Privacy policy

Last updated October 29, 2026. Applies to the Bored Scanner app for iPhone and iPad and to boredscanner.space.

Bored Scanner is made by BACS Tech, Inc. ("BACS Tech", "we", "us"). This policy explains what the app and this website do with your data, which is as little as possible.

Bored Scanner does not collect, store, transmit, or sell any personal data to us. There is no Bored Scanner server. The app runs on your iPhone or iPad and talks only to the inventory system you connect it to: your own Snipe-IT. In spreadsheet mode it talks to nothing at all.

What the app does with your data

You photograph a device label, or pick a saved photo of one. The device reads the label with Apple's built-in text and barcode recognition, on the device. Nothing is sent anywhere to be read.

You check the fields it found (for example serial number, part number, and Wi-Fi, Ethernet and Bluetooth addresses) and correct anything that's wrong. When you tap send, only the fields you checked and mapped go to your inventory system, over HTTPS, using the API token you entered. The photo and everything else the camera read are not sent.

To assign a device to someone, the app downloads the list of eligible users from your inventory system: names, email addresses, and that system's own user IDs. It keeps a copy on the device so you can search it, and checks the chosen person with your inventory system again before assigning.

Lookup, Assign, Return and Retire send the request you confirm (for example "check this serial out to this person") to your inventory system and read the result back to confirm it worked.

Spreadsheet mode

If you choose the spreadsheet destination instead of an inventory system, checked scans are saved to a CSV file on the device. Nothing is sent anywhere. The file leaves the device only when you export it yourself, for example by AirDrop, Mail or the Files app. Nothing syncs automatically. Assign, Lookup and Retire are not available in this mode.

What stays on the device

• Label photos and the raw recognition results, so you can check a field against the original.
• Your reviews and corrections, and a log of pending and completed sends, so an interrupted send isn't repeated or lost.
• The cached user list from your inventory system.
• Connection settings, field mappings and label profiles.
• Spreadsheet-mode CSV files, until you export or delete them.
• Your API token, in the device's Keychain, protected by the device.

Turning a field off stops it being reviewed and sent. It does not blur or delete it from the stored photo. Deleting the app deletes all of the above, except the token in the Keychain, which is cleared when you remove the connection in the app.

What we don't do

• No analytics or usage tracking of any kind.
• No crash reporting services.
• No advertising, no advertising identifiers.
• No third-party SDKs. The app contains only our code and Apple's frameworks.
• No accounts with us, and no network connections except to the inventory system address you, or your organization's MDM, entered.
• No cloud recognition or AI service. Labels are read on the device.

What Apple may tell us

If you have opted in to sharing analytics with developers in iOS or iPadOS settings, Apple provides us with aggregate, anonymous statistics such as device model, OS version, and country. We cannot see individual devices or users. You can turn this off under Settings › Privacy & Security › Analytics & Improvements.

Your inventory system

Data you send to Snipe-IT is handled by that system, whether you host it or a vendor does, under its own terms and your organization's settings. What the app can read and change there depends on the permissions of the API token you give it. Snipe-IT is a trademark of its owner; Bored Scanner is not affiliated with or endorsed by it.

Managed deployments

If your organization deploys Bored Scanner through an MDM, it may push settings to the device: the inventory system address, API token, field mappings, label profiles and fields to skip. Bored Scanner reads them from the device and moves the token into the Keychain. Those settings are handled by your organization's MDM under its own privacy terms, and its administrators can see what they pushed.

This website

boredscanner.space is a static site. It sets no cookies and runs no analytics. If you email us, we keep the email so we can reply.

Children

Bored Scanner is a business tool and is not directed at children.

Changes

If this policy changes, the date at the top changes and the previous version is kept in this website's public history on GitHub. We will not change the central promise: no backend, no data collection.

Contact

BACS Tech, Inc. · www.bacstech.io · hello@bacstech.io