At Bosun PKM Tools, we are committed to one primary principle: Your data is yours. We build local-first software because we believe privacy and data control are fundamental rights. This policy explains what minimal data we collect and how we respect your data sovereignty.
1. The Local-First Principle
Both the FreENEXt migration utility and the Galley Suite Home OS are designed to run locally on your hardware. Your notes, recipe databases, cookbooks, and ingredient ledgers are stored in standard formats (Markdown, YAML, SQLite) on your own hard drive. We do not have access to these files, and they never leave your device unless you explicitly configure a sync target.
2. Encrypted Cloud Sync Relay
For users on our Pro, Specialist, or Creator tiers who enable the Encrypted Cloud Sync Relay:
- Your database is encrypted locally on your device with a key you control before it is transmitted.
- Our servers act as a blind relay, storing the encrypted database blob solely to sync changes to your other authenticated devices.
- We cannot read, modify, or decrypt your database. There is no password reset or recovery option for lost encryption keys—protect your keys.
3. Web Telemetry & Cookie Consent
With your explicit consent, we use Google Analytics (GA4) to measure site performance and conversion outcomes. Microsoft Clarity, Cloudflare Web Analytics, or Sentry diagnostics may also be enabled when configured.
- Consent Opt-In: Optional telemetry scripts are blocked by default and do not load unless you explicitly click "Accept" on our privacy banner.
- Data Minimization: URL fragments and non-campaign query parameters are removed before analytics transmission. Campaign values are restricted to a bounded safe character set. Google Signals and advertising personalization features are disabled.
- Configured Vendors: GA4 provides aggregate traffic and conversion measurement; Clarity may provide masked interaction diagnostics; Cloudflare may provide traffic and edge-performance metrics; Sentry may receive redacted technical error diagnostics. These tools receive ordinary network metadata such as IP address and user agent as part of making an internet request.
- No IP Address Logging: Our internal first-party server analytics store does not record or retain your IP address. Telemetry event logs are automatically purged after 90 days.
4. Email Marketing and Consent Sync
We separate marketing communications from transactional operations. If these email systems are configured and enabled:
- Loops Newsletter Sync (Planned): If you opt in, the integration is enabled, and you check the voluntary marketing opt-in box, your email address is securely synced to Loops for newsletter updates. You can unsubscribe at any time.
- Resend Transactional Sync (Planned): Transactional emails (such as waitlist confirmation receipts and offline license key files) are dispatched using Resend when configured. Receiving transactional notices does not add you to marketing broadcast lists.