Privacy Policy
Plain-language summary: BoredCrew stores what you deliberately tell your crews (when you’re free, what you’re planning, what you say in a plan’s chat) and shows it only to the crews you picked. It never records your location, never uploads your contacts, never sells or shares your data for advertising, and lets you delete your account from inside the app.
Who we are
BoredCrew is operated by Rany Daioub, in New South Wales, Australia, who is the controller of the personal data described here. Privacy questions: [email protected]. Anything else: [email protected].
What we collect
| Data | Where it comes from | Why |
|---|---|---|
| Account. Your Apple ID user identifier, and the name and email address Apple passes to us when you sign in, which may be Apple’s private relay address if you chose to hide yours. | Sign in with Apple, the only way to sign in. | To create and recognise your account. |
| Profile. Display name, handle, bio, the photo you choose, an avatar colour, and whether you can be found by handle. | You, in the app. | So your crew knows who you are. |
| Availability. The windows you say you are free (start, end, an optional mood and note), the times you say you are usually free (weekday, time of day, and the time zone they are in), and the crews each was shared with. | You, in the app. | The point of the app: your crews and contacts see when you’re free. |
| Plans. Plans you make or join: title, a meeting point and address, notes, an approximate cost per person, the photos, ten-second silent clips, memories, dishes, bills and proofs of payment added to it, your answer (going, maybe, can’t), and messages you send in a plan’s chat. A clip is cut on your phone before it is uploaded: its sound and the file’s own notes about where and when it was filmed are removed. | You, in the app. | To arrange the outing with the people in it, and to look back at it. |
| Stories. A photo or a ten-second silent clip with an optional line, shown to your contacts and crewmates for a day, and who liked it. Nobody is told who looked at a story, and there is no count. | You, in the app. | To share a moment with your people. The likes are seen by you alone. |
| Crews. Crew names, membership and roles. | You and the crew. | To decide who sees what. |
| Contacts. Who you have added, who has asked to add you and what you answered, and your own add code (the QR on the back of your card). | You, by scanning a code or asking by handle. | To decide who can name you on a plan or put you in a crew. |
| Safety. Reports you make (reason, optional detail, and a copy of the reported content as it was at that moment) and people you block. | You, in the app. | To moderate, and to keep blocked people apart. |
| Notifications. A push token for each device, the platform, your quiet hours, daily limit and per-crew mutes, and the notifications sent to you. | Your device, and your settings. | To deliver notifications, and not too many of them. |
| Diagnostics and usage. Crash reports, and which screens and features are used, with a pseudonymous account identifier, app version, device model and OS version. | The app, automatically. | To find and fix problems. Never for advertising. |
What we deliberately do not collect
- Your location. The app never records where you are. It reads your position only when you tap “Use my location” while setting a plan’s place (to put down the venue you are standing at), or “Near me” on Discover (the crosshair on its map does the same) to show the public plans within 25 to 100 kilometres of you. Either way it is read once, on the spot, on your phone, and Near me’s reading never leaves it. What a plan stores is the venue you chose to save: its exact point, which only the people on that plan can see (as they see its address), and the same point rounded to about a kilometre for everyone else. Meeting points and parking spots are pins the host places on the plan's map, seen by the same people.
- Your contacts, as a list. People are added by scanning their code or typing the handle they gave you, and that never touches your address book. If you choose Find people from your contacts, the app reads the phone numbers you let it see, scrambles each one on your phone (a one-way hash with a fixed key), and sends only the scrambled forms to check which belong to somebody who verified that number here and chose to be found by it. Numbers that match nobody are discarded at once; nothing from your address book is stored, and no name from it leaves your phone. Your own number, if you verify one, is kept by our sign-in provider and stored in our database only in the same scrambled form. Be aware that scrambling is not the same as hiding: there are only so many phone numbers, so a scrambled number is not unreadable to us. What it means is that your number is never stored as a number and never shown to anybody.
- Your photo library. When you add a photo or a clip, the system’s own picker hands the app only the ones you pick. The app never reads the rest of your library and never asks for access to it.
- Advertising identifiers, and nothing is used to track you across other companies’ apps or websites.
