Privacy Policy

Effective Date: [INSERT DATE]

At BoomBoom, your privacy matters to us. We built this app for creators and fans, and we want you to feel safe and informed every time you use it. This Privacy Policy is our way of being transparent about what data we collect, why we collect it, and how it’s used — in plain language.

Please take a few minutes to read this. By using BoomBoom, you’re agreeing to the practices described here. If you have questions or concerns, you can reach out to us at support@boomboom.email.

Accessing This Policy: This Privacy Policy is accessible within the BoomBoom app under Settings → Privacy Policy, as well as at https://boomboomhq.com/privacy-policy.

A note on our website: Our website (boomboomhq.com) is purely informational. It doesn’t collect your data, use cookies, or track you in any way. This Privacy Policy is mainly about our iOS app.

What Information We Collect
How We Use Your Information
Who We Share Your Information With
Advertising and Analytics
How Long We Keep Your Data
How We Protect Your Data
Kids and Teen Privacy
Your Rights and Choices
California Residents
Do Not Track
Third-Party Services
Updates to This Policy
Get in Touch

1. What Information We Collect

We only collect what we actually need to make BoomBoom work for you.

1.1 What You Give Us Directly

Account details: Your email address, username, date of birth, and anything else you add to your profile like a photo or bio.
Your content: Photos, videos, audio, or anything else you post to the platform.
Payment info: If you buy Lux (our in-app currency), Apple handles your payment — we never see your card details. If you’re a creator getting paid out, we collect your PayPal account info and any tax documentation required by law.
Support messages: If you contact us, we keep a record of that conversation so we can help you properly.
Ratings and feedback: Any ratings or reviews you leave on content.

1.2 What We Collect Automatically

When you use the app, some information is collected automatically to keep things running smoothly and securely:

How you use the app: Content you view, features you tap, how long you spend in the app, and general usage patterns.
Your device: Device model, iOS version, app version, and unique device identifiers.
Technical info: Your IP address (used for security and to understand your general region), crash logs, and performance data.
Transaction history: Records of Lux purchases, content unlocks, and creator payouts.

1.3 What We Receive From Third Parties

Apple sends us basic information about your in-app purchases and app interactions. Please note that Apple collects certain device and usage data independently through iOS, governed by Apple’s own privacy policy. This data is collected by Apple, not BoomBoom, and is subject to Apple’s privacy practices.
PayPal confirms the status of your payout account and transaction results when you’re a creator receiving payments.
Firebase (by Google) receives certain usage and device data to power crash reporting and basic analytics on our behalf, as described in Section 4.3.

2. How We Use Your Information

Here’s exactly why we collect your data and what we do with it:

To run the app — process transactions, deliver payouts, show you content, and keep your account working.
To keep your account safe — verify who you are, enforce age limits, and catch any suspicious activity.
To personalize your experience — show you content we think you’ll enjoy based on what you interact with.
To stay in touch with you — send account notifications, payout confirmations, and replies to your support requests.
To send push notifications — With your permission, we may send push notifications for account activity, payout updates, and platform announcements. You can manage notification preferences in your device settings.
To keep the platform healthy — detect fraud, enforce our Terms and Community Guidelines, and stop bad actors.
To make BoomBoom better — use anonymized analytics to understand what’s working and what isn’t.
To follow the law — respond to legal requests and meet tax reporting obligations.

We only process your information when we have a legitimate reason to — like fulfilling your requests, keeping the platform safe, or meeting our legal obligations.

We do not sell your personal information. Period.

We only share your data in the following specific situations:

3.1 Our Service Providers

A small number of trusted companies help us run BoomBoom. They can only use your data to do their job for us — nothing else:

Firebase by Google — Powers crash reporting (Firebase Crashlytics) and basic usage analytics (Firebase Analytics) so we can fix bugs and understand how the app is being used. Google’s Privacy Policy
Apple — Handles the App Store and in-app purchases. Apple’s Privacy Policy
PayPal — Processes payouts for creators. PayPal’s Privacy Policy

3.2 When the Law Requires It

Sometimes we may be legally required to share information — for example, in response to a court order, government request, or to prevent fraud or harm. We’ll only do this when we genuinely have to.

In cases where we are required by law to cooperate with law enforcement — including under the Fight Online Sex Trafficking Act (FOSTA) and Stop Enabling Sex Traffickers Act (SESTA) and applicable federal trafficking laws — we may be required to retain certain data beyond our standard retention periods.

3.3 If BoomBoom Is Ever Sold

If BoomBoom is ever acquired, merged with another company, or goes through a significant business change, your information may be transferred as part of that process. We’ll notify you if this happens and explain how it affects you.

3.4 What’s Public on Your Profile

Anything you choose to make public — like your username, profile picture, posts, or ratings — is visible to other users. Only share what you’re comfortable making publicly available.

3.5 With Your Permission

If we ever want to share your data in a way not covered above, we’ll ask you first.

4. Advertising and Analytics

4.1 No Ads Right Now

We do not show any ads in the app and we don’t share your personal data with advertisers.

4.2 Ads in the Future

We don’t run ads right now. If that ever changes, we’ll update this policy and let you know before anything goes live. Any future advertising will comply with applicable privacy laws, and we’ll provide opt-out options where required.

4.3 Analytics and Crash Reporting

We are in the process of implementing analytics and crash reporting tools. Once live, we plan to use Firebase Crashlytics and Firebase Analytics as described below.

