children

BonCadre is not directed to children. You must be at least 16 to use the App, or older if your country requires it — except where your country permits a lower age (down to 13) for consent to online services, in which case that lower age applies. We do not knowingly collect personal data from children below the applicable age. If you believe a child has provided us personal data, contact privacy@productivitytools.app and we will delete it promptly.

11. Security

Data is transmitted over encrypted connections (HTTPS/TLS) and stored with access controls. Photo uploads go directly to cloud storage via short-lived signed URLs; our servers never handle your payment information.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated in the App or by email. The effective date above always reflects the latest version.

13. Contact

PRODUCTIVITY TOOLS LIMITED
UNIT B, 11/F YAM TZE COMM BLDG, 23 THOMSON RD, WAN CHAI, HONG KONG
Email: privacy@productivitytools.app