Privacy Policy
Inboki · Last updated 18 October 2026
This Privacy Policy describes how the Android app Inboki
(Android package com.pserrer.collector) handles information.
In short: Inboki keeps what you share with it on your phone. There is no account and no server of ours: we never receive your finds, your paperwork, your photos or anything about how you use the app. There are no ads, no analytics and no tracking, and nothing is sold to anyone.
What stays on your phone
- What you capture. Links, text, photos and PDFs you share to Inboki, take with its camera or pick from your files are copied into the app’s own storage and kept in a database on your phone, together with your collections, mood boards, lists, plans, titles and notes.
- What the app reads from them. Text in photos and PDFs is recognised on the phone (Google ML Kit text recognition). For photos, the labels describing what is in them and their main colours are worked out on the phone too (ML Kit image labelling), and the time and place written into the file (EXIF) are read from it.
- Summaries, only on phones that have the on-device model. They are produced by the model built into your phone (Gemini Nano, through Android AICore); the text it works on stays on the phone. Elsewhere the app picks sentences from the text itself.
- How finds are sorted. Whether something is paperwork or inspiration, and which of your collections it might belong in, is decided by plain code on the phone, not by a cloud service.
- Your archive passwords. The Paperless-ngx token and WebDAV password you enter are kept in Android’s encrypted secure storage and are only ever sent to the server they belong to.
- Your phone calendar, only if you turn it on for the plan. Its appointments are read on the phone to show them on your plan and are not sent anywhere. Inboki never writes to it: adding a date opens your calendar app’s own screen.
- Where you take photos, only if you turn on “Note where photos are taken”. Your phone’s position is noted when you take a photo with Inboki’s camera, and kept with that photo.
- Reminders, only if you turn them on. They are scheduled on the phone.
- A log of what the app did while preparing your finds, such as which address a link led to and what a site answered. It never holds passwords or tokens, stays on the phone and keeps only the newest entries.
When the app talks to anyone else
Inboki goes online only in these cases. Each of them sees your IP address, as any website you visit does:
- Links you share. To show a card with picture, title and text, the app fetches the page you shared and its preview picture from the site it belongs to, or the file, if the link is a PDF. For YouTube and TikTok it also asks their oEmbed service about the link, and for Reddit it asks old.reddit.com for the post. These sites see which page was asked for.
- Maps. When a find has a place, the small map is drawn from OpenStreetMap’s tile servers, which see which area is shown. Tapping it opens your own maps app.
- Place names. To name the place a photo was taken (for example “Lisbon”), the app asks Android’s geocoder, which on most phones sends the photo’s coordinates to Google to look them up.
- Your archive, only if you set one up. Paperwork is uploaded with its title and date to the Paperless-ngx server or WebDAV folder you entered, signed in with the token or password you gave. Nothing else is uploaded.
- Reading aloud. Text is read by your phone’s text-to-speech engine. If you choose a voice marked “Needs internet”, that engine sends the text to its provider (for Google’s engine, Google) to speak it; the other voices work on the phone.
- App updates. The app checks Expo’s update service (operated by 650 Industries, Inc.) for new versions. That request contains the app version, the platform and a random installation identifier. It contains nothing about your finds.
- Links you open, which open in your browser or the app they belong to.
What you can choose to send
Nothing reaches us unless you send it. The app only ever hands things to Android’s share sheet, and only when you tap Share:
- Finds, lists, collections you present as slides or a picture, and files you open in another app go wherever you share them.
- Crash reports. If a screen stops working, “Share details” shares a description of the error, the time and the app version, which you can send however you like. It contains none of your finds.
- The log, if you opened it, can be shared the same way.
If you email us, we use your message only to reply and to fix the problem, and delete it when it is no longer needed.
Permissions
- Internet, to fetch the links you share, maps, place names, your archive and updates.
- Camera, to photograph receipts, letters and anything else you want to keep. Photos are taken only when you press the shutter.
- Location, only if you turn on “Note where photos are taken”, and only while you use the app.
- Calendar (read only), only if you turn on the phone calendar for the plan.
- Notifications and alarms, only if you turn on reminders, so they arrive at the time you chose.
- Running in the background, so uploads to your archive finish while the app is closed.
Deleting your data
Deleting a find removes it and its file from the phone once the moment to undo it has passed. Uninstalling the app deletes everything it stored, including your archive passwords. What was already uploaded to your archive stays on your server, which is yours.
Children
The app is not directed at children under 13.
Changes and contact
If this policy changes, the new version will be published here and in the app, with a new date.
Questions about privacy: playstore@serrer.de