← Back

privacy policy.

Last updated: May 3, 2026

1. who we are.

BoredApp is operated by Digital Haist (“we,” “us,” “our”). This policy explains what personal information we collect, how we use it, who we share it with, and your rights regarding that information. BoredApp is currently available only to users in the United States and Canada.

2. information we collect.

We collect only the information needed to operate BoredApp as a private event planning tool. Specifically:

  • Account information: your name, email address, and profile photo. Collected so you can create an account and be identified by people you invite.
  • Event information: event titles, descriptions, dates, locations, invite lists, RSVPs, poll responses, and chat messages. Collected so BoredApp can coordinate your event.
  • Location data: when you explicitly opt in to share your ETA for a specific event, your device briefly transmits your current coordinates to our server so we can calculate your estimated minutes-to-arrival. We do not store your coordinates. Only the resulting ETA (a minute count) is saved to our database and shown to other attendees of that event. Your coordinates exist only in transit to the routing service and are discarded after the minutes are computed.
  • Battery level: when you are actively sharing an ETA, your approximate battery percentage may be visible to other attendees of that event (shown only when it drops below 30%, so others know you may go offline soon). Not collected when sharing is off.
  • Device and usage data: device type, operating system, app version, crash logs, and basic usage analytics. Used to maintain service stability and improve the product.

3. how we use your information.

We use your information solely for the purposes stated below. We do not use it for any other purpose without your consent.

  • Enable you to create events and invite your friends
  • Send push notifications when friends invite you to events
  • Provide navigation, calendar integration, and live ETAs for events
  • Facilitate event chat between invited participants
  • Operate, maintain, and improve BoredApp
  • Detect and prevent fraud, abuse, or security issues
  • Comply with legal obligations

4. who sees your information.

BoredApp is built around private events with people you invite. Your events are only visible to the people you invite. Your profile information is only shared with people you connect with through event invitations. We do not have public profiles, public feeds, or discovery features that expose your information to strangers.

5. location data.

The short version: we compute your ETA. We don't store your location. Ever.

BoredApp is built on a privacy-first principle: we never store your coordinates. When you opt in to share your ETA for an event, your device sends its current coordinates to our server long enough to compute your estimated arrival time, and then they are discarded. Only the resulting minute count is saved and visible to the host and people invited to that specific event. No map, no dot, no coordinate — just “~12 min.”

Opt-in and scoped. Sharing is always opt-in, always scoped to a single event, and always time-limited. You choose when to start, and you can stop at any time from the app or your device settings.

Automatic stop.To minimise the time your location is being queried at all, BoredApp automatically ends any sharing session when: (a) you arrive at the event venue (within approximately 200 metres), (b) one hour past the event's start time (a local notification offers a “Still coming” option if you're genuinely late), or (c) after a six-hour hard cap, whichever comes first. You can also stop manually at any time.

Routing provider.For ETA calculations, your coordinates are sent to Google's routing service (Distance Matrix API) via our Cloud Function. Google processes the coordinates to return an estimated arrival time. They exist only in transit — neither BoredApp nor Google retains them for ongoing use.

Visibility to other attendees. Other people invited to the event see your minute-count (e.g. “~12 min”) and, once you arrive, a confirmation that you've arrived. They never see your coordinates, a map position, or your route.

6. third-party service providers.

We use a small number of trusted third parties to operate BoredApp. These providers only receive the information needed to provide their service and are contractually required to protect it:

  • Google Firebase (hosting, database, authentication, and push notifications)
  • Google Analytics (anonymous usage analytics for our marketing website)
  • Apple (iOS app distribution, TestFlight, and push notification delivery)
  • Google Maps Platform (Apple Maps and Google Maps for turn-by-turn directions when you tap navigate; Google's Distance Matrix API to compute live arrival ETAs when you opt in to ETA sharing for an event)

We do not sell your personal information. We do not share your data with advertisers.

7. where your data is stored.

BoredApp primarily stores data on Google Cloud infrastructure in the United States (Northern Virginia region). If you are located in Canada, your personal information will be transferred to and processed in the United States. By using BoredApp, you consent to this transfer. We take commercially reasonable steps to ensure your data receives a comparable level of protection regardless of where it is processed.

8. how long we keep your data.

We retain your personal information only as long as needed to provide BoredApp and fulfill the purposes described in this policy.

  • Active accounts: data is retained for as long as your account is active.
  • Deleted accounts (in-app): when you delete your account from within the app, your personal information is removed from our active systems immediately.
  • Deleted accounts (by email request): if you can't access the app and email us at privacy@digitalhaist.com to request deletion, your personal information is removed from our active systems within 30 days.
  • Backups: residual copies may remain in encrypted backups for up to 90 days before being permanently purged through routine backup rotation.
  • Event chat:chat messages you sent are removed from your account when you leave an event or delete your account. Other participants' copies of messages already delivered may persist in their own event history.
  • Live ETA data: automatically deleted within six hours of your last update, whether you stop sharing manually or a session ends via auto-stop. A scheduled cleanup sweeps any older records every fifteen minutes as a secondary safeguard. Coordinates used to compute ETAs are never stored; only the resulting minute counts, which are deleted on the same six-hour rolling basis.
  • Legal retention: we may retain certain information longer if required by law (e.g., to resolve disputes or enforce agreements).

9. your rights.

Depending on where you live, you have the following rights over your personal information. To exercise any of them, contact us at privacy@digitalhaist.com.

  • Access: request a copy of the personal information we hold about you.
  • Correction: update or correct inaccurate information.
  • Deletion: delete your account and associated personal information (you can do this directly in the app).
  • Portability: receive a copy of your personal information in a structured, commonly used format.
  • Withdraw consent: revoke permissions (for example, turn off location sharing) at any time.
  • Complaint: lodge a complaint with a privacy regulator, such as the Commission d'accès à l'information du Québec (for Quebec residents) or the Office of the Privacy Commissioner of Canada.

10. data security and breach notification.

We use industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and secure authentication. However, no method of electronic storage is 100% secure. If we become aware of a security incident that compromises your personal information, we will notify affected users and the appropriate regulators without undue delay, in accordance with applicable law.

11. age requirement.

BoredApp is intended for users 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us at privacy@digitalhaist.com and we will delete it promptly.

12. cookies and analytics.

Our marketing website (boredapp.io) uses Google Analytics to measure traffic and understand how visitors find and use the site. This data is aggregated and does not personally identify you. The BoredApp mobile and web applications do not use advertising cookies or cross-site tracking.

13. changes to this policy.

We may update this privacy policy from time to time. When we make material changes, we will notify you through the app, by email, or by updating the “last updated” date at the top of this policy. Continued use of BoredApp after changes take effect constitutes acceptance of the updated policy.

14. privacy officer and contact.

Digital Haist is the person in charge of protecting your personal information and responding to privacy requests under Quebec's Law 25 and applicable privacy laws. You can reach our Privacy Officer at:

Digital Haist — Privacy Officer
Email: privacy@digitalhaist.com

We respond to privacy requests within 30 days of receiving them.