Privacy Policy

Plain language. Every claim here was checked against the app that ships.

App
bothy.
Developer
Oluwaniifemi Emmanuel
Effective date
August 9, 2026

The short version

This app has no accounts and no sign-in, and I do not run any servers. Nothing you save here is uploaded to me. I could not read your vault even if I wanted to, because there is nowhere of mine for it to go.

Two things belong up front all the same, and each has its own section below. Your phone backs up its apps, and this one is included, so a copy of your data can end up in your own Google or Apple account, under settings you control. And buying the optional upgrade uses the internet, through Google and RevenueCat. That transaction never touches the things you save.

What the app stores, and where

Everything lives in the app's private storage on your device, where no other app can read it. That covers the database of your saved items (their text, labels, types, tags, and the dates you saved or last used them), copies of any files and images you save (kept so your vault still works if the original is deleted elsewhere), small thumbnails so the grid draws quickly, and your settings, such as your theme and whether clipboard watching is on.

If the app ever crashes, it writes the error to a file on your device so the problem can be diagnosed later. That file holds a technical stack trace, not your saved content, and it is not sent anywhere.

Android encrypts this storage at rest as part of the operating system. Your phone's own backup can copy it into your account; the section called "Your phone's backup" explains exactly who ends up holding what.

What the app does not do

There are no accounts, no analytics, no usage tracking, no advertising, no ad identifiers, and no crash-reporting service. No third party receives anything you save. The only thing the app ever transmits is the fact that a purchase happened, which the "Purchases" section covers. Your phone's backup is a different matter entirely: that is your phone copying your data into your own account, not this app sending anything to anyone.

The app asks for internet access for exactly one reason, which is buying the upgrade. It does not ask for your location, camera, microphone, contacts, calendar, or storage. It does not even ask to know whether your phone is online. The full list of what it does ask for is next.

The permissions it asks for

Eight in total. Six exist for the floating shortcut described in the next section, and two for the upgrade purchase. None of them collects or sends anything you save.

The floating shortcut

The app can show a small floating handle on top of your other apps, so you can reach something you saved without leaving what you are doing. You grant that yourself, on Android's own "Display over other apps" screen, and you can revoke it there whenever you like.

A candid word about that permission, because it sounds alarming and you are right to look twice at it. It lets the app draw on top of other apps. It does not let the app see or record what those apps are showing. Android separates those two abilities completely, this permission grants only the first, and there is no code in this app that attempts the second.

While the handle is running, Android shows a quiet ongoing notification. That is Android's rule, not mine: nothing may float over your screen without telling you it is there. The notification is not used to send you messages.

Picking an item from the ring copies it onto your clipboard so you can paste it where you need it. The ring also looks at your clipboard once, in the moment you open it, so it can offer to keep whatever you copied last. That is the only time it looks. While the ring is closed it cannot see your clipboard at all, because Android does not let it.

Your clipboard

If you turn on clipboard watching, the app saves what you copy so you can find it later. Here is exactly how far that reaches.

The app can only see your clipboard while it is open and in front of you. The moment you switch away, it stops. You do not have to take my word for that: Android does not allow apps to read the clipboard in the background at all, and this app registers for clipboard changes only while it is on screen.

The floating shortcut does not change this. It keeps running after you leave the app, but as the previous section says, its relationship with your clipboard runs in one direction, and that direction is writing.

You can turn the whole feature off in the app's settings, under "Watch my clipboard." When it is off, nothing is captured.

A few smaller courtesies. When another app marks copied text as sensitive, the way password managers do, this app honours the marking and keeps that content out of its confirmation messages. To avoid saving the same thing twice, the app keeps a one-way fingerprint (a hash) of the most recent clipboard text, and the original cannot be reconstructed from it. Clipboard captures also tidy themselves: the app keeps the forty most recent ones you have not used, and the least-used drops off as new ones arrive.

Reading text inside images

The app can recognise text inside images you save, so that searching for a word you remember seeing in a screenshot actually finds it. This happens entirely on your device, using a recognition model that ships inside the app itself. Your images are never uploaded for processing, and no model is downloaded. The recognised text is stored with the item, in the same private database as everything else.

When files leave the app

Your saved items go to another app only when you send them there. Sharing, opening, or editing an item hands the receiving app a temporary link to this app's own copy of that one file. The system file picker can also show your saved files under this app's name, so you can attach one from inside another app; that view is read-only and shows only what you saved. In both cases you choose the item and you choose the destination. The app never hands anything over on its own, and the only folders it can ever expose are its own saved-items and thumbnails folders.

Your phone's backup

Your phone backs itself up. On Android that is Google's device backup, plus Samsung's Smart Switch when you move to a new Galaxy; on iPhone it is iCloud Backup. Those features copy app data, and this app is included. If backup is on, a copy of your vault goes wherever your phone's backups go, and comes back when you set up a new device.

I have left that on deliberately. This app has no accounts and no sync of its own, so your phone's backup is the only thing standing between a lost phone and a lost vault. If I switched it off, losing your phone would quietly mean losing everything you saved here, and I am not willing to make that trade for you without saying so.

To be clear about who holds what: the backup belongs to you, and it sits in your own Google or Apple account, encrypted by your platform under their terms. None of it passes through me, because there is no server of mine anywhere in this. I cannot see it or reach it, and I could not recover your vault from a backup if you asked me to.

The setting is yours too. On Android it is under Settings, then System, then Backup, where you can exclude this app. On iPhone it is under Settings, then your name, then iCloud, then the app list under iCloud Backup. Turn it off and the app stops being copied. The cost is that a lost phone then means a lost vault, which is why I left it on.

Deleting your data

Delete the app and everything goes with it: the database, your saved files, the thumbnails, and your settings. There is no copy held by me for you to ask about, because I never had one. If your phone's backup holds a copy, that copy is in your own Google or Apple account, and you remove it there the same way you would for any other app.

Removing a single item erases its content and its file from your device immediately. What remains until you uninstall is a bare record that an item once existed, holding an id, a type, and timestamps, with no text, no file, and no label. Neither the item nor the record is ever uploaded anywhere.

Because there are no accounts and no server of mine, there is no data-deletion request to file with me, and nothing I could act on if you filed one. Uninstalling erases everything on the phone.

Children

This app is not directed at children, and it does not knowingly collect personal information from anyone, of any age. It has no accounts and no sign-up, and there is no server of mine for information to reach.

Changes to this policy

If the app ever starts doing something this policy does not describe, this page will change before that version ships, and the effective date at the top will change with it. I will call out material changes in the app's release notes on the store listing.

Purchases

The app offers one optional paid upgrade: a single payment, not a subscription. Google Play's billing system handles the purchase, and RevenueCat records the unlock. This is the one part of the app that uses the internet.

When you buy the upgrade, or restore one you already bought, Google Play processes the payment. Your payment details go to Google and stop there; neither the app nor I ever see your card. RevenueCat records that the purchase happened, so the app knows your upgrade is active. That record holds an anonymous identifier for your install, the product you bought, and when you bought it. It is not linked to your name or email, because the app never asks for either and sets no identifier of its own.

Your vault is not involved in any of this. Nothing you have saved is sent as part of a purchase. And once the upgrade is yours, it keeps working offline: the app remembers it on the device and does not need to check with anybody before letting you use what you paid for.

Google and RevenueCat hold their purchase records under their own privacy policies:

To ask about deleting purchase records, email me at niimanuel417@gmail.com.

Contact

Questions about any of this: niimanuel417@gmail.com. I read my own mail.