Bento — Privacy Policy

Last updated: July 15, 2026

Bento is an image-board (booru) reader for iOS. This policy explains what data the app handles, what is stored where, and what choices you have. The short version: the app has no ads, no trackers and no analytics, and we never sell data. Most data never leaves your device.

1. Browsing third-party servers

Bento ships with no built-in servers. You choose which image-board servers to add, and the app talks to them directly from your device — those requests are not routed through us and we cannot see them. The servers you add are operated by third parties under their own privacy policies and terms; please review them. Credentials (usernames, API keys) you enter for those servers are stored on your device.

2. Data stored on your device

App settings, feed configuration, browsing history, saves, downloads and image caches are stored locally on your device only. You can clear caches in Settings and remove the rest by deleting the app.

3. Bento Cloud (optional account)

Creating a Bento Cloud account is optional. If you do, the following is stored on our server to provide sync and social features:

• Account data: email address, handle, display name, bio, avatar.
• Synced library data: saves metadata, followed tags, blacklists, app settings.
• Synced server logins you chose to sync — encrypted at rest (AES-256-GCM).
• Social data: friendships, direct messages including media attachments. Message attachments are access-protected; their URLs only work with a short-lived token tied to your session.
• Reports you file about other users (reporter, reported user, reason).

Your email address is used only for account verification and password reset. Profile visibility is controlled by you (public or private profile, and who may message you). We do not sell or share this data with third parties, and we do not use it for advertising or tracking.

4. Data retention & deletion

Bento Cloud data is kept only while your account exists. You can permanently delete your account at any time in the app (Settings → Bento Cloud → Delete Account); this immediately and irreversibly removes your profile and all data listed above from our server. Encrypted server backups are rotated within 7 days.

5. Security

All traffic to Bento Cloud uses TLS. Synced server credentials are encrypted at rest and are only ever returned to the account that owns them.

6. Age requirement

Bento is intended for adults. You must be at least 18 years old (or the age of majority in your jurisdiction) to use the app and Bento Cloud.

7. Changes & contact

We will update this page when the policy changes. Questions or requests (including data access or deletion requests): support@bentoapp.net.