Bonaparks app for iPhone and iPad
Privacy policy
In short: Bonaparks collects no data, unless you ask for a realistic render of a plan.
- No account, no sign-up. The Bonaparks server is only used for the optional realistic render (section 6).
- No analytics, no advertising, no tracking across apps or websites.
- No third-party SDK built into the app. Only the realistic render uses a third-party service (OpenAI), at your request.
- Your household, your cameras and your settings stay on your device. So do your plans, except the model picture sent for a realistic render.
This policy covers the Bonaparks app for iPhone and iPad (“the app”). It describes exactly what the app does with the information it handles. The bonaparks.com website is covered by its own notices.
1. Data stored on your device
The app stores the information you enter or create locally, in its private space on your iPhone or iPad:
- your local profile: first name and, if you wish, an email address (optional, never sent or verified);
- the name and type of your home, its floors and your setup preferences;
- the household members you add (first name or nickname, and role: adult, child, guest);
- your plans: LiDAR scans (floor plan and 3D model) and plans drawn corner by corner;
- your camera configuration: name, area, local network address, port, username and the camera’s certificate fingerprint;
- your Apple Home choices: selected home, favorite devices and the scene linked to each mode;
- a local history of recent actions (at most 80 events).
These files are protected by iOS data encryption. Camera passwords are never written to these files: they are kept in the iOS keychain, on this device only (they are not synced with iCloud). Bonaparks has no access to any of this information.
Like all app data, the app’s files may be included in your device backups (iCloud or computer) depending on your settings. These backups are managed by Apple or by you, not by Bonaparks.
2. Camera and LiDAR
Camera access is requested only when you start a room scan or drawing. Camera images and, on supported devices, LiDAR sensor measurements are processed in real time on the device by Apple technologies (RoomPlan and ARKit). Only the resulting plan and, for a LiDAR scan, its 3D model are saved. No photo or video is kept or sent.
3. Local network and Reolink cameras
To find your cameras, the app queries addresses on your home Wi-Fi network directly; this is why iOS asks you for local network access. Images and live video travel directly between the camera and your device, over your network, without going through a Bonaparks server or any third-party service. When the camera supports it, the connection is encrypted (HTTPS).
4. Apple Home (HomeKit)
If you choose “Connect Apple Home”, the app reads on the device, through Apple’s HomeKit framework, your homes, rooms, accessories, sensors and scenes, and sends the commands you trigger (turning on a light, running a scene). Bonaparks does not cause this data to leave the device; it is not used for advertising or profiling. You can remove this access at any time in Settings › Privacy & Security › HomeKit.
5. Sharing at your initiative
You can export the 3D model of a scan (USDZ file) with the iOS share button. The file is then sent to the app or person you choose; Bonaparks does not receive a copy. The app can also open the Home app, the App Store or iOS Settings.
6. Realistic render of a plan (optional)
After a scan, the app draws a 3D model of the floor on the device (walls, openings and furniture volumes, no photos). If you tap “Create the realistic render” and accept, the app sends the Bonaparks server (hosted by Netlify) the picture of this model, the number of furniture items per type and the number of rooms. The server passes them to OpenAI, which creates the realistic picture; it is sent back to the app and saved on your device.
No name, address, photo, account or device identifier is sent. To prevent abuse, the server counts renders per day using a non-reversible fingerprint of the IP address. The model picture is deleted from the server as soon as the render is done, and the realistic picture as soon as the app has saved it. OpenAI does not use them to train its models and may keep them for up to 30 days for abuse monitoring before deleting them. Nothing is sent without your consent.
Weather (optional). If you choose your home’s town to show the weather, its name is turned into coordinates by Apple’s maps service, then these coordinates, rounded to about 1 km, are sent to the Norwegian Meteorological Institute (MET Norway, api.met.no) every 30 minutes while the weather is shown. No location permission is requested and your actual position is never read.
7. Deletion
Removing a camera in the app also deletes its password from the keychain. Removing a member or deleting the app erases the corresponding data from the device. Depending on the iOS version, keychain items may remain after the app is deleted: to erase them, remove your cameras in the app before deleting it.
8. Children
The app collects no data about children. The first name of a child added to the household stays on the device.
9. Your rights
Since Bonaparks keeps no data about you through the app (render pictures are deleted as soon as the app receives them), there is nothing for us to access, correct or erase: you keep full control of the data on your device. For any question about data protection (GDPR), write to bonaparks@icloud.com. You can also contact the data protection authority of your country (in France, the CNIL; in Italy, the Garante per la protezione dei dati personali).
10. Changes
If a future version of the app adds an online service or any data collection, this page will be updated before its release and the date above will be changed.