Privacy Policy

Pentarab built Bori as practice at reading short detective stories and weighing up the evidence in them. Bori requires no account — there is no sign-in and no registration.

Bori does not collect your name, email address, contact details, location, photos, voice, or the advertising identifier (IDFA). Because there is no account, it does not identify you as an individual.

The following is stored only on your device and is never transmitted.

• How many times you have finished each case, your accuracy, and your fastest run
• Your streak in days and the total number of sessions
• Your chosen language, your sound and haptics settings, and your notification setting
• The access unlocked by a purchase

Deleting the app deletes everything stored on the device with it.

When you finish a case, the following is sent to a server Pentarab operates (Cloudflare), so that rankings and statistics can be shown against other players.

• A random anonymous identifier generated on the device (for example, bori-9f2a4c6e8b1d3f57)
• The case number and the score for that run
• How long that run took (counting only the time the app was on screen)
• An approximate country code derived from where the connection came from (for example, KR, JP)

The country code exists to show a flag on the leaderboard. It is worked out from your network location at the moment of the request, at country level only. Precise location such as a city or coordinates is not looked at, and the device's location permission is not used. If no country can be determined, the entry appears without a flag.

The identifier is a random string made on the device, and it is not linked to your Apple account, an advertising identifier, your email address, or a device serial number. Nothing that is sent contains a name or contact details, so Pentarab cannot identify a particular person from these records. Deleting the app creates a new identifier and breaks the link to the earlier ones.

If you would rather not take part in the leaderboard, you can keep the device offline and every case in the app still works exactly the same. A failed submission has no effect on your training or your personal records.

To see how the app is really used and improve it, Bori sends usage events to an analytics service that Pentarab runs itself. It is not Google Analytics, and the data is not passed on to any third party. The events record which screens you viewed and which features you used, together with an install identifier — a random value the app generates on first launch, not derived from your device. Case answers and the contents of your records are not sent this way.

This information is not linked to your identity, is not used to track you across other companies' apps or websites, and is not provided to data brokers. Bori contains no advertising SDK and does not request the advertising identifier (IDFA), so no tracking consent prompt is shown. The receiving server records a country from the connection itself — the app never sends it — and does not store your IP address.

Case reminders are local notifications scheduled on the device. No server is used to deliver them and no device token is collected. You can turn them off at any time in Settings.

Purchases that open the locked cases are handled through the Apple App Store and StoreKit. Payment, refunds, and promo-code validation are handled by Apple, and Pentarab does not receive or store your card details, your Apple account, or your billing address.

Bori is not directed at children under 13, and we do not knowingly collect personal information from children.

If the way the app handles data changes, we update this page first and show the revision date.

Questions about how your data is handled? Email us: