Privacy

Your data, your business

Last updated: 30 October 2026

B03M has two parts: this site, boem.top, and the app at app.boem.top, with B03M FAM for home and B03M W0RK for your work. This page says what we keep, who gets to see what, and what your rights are. This is a translation of the Dutch privacy statement. If the two differ, the Dutch version prevails.

Who we are

B03M is a product of HVJW (Chamber of Commerce 77445147). HVJW is responsible for what happens to your data. Questions? Mail yo@boem.top.

What we keep

• Your account: your username, your password (encrypted, we can't read it), your email address and your preferences, like your language, your dock and your notifications.
• What you put in B03M: your calendar, recipes, photos, sayings, pocket money, messages to KletsGPT, and in W0RK your knowledge base, clients, boards and the mail and comments from your integrations.
• Logs: when you log in and from which IP address, and changes to settings and other sensitive actions (the audit log).

We also keep track of where B03M goes wrong and where it stutters: which pages get used, which errors occur. We need that to find bugs and make B03M better. Not to build a file or profile on you. No ads, and we sell nothing.

What never leaves the building

Your password and the keys of your integrations (your mailbox, your web shop, an AI service) sit encrypted with us. A key only goes to the service it belongs to, and afterwards you only see its last four characters yourself.

These never go to an AI service: photos and avatars, passwords and keys, payment details, and anything you don't use an AI feature for.

Where it's stored

B03M runs on our own servers at Hetzner, in Germany. Your photos and files are there too. A copy of the database, in case something goes wrong, goes to Backblaze (B2) every day.

Your photos reach your browser through BunnyCDN (bunny.net), with a link that expires after a short time. Bunny sees which file your browser requests and from which IP address, not who you are.

How we secure your account and data

• Every family its own space. A family or work environment stands apart: the database itself keeps them separate. Another family never sees anything of yours, and what's in W0RK can't be seen in FAM.
• Two-step verification. Switch it on, with a code from an app like 1Password or Google Authenticator. Then someone with only your password gets nowhere. Here's how.
• Too many misses means a short wait. Try a wrong password too often, and you wait a quarter of an hour.
• Kids don't log in on their own. They come in through a parent, and the way back to a parent's screen sits behind a PIN.

Which service gets to see what

Something only goes to another service when a feature needs it, and then only what that feature needs.

AI: Ollama Cloud

The language models run at Ollama Cloud (ollama.com), which hosts the models for us. The model we use most is Mistral Large 4. Your data itself stays with us in Germany; when you use an AI feature, a request goes to Ollama Cloud. B03M only sends text, and only when you use an AI feature:

• KletsGPT: your message and the conversation so far; your family's name; the names, role and age of the family members; the names, kind and age of your pets; extra instructions from a parent; and what KletsGPT looks up for you: the shopping list, the weekly menu, recipes, your notifications and the weather.
• Recipes: the text of a recipe page you have read in or paste, and a recipe in another language, to translate it.
• Photos: the description you write with a photo, with the place, the date and the ages B03M found for it, to turn it into one sentence. Not the photo itself.
• Living room: the description of a pet or family member, when you press Save or Redraw. B03M makes the pixel portrait itself, on the server.
• W0RK, drafts: a client's message (sender, subject and text) and the cards from your knowledge base that go with it.
• W0RK, knowledge base: for a suggestion, the card and the corrections you made; for a starter scrape, the public pages of your website.

Searching the knowledge base works with vectors. B03M makes those on its own network, so that text doesn't go outside.

Your own key: a work environment can connect its own AI service, like OpenAI or Mistral. Then what's listed above under W0RK goes to that service, under your own agreements with them.

The voice of the little ones: ElevenLabs

If your family has its own voice for the little ones in Games, ElevenLabs (elevenlabs.io) makes the sentences the corner says, once. B03M sends those sentences, with the first names of the family members and the names of your pets and house robots in them. The audio is then stored with us; nothing goes to ElevenLabs while playing. Without your own voice, your browser speaks, and nothing goes anywhere.

Mail: our own mail server, and Lettermint

Mail from the app (a login link, an invite, the daily mail, a notification) goes through our own mail server. If that fails, through Lettermint. It then sees the address, the subject and the text of that one mail.

Answers you send in W0RK go through your mail server, with your address. Not through us.

Mail to your B03MB0X address comes in through Lettermint, a Dutch company, which processes it in the EU. Lettermint sees the sender, the subject, the text and the attachments of that mail, and passes it on to B03M. We keep it no longer than needed. Mail from anyone other than you only comes in once you allow that sender.

Your integrations in W0RK

Connect a mailbox, a WordPress site, a WooCommerce shop or MailBlue, and B03M fetches what belongs to it: mail, comments, orders with the client attached, signups. B03M only reads: in your mailbox it marks nothing as read and moves nothing, except a message you take out of spam yourself.

Places, recipes, weather and notifications

• Places with photos: if a photo has coordinates, or you look up a place, B03M asks OpenStreetMap (Nominatim) which place it is.
• Recipes: a recipe page B03M can't read itself is looked up through Kagi. Kagi gets the address of the page.
• The weather: your browser asks Open-Meteo for the weather itself, for a fixed spot in the Netherlands, without sending anything about you.
• Push notifications: a notification on your phone or computer goes through your browser's push service (Apple, Google or Mozilla), encrypted. That service can't read it.

