Boardy

Privacy Policy

Last updated: February 20, 2026

Boardy ("we", "our", "us") is a social music tracking application that lets you rate, review, and share your music journey. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.

1. Information We Collect

Account Information

When you create an account, we collect:

Email address
Username
Profile information you choose to provide (display name, bio, avatar image)

Music Activity Data

When you use Boardy, we collect data about your interactions:

Album ratings and reviews
Listening logs and journal entries
Lists you create
Comments and likes
Posts and media you share

Spotify Data

If you choose to connect your Spotify account, we access the following data with your explicit permission:

Your Spotify display name and profile image
Your top artists and top tracks
Your recently played tracks
Your playlists (for export features only)

We store your Spotify OAuth tokens securely using encrypted device storage (Expo SecureStore). We never access or store your Spotify password. You can disconnect your Spotify account at any time from the app settings.

Automatically Collected Information

We may automatically collect certain information when you use the app, including device type, operating system version, and usage analytics to improve the app experience.

2. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Boardy app
Create and manage your account
Display your profile and music activity to other users
Personalize your experience and generate music recommendations
Enable social features (following, liking, commenting)
Send important service-related notifications
Analyze usage patterns to improve the app
Enforce our Terms of Service and protect against misuse

3. Information Sharing and Disclosure

Public Information

Your profile, reviews, ratings, lists, and posts are visible to other Boardy users by default. You can control your profile visibility in the app settings.

We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

Service Providers

We may share information with third-party service providers who help us operate the app:

Supabase - Authentication, database, and file storage (Supabase Privacy Policy)
Spotify - Music data and listening history (Spotify Privacy Policy)
Last.fm - Genre browsing data (Last.fm Privacy Policy)

Legal Requirements

We may disclose your information if required by law, subpoena, or other legal process, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4. Data Security

We implement industry-standard security measures to protect your data:

All data transmitted between the app and our servers is encrypted using HTTPS/TLS
Authentication tokens are stored securely on your device using encrypted storage
Our database uses Row-Level Security (RLS) to ensure users can only access their own data
Passwords are hashed and never stored in plain text

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. When you delete your account:

Your personal profile data is removed within 30 days
Your reviews, ratings, and comments may be anonymized and retained for the integrity of community data
Backup copies may persist for up to 90 days before being purged

6. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal data:

Access - You can view and update your personal information at any time through the app
Deletion - You can request deletion of your account and associated data
Portability - You can request an export of your data
Disconnect - You can disconnect third-party services (Spotify) at any time
Correction - You can update inaccurate personal information
Withdraw Consent - You can withdraw consent for optional data processing at any time

To exercise any of these rights, contact us at boardy.music@gmail.com.

7. Children's Privacy

Boardy is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal data, we will promptly delete it. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at boardy.music@gmail.com.

8. International Data Transfers

Your information may be transferred to and maintained on servers located outside your country of residence. By using Boardy, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

9. European Users (GDPR)

If you are a resident of the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to lodge a complaint with a supervisory authority

Our legal basis for processing your data includes: performance of a contract (providing the service), legitimate interests (improving the app), and consent (optional features like Spotify connection).

10. California Users (CCPA)

If you are a California resident, you have the right to:

Know what personal information we collect about you
Request deletion of your personal information
Opt-out of the sale of your personal information (we do not sell your data)
Non-discrimination for exercising your privacy rights

11. Cookies and Tracking

Boardy is a native mobile application and does not use browser cookies. We may use anonymous analytics tools to understand app usage patterns and improve the user experience. These tools do not collect personally identifiable information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

Posting the new Privacy Policy in the app
Updating the "Last updated" date at the top of this page
Sending you a notification through the app for significant changes

We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: boardy.music@gmail.com