Privacy Policy — BoulderBook App

Applies to the BoulderBook app on iOS and Android

What we collect and what we receive

In order for us to provide you the best possible experience on our app, we need to collect and process certain information. Depending on your use of the Services, that may include:

• Your e-mail address, to send a confirmation mail and to allow resetting the password.
• A username, which does not need to contain your real name.
• Usage data — when you visit our site, we will store: the website from which you visited us, the parts of our site you visit, the date and duration of your visit, your anonymised IP address, and information from the device you used during your visit (device type, operating system, screen resolution, language, country you are located in, and web browser type). We process this usage data in Matomo Analytics for statistical purposes, to improve our site, and to recognise and stop any misuse.

This data will only be stored as long as you have not deleted your account.

Your rights

You have the right to be informed of Personal Data processed by BoulderBook, a right to rectification/correction, erasure and restriction of processing. You also have the right to ask from us a structured, common and machine-readable format of Personal Data you provided to us.

We can only identify you via your email address, and we can only adhere to your request and provide information if we have Personal Data about you through you having made contact with us directly and/or you using our site and/or service. We cannot provide, rectify or delete any data that we store on behalf of our users or customers.

To exercise any of the rights mentioned in this Privacy Policy, and in the event of questions or comments relating to the use of Personal Data, you may contact BoulderBook's support team: privacy@boulder-book.com.

In addition, you have the right to lodge a complaint with the data protection authority in your jurisdiction.

Retention of data

We will retain your information as long as your account is active, as necessary to provide you with the services, or as otherwise set forth in this Policy. We will also retain and use this information as necessary for the purposes set out in this Policy and to the extent necessary to comply with our legal obligations, resolve disputes, enforce our agreements and protect BoulderBook's legal rights.

We also collect and maintain aggregated, anonymized or pseudonymized information which we may retain indefinitely to protect the safety and security of our Site, improve our Services, or comply with legal obligations.

Direct messages

If you use direct messages, the messages you send and receive are stored on our servers so they can be delivered to the other person and shown on all of your devices. They are encrypted in transit (HTTPS) but not end-to-end encrypted. We do not read your messages; our moderation team only sees a message when someone reports it (see below).

Push notifications about a new message contain only the sender's username — never the text of the message.

Reporting, blocking and moderation

You can block any user and report any message you receive. When you report a message we store a copy of the reported message, the reason you gave, your username and the sender's username, and send them by email to our moderation team. The sender is not told that they were reported or by whom. We may remove reported content and suspend accounts that break our terms of use.

Reports are kept until they have been handled and then for up to 180 days, so that repeated abuse can be recognised, after which they are deleted.

Service providers

To run the app we use the following processors. They receive only the data needed for their task:

• Firebase Cloud Messaging (Google Ireland Ltd.) delivers push notifications. It receives a device token for your phone and the notification text described above.
• Sentry (Functional Software, Inc.) receives technical error reports — for example the device type, app version and the error that occurred — so we can fix crashes. The contents of direct messages and login requests are removed from these reports.
• Brevo (Sendinblue SAS) delivers our emails, such as the account confirmation and password reset. It receives your email address and the email we send you.
• Sign in with Google or Apple, if you choose it: Google or Apple confirm your identity to us and share your email address, unless you choose to hide it (Apple).

Deleting your account

You can delete your account from within the app at any time. Deleting the account removes your personal data as described above. The direct messages you sent are erased and your conversations disappear from the other participants' inboxes; your blocks and registered devices are deleted too. The only exception is a copy of a message of yours that someone reported, which is kept for the period described under "Reporting, blocking and moderation".

Privacy policy changes

We may update this Policy from time to time. If we do, we will let you know about any material changes, either by notifying you on the website or by sending you an email.

Provider