Statistics in the app: OpenPanel and Swetrix

In the app we keep track of how people use B03M and where it goes wrong, with OpenPanel and Swetrix. That way we see errors and slow spots, not what you do. They run on our own server; your browser only loads their script from openpanel.dev and swetrix.org. They see your IP address.

Per visit: the page address, without what comes after a question mark and without a child's name; the page title (there's never a name in it); the page you came from; your browser, operating system, screen size, language and time zone; and roughly where you are, derived from your IP address. OpenPanel also counts a click on a link to another site, Swetrix an error on the page.

Never: your name, your email address, your username or any other number that could trace back to you, and nothing of what you put in B03M. No cookies, and nothing in your browser's storage. To tell one visit from another, their server makes a code from your IP address and your browser, and that code changes every day.

This site, the waitlist and the newsletter: Ghost and Mailgun

boem.top runs on Ghost, on our own server. Join the waitlist, and Ghost keeps your email address, the label "wachtlijst" (waitlist), when you signed up, and from which page. If you got an invite through the waitlist, B03M added the label "uitgenodigd" (invited), and put you on the newsletter for people who use B03M. We don't count visits on boem.top.

Ghost sends a newsletter from boem.top through Mailgun (in the EU). It sees your address and the mail. For a newsletter, Ghost measures whether it was opened and which link you click. There's an unsubscribe link under every mail.

Your browser loads fonts and icons from cdn-static.boem.top, also through BunnyCDN. Ghost's scripts for signing up and searching come from jsDelivr (cdn.jsdelivr.net), and Stripe's script from js.stripe.com (see below). They see your IP address.

Language on your first visit. On your first visit to boem.top, your browser asks geo.boem.top, our own server at Hetzner in Germany, which country your IP address is from. From the Netherlands you see the site in Dutch, from any other country in English. We look that country up in a database on that server itself, DB-IP Lite by DB-IP (IP Geolocation by DB-IP, under CC BY 4.0). Your IP address goes nowhere else and geo.boem.top doesn't keep it. Your browser then only remembers the language, not the country, so we don't ask again. If geo.boem.top doesn't answer, we go by your browser's language. If you pick a language yourself with the language button, that choice always wins.

Paying: Stripe

You take out a subscription to B03M FAM or B03M W0RK on boem.top, and you pay through Stripe (Stripe Payments Europe, in Ireland). You fill in your card or bank details on Stripe's payment page. We never see them, and neither do Ghost or the app.

• Stripe gets: your email address and name, your address (for the right VAT), your payment details and which subscription you take. Stripe makes your invoices and mails you the receipts.
• If you choose Klarna, Amazon Pay, Satispay or Link at checkout, your payment details also go to that service.
• Ghost keeps, with your membership, which subscription you have (FAM or W0RK, monthly or yearly, and whether it's active) and the number Ghost uses to find you at Stripe.
• The app only gets from Ghost which subscription you have and whether it's active.

Stripe is partly responsible for that data itself, for example to prevent fraud and because the law requires it, and may also process it in the United States, under the arrangements the EU has for that. More in Stripe's privacy policy.

On boem.top your browser loads Stripe's script. Stripe uses it to spot fraud and sets two cookies for that, __stripe_mid and __stripe_sid. Not for ads.

How long we keep things

• Logins: 90 days.
• The audit log: 365 days.
• The email address of a mail the app sent: 90 days. After that we only know that a mail went out, which kind and when.
• A failed AI call: 30 days, and then only when, which module and which kind of error. Never what you asked or wrote.
• Your own data: as long as you have an account. If your payment stops, your account stays, set to read only, until you have it deleted. Delete your account, and everything is gone within 30 days, except the lines in the audit log: those stay until their term is up.
• The waitlist: until you ask us to delete your address. You can always unsubscribe from the newsletter, but then your address is still on the waitlist.
• Your membership on boem.top: until you ask us to delete it. Cancel your subscription, and you stay a free member.
• Payments and invoices: 7 years, because the law requires it (the Dutch tax retention obligation). Even if you have your account deleted.

Your rights

You may view your data, have it corrected, have it deleted and take it with you, and you may object. Much of it you see and change yourself under Settings in the app. For the rest, or to have everything deleted: mail yo@boem.top. There's no button for that in the app yet. We can only delete invoices and payments once the legal retention period is up.

Don't agree with how we handle your data? Then you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Cookies

The app only uses a cookie to keep you logged in. On boem.top Ghost sets a cookie when you come in through the link in your mail, to recognise you as a member, and Stripe's script sets two against fraud (see Paying). No cookies for ads; the statistics work without them.

Fonts, words and sound in the games

The retro letters in MEGA GAME TIME are IBM VGA 8x16 by VileR, from The Ultimate Oldschool PC Font Pack (int10h.org), under the Creative Commons Attribution ShareAlike 4.0 license (CC BY-SA 4.0). The words Wordle NL accepts as a guess come from the Dutch word list of OpenTaal (opentaal.org), under the Revised BSD License and CC BY 3.0. Both are on our own servers: your browser requests nothing from int10h.org or opentaal.org.

Your browser makes the music and sounds in the games itself, with our own tunes and effects in the style of the old game consoles. No music or sound comes from an original game. Tetris plays Korobeiniki, a Russian folk song in the public domain, in our own 8-bit version.