Privacy

Privacy Policy.

What data Bos Digital and its apps access, why, where it is kept, and who it is shared with.

Last updated: 3 November 2026 · Baca dalam Bahasa Indonesia

This Privacy Policy applies to the website bosdigital.id and to the apps published by Bos Digital, including Poni, a desktop app for Windows 10/11 (poni.web.id), together called the "Services". "Bos Digital", "we", and "us" mean the developer of the Services, based in Indonesia.

1. Summary

  • We do not sell your data, show ads, or use tracking or analytics tools.
  • Poni keeps your data on your own computer. It does not send your usage data, calendar events, or notes to Bos Digital.
  • Data from your Google account is used only to provide the features you turn on, as described below.

2. Data we access and collect

Google account data (Google sign-in and Google Calendar)

If you choose to connect your Google account, the Services ask for your permission through Google's consent screen and access only the following:

  • Basic profile information (scopes openid, email, profile): your name, email address, and profile picture. These are used to show which account is connected and to sign you in.
  • Google Calendar events (read-only Calendar access): the titles, times, locations, and meeting links of events in the calendars you choose. These are used only to show your upcoming agenda and reminders inside Poni.

We do not request permission to create, change, or delete your calendar events, and we do not access Gmail, Google Drive, contacts, or any other Google data.

Data you enter in Poni

Settings, to-dos, notes, Screen Time statistics, and other app data that you create are stored only on your computer, in the %APPDATA%\Poni folder.

Website

bosdigital.id does not use cookies, ads, or analytics. Like any web server, our hosting provider may keep technical logs (such as IP address, browser type, and time of access) for security and operations.

3. How we use the data

  • To provide the feature you turned on: signing in, and showing your calendar events and reminders in Poni.
  • To keep the Services secure and working, and to fix problems you report to us.

We do not use Google user data for advertising, to build user profiles, for credit or lending decisions, or to develop, improve, or train artificial intelligence or machine learning models.

4. Storage and security

  • Google calendar events are fetched directly from Google to your computer and are cached only on that computer. They are not uploaded to Bos Digital servers.
  • OAuth access and refresh tokens, and any API keys you enter, are stored on your computer encrypted with Windows Data Protection (DPAPI), so other user accounts on the PC cannot read them.
  • All connections to Google and other providers use HTTPS.

5. Sharing and disclosure

We do not sell, rent, or trade your data, and we do not share Google user data with third parties. Data leaves your computer only in these cases:

  • Google: to sign you in and read your calendar, under the Google Privacy Policy.
  • Other features you turn on in Poni: Weather sends the coordinates of the city you pick to Open-Meteo; iCal calendars are fetched from the link you enter; GitHub uses the token you enter to read pull requests; Translate sends the text you translate to the provider you choose (Anthropic, an OpenAI-compatible service with your own API key, or Ollama on your computer). Google user data is never sent to these providers.
  • Updates and downloads: Poni and this website check for and download new versions from GitHub Releases. The website also loads fonts from Google Fonts.
  • Legal reasons: if required by law. Because we do not hold your Poni data on our servers, we generally have nothing to disclose.

6. Google API Services User Data Policy

Bos Digital's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Retention and deletion

  • You can disconnect your Google account at any time from Poni's settings. This deletes the stored tokens and cached calendar events from your computer.
  • You can also revoke Poni's access at any time on your Google Account's third-party connections page.
  • Uninstalling Poni and deleting the %APPDATA%\Poni folder removes all of its data from your computer.
  • Because we do not store your Google data on our servers, there is nothing left with us after you disconnect.

8. Payments and support

Payments through QRIS are processed by your bank or e-wallet, and payments through Gumroad are processed by Gumroad. We receive only the information those providers give us for that transaction.

9. Children

The Services are not directed to children under 13, and we do not knowingly collect personal data from them.

10. Changes to this policy

If we change this policy, we will update the date at the top of this page. If a change affects how Google user data is used, we will ask for your consent again before it applies.

11. Contact

For questions or requests about privacy, open an issue on GitHub.