Privacy Policy

Introduction

BooOrBae ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application ("the App").

Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the App.

Table of Contents

1. Information We Collect
2. How We Use Your Information
3. AI Processing and Third-Party Services
4. Data Storage and Retention
5. Data Security
6. Your Privacy Rights
7. International Data Transfers
8. Children's Privacy
9. Changes to This Policy
10. Contact Us

1. Information We Collect

1.1 Information You Provide Directly

Account Information:

• Email address
• Password (encrypted)
• Display name (optional)
• Profile picture (optional)

User-Generated Content:

• Screenshots of conversations (temporarily processed, NOT stored)
• Analysis feedback (optional)

1.2 Information Collected Automatically

Usage Data:

• App usage statistics (feature usage, session duration)
• Device information (OS version, device model, unique device ID)
• IP address and location data (approximate, for regional analytics)

1.3 Information from Third Parties

Authentication:

• If you sign up via Google/Apple Sign-In: name, email, profile picture

Payment Information:

• Payment processor (RevenueCat/Stripe) handles transactions
• We DO NOT store your credit card information

2. How We Use Your Information

2.1 Core Functionality

• ✅ AI Vision Analysis: Analyze screenshots with Google AI
• ✅ AI Analysis: Generate relationship analysis
• ✅ Result Storage: Save analysis results to your account
• ✅ History Management: Display your past analyses

2.2 Account Management

• Create and manage your account
• Process subscription payments
• Send transactional emails (e.g., password reset, subscription updates)

3. AI Processing and Third-Party Services

3.1 AI Analysis Services

Google AI:

• Provider: Google LLC
• Purpose: AI-powered visual analysis of conversation screenshots and videos
• Data sent: Temporary upload of screenshots/videos for analysis (deleted immediately after processing)
• Privacy Policy: https://policies.google.com/privacy

3.2 What Data is Sent to AI Services

• ✅ Sent: Screenshots and videos temporarily for AI visual analysis
• ✅ Sent: User-provided context (optional, e.g., "We had a fight yesterday")
• ❌ NOT Sent: Your name, email, profile picture, or other account information

3.3 Other Third-Party Services

Supabase (Backend Database):

• Purpose: User authentication, data storage
• Location: US/EU data centers

RevenueCat (Subscription Management):

• Purpose: Process in-app purchases

4. Data Storage and Retention

4.1 What We Store

4.2 Data We DO NOT Store

• ❌ Original screenshot images
• ❌ Full conversation text (only analysis results)
• ❌ Names of people in conversations
• ❌ Phone numbers or contact information
• ❌ Credit card details

5. Data Security

We implement industry-standard security measures to protect your data:

• ✅ Encryption in Transit: All data transmitted using TLS/SSL (HTTPS)
• ✅ Encryption at Rest: Database encrypted with AES-256
• ✅ Secure Authentication: Passwords hashed with bcrypt
• ✅ Access Controls: Role-based access to data

6. Your Privacy Rights

6.1 GDPR Rights (European Union)

If you are in the EU, you have the right to:

• ✅ Access: Request a copy of your personal data
• ✅ Rectification: Correct inaccurate data
• ✅ Erasure ("Right to be Forgotten"): Delete your data
• ✅ Data Portability: Export your data in a machine-readable format
• ✅ Withdraw Consent: Opt-out of data processing

6.2 CCPA/CPRA Rights (California, USA)

If you are a California resident, you have the right to:

• ✅ Know: What personal information we collect and how it's used
• ✅ Delete: Request deletion of your personal information
• ✅ Opt-Out: Opt-out of the "sale" of personal information (we do NOT sell data)

6.3 How to Exercise Your Rights

To exercise any of these rights:

1. In-App: Go to Settings → Privacy → Request Data / Delete Account
2. Email: privacy@boorbae.app
3. Response Time: We will respond within 30 days

7. International Data Transfers

BooOrBae operates globally. Your data may be transferred to and processed in:

• 🇺🇸 United States: Supabase servers, AI processing
• 🇪🇺 European Union: Supabase EU region (optional)

For EU users, we use EU-approved Standard Contractual Clauses when transferring data outside the EU.

8. Children's Privacy

BooOrBae is NOT intended for users under 18 years of age.

We do not knowingly collect personal information from children under 18. If we discover such collection, we will delete the data immediately and terminate the account.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be effective immediately upon posting in the App.

We will notify you of material changes via:

• ✉️ In-app notification
• 📧 Email (if provided)
• 🌐 Notice on our website

10. Contact Us

For questions or concerns about this Privacy Policy, please contact us:

• General Privacy Inquiries: privacy@boorbae.app
• GDPR Data Protection Officer: dpo@boorbae.app
• Website: https://odtmc.com

Privacy Quick Reference

This Privacy Policy was last updated on January 2025 and is effective immediately.