Who can see what
Nothing you post is public unless you make it so. A status you set (Bored, Working and the rest) is seen by your contacts and by the members of the crews you shared it with. A time you say you are usually free, or a window with no status, is seen only by those crews.
A plan is one of three kinds, and you choose which. A private plan is seen only by you, the people you asked by name, and the members of any crew you sent it to. A crews plan is seen in full by the same people. Anyone who shares a crew with somebody going (you count as going) also sees a limited face of it, including which of their own crewmates are going, and can ask to join. You decide, and nobody is told when you say no. A public plan shows its limited face to anyone signed in, and anyone signed in can join it in one tap until its spots are full. Whoever joins, or is let in, sees the plan in full, as the people you asked do.
A plan’s limited face is its name, when, the place’s name and how to get there, roughly where it is (to about a kilometre, on a map), the cost each, the dress code, the bring list with nobody’s name against it, its photos, your name and picture, and how many are going. It never includes the plan’s address, its guest list, its chat, its poll, receipts, payments or booking.
Your profile is visible to your contacts, to people who share a crew with you, to anyone you have asked to add or who has asked to add you, to the host of a plan you asked to join (and to anybody who asked to join yours), and, if you leave “discoverable by handle” on, to someone who types your exact handle. Blocking someone hides the two of you from each other everywhere in the app, in both directions.
Crew members can see who else is in the crew. The people in a plan can see who has answered it and what was said in its chat. Reports are seen only by us.
How we use it
To run the service described above; to send the notifications you have chosen to receive; to act on reports and keep people who have blocked each other apart; to understand which parts of the app are used and fix what breaks; and to comply with the law. We do not sell personal data and do not use it for advertising.
Where the GDPR applies, our legal bases are performance of our contract with you (the service itself), our legitimate interests (safety, security, diagnostics, product improvement), and your consent where we ask for it (notifications, camera access to scan a code).
How long we keep it
- Availability windows are deleted seven days after they end.
- Plans, with their answers, chat, photos, clips and memories, are kept so the people on them can look back at them. A plan goes when its host deletes it, or when the account that made it is deleted. A note that somebody confirmed they were still coming is cleared the day after the plan.
- Stories are deleted a day after they were posted, with their likes. A story that was reported is kept, hidden, for up to thirty days so the report can be looked at.
- Notifications are deleted after a short period once read.
- Reports are kept so that a complaint cannot be erased by deleting an account; if you delete your account, reports you made are kept without your name on them.
- Your account: deleting it hides you immediately and permanently removes your data after a thirty-day grace period during which you can change your mind.
Who we share it with
Service providers who process data on our behalf and under contract: Apple (Sign in with Apple, push notification delivery through APNs, Apple Weather for the forecast on a plan, asked from our server with a venue’s location rounded to about a kilometre, never from your phone, and Apple Maps, which your phone asks directly and never through us: it draws the maps, finds a place from the words you type into a plan’s place search and the area the map is showing, and names the street at a point you put down), Supabase (database and hosting), Expo (push notification relay), OpenAI (an automated check of every picture you add, for nudity and graphic violence, before anybody else sees it: the picture is sent for the check and is not kept or used for training), Sentry (crash reporting) and PostHog (product analytics). We may share data if the law requires it or to protect someone’s safety. We do not share it with advertisers.
Some providers process data in the United States. Where data leaves the EU or UK we rely on the providers’ standard contractual clauses or an adequacy decision.
Your choices and rights
- Delete your account from You → Account → Delete account. No email required.
- Withdraw any availability window, leave any crew, call off any plan you host.
- Turn off discovery by handle, notifications, or any crew’s notifications, in the app.
- Access, correct, export or erase your data, or object to processing, by writing to [email protected]. If you are in the EU or UK you can also complain to your data protection authority.
Children
BoredCrew is for people aged 16 and over. We do not knowingly collect data from anyone younger; if you believe we have, write to us and we will delete it.
This website
These pages set no cookies, run no analytics and load nothing from third parties. The pages a BoredCrew link opens when you don't have the app look nothing up, and copy the link to your clipboard only when you tap the button that says so.
Changes
If this policy changes in a way that matters, we will say so in the app before the change takes effect. The effective date at the top is the version you are reading.