We use two Firebase tools by Google to keep the app running well:

Firebase Crashlytics — Automatically detects and reports app crashes so we can fix bugs quickly. This collects crash logs and basic device info (like your iOS version and device model) but nothing personally identifiable.
Firebase Analytics — Gives us basic, aggregated insights like daily active users, session length, and which features are being used. This helps us understand if the app is healthy and where we can improve. This data is not used to build a personal profile about you.

Neither tool is used for advertising. You can limit Firebase data collection through your iOS device settings under Settings → Privacy & Security → Tracking.

5. How Long We Keep Your Data

We don’t hold onto your data longer than we need to. Here’s a breakdown:

Your account information is kept for as long as your account is active, plus a reasonable period afterward to handle any legal, tax, or support needs.
Financial records (purchases, payouts, transaction history) are kept for a minimum of 7 years as required by tax and financial regulations.
Usage and analytics data may be kept in anonymized or aggregated form indefinitely — it can no longer be tied back to you. Truly anonymized or aggregated data that cannot reasonably be used to identify you is no longer considered personal information and is not subject to this Privacy Policy.
Support conversations are kept for up to 3 years.
Content you’ve posted that other users have unlocked may remain accessible to those users even after you delete your account, as outlined in our Terms of Service.

When we no longer need your data, we delete or anonymize it securely.

6. How We Protect Your Data

We take reasonable steps to protect your information, including:

Encrypting your data in transit using SSL/TLS
Securing your credentials with hashed storage
Limiting access to your personal data to only the people who need it
Using trusted infrastructure — Apple and PayPal maintain strong security practices of their own, and Firebase (Google) maintains enterprise-grade security for crash and analytics data

That said, no system is 100% secure. If you ever suspect your account has been compromised, please reach out to us immediately at support@boomboom.email. If we ever experience a data breach that affects your information, we’ll notify you as required by law.

Biometric Data: We do not collect biometric information. Any biometric authentication (such as Face ID) used to access the app is processed entirely by Apple and iOS — we never receive or store biometric data.

7. Kids and Teen Privacy

We care a lot about protecting younger users.

7.1 Under 13: Not Allowed

BoomBoom is not for children under 13, and we do not knowingly collect any personal information from them. If we find out a child under 13 has created an account, we’ll delete the account and all associated data right away.

If you believe a child under 13 has signed up, please let us know at support@boomboom.email and we’ll handle it immediately.

7.2 Ages 13–17: Extra Protections

Teens between 13 and 17 are welcome on BoomBoom, but we apply additional protections:

No linking bank accounts, PayPal, or receiving real money payouts
No access to age-restricted features
We don’t use their data for behavioral advertising
We don’t share their information with third parties for marketing

If you’re a parent or guardian and have questions about your teen’s account, email us at support@boomboom.email for assistance with access, corrections, or deletion requests.

8. Your Rights and Choices

You’re in control of your data. Here’s what you can do:

8.1 See Your Data

You can request a copy of the personal information we have about you at any time. Just email support@boomboom.email.

8.2 Correct Your Data

You can update most of your account information directly in the app’s settings. If you need help correcting something, contact us and we’ll assist you.

8.3 Delete Your Data

You can delete your account anytime from the app’s settings, or by emailing support@boomboom.email. We’ll remove your data, though some information may be retained where required by law (like financial records — see Section 5).

8.4 Opt Out of Analytics

You can limit analytics and crash reporting data collection through your iOS settings:

Go to Settings → Privacy & Security → Tracking to limit Firebase data collection
You can also contact us at support@boomboom.email to request we disable analytics associated with your account

If you’ve given us consent for something specific and change your mind, you can withdraw it anytime through your in-app settings or by contacting us. This won’t affect anything we’ve already processed.

8.6 How to Reach Us About Your Rights

Email us at support@boomboom.email or write to us at [INSERT PHYSICAL MAILING ADDRESS]. We’ll get back to you within 45 days. We may ask you to verify your identity before we process certain requests — this is just to make sure we’re protecting your data from unauthorized access. We’ll never penalize you for exercising your rights.

9. California Residents

If you live in California, you have additional rights under the CCPA, CPRA, and CalOPPA.

9.1 What We’ve Collected in the Last 12 Months

Identifiers: Email address, username, IP address, device identifiers
Personal records: Date of birth, PayPal account info (creators only)
Commercial info: Purchase history, transaction records, payout history
App activity: Usage data, content interactions, session data
Inferences: We may derive content preferences from your usage patterns as our analytics capabilities develop.

9.2 Your California Rights

You have the right to:

Know what personal information we collect and how we use it
Delete your personal information (with some legal exceptions)
Correct inaccurate information we have about you
Opt out of the sale or sharing of your data — we don’t do either, but you can still request this formally
Limit use of sensitive personal information to only what’s needed to run the Service
Not be discriminated against for exercising any of these rights

Sensitive Personal Information: Under the CPRA, “sensitive personal information” includes your account login credentials, precise geolocation data, and financial information. We use sensitive personal information only as necessary to provide the Service and do not use it for inferring characteristics about you beyond what is necessary to operate the platform.

9.3 We Don’t Sell Your Data

We do not sell your personal information and we do not share it for cross-context behavioral advertising. If you’d still like to submit a formal “Do Not Sell or Share” request, email us at support@boomboom.email.

9.4 Shine the Light

Under California Civil Code Section 1798.83, you can ask us whether we share personal information with third parties for their direct marketing. We don’t do this without your consent, but feel free to ask at support@boomboom.email.

9.5 Teen Erasure Rights (Under 18 in California)

If you’re under 18 and a registered BoomBoom user, California law gives you the right to request removal of content you’ve publicly posted. Email support@boomboom.email to make a request. Note that we can remove it from BoomBoom but can’t guarantee removal from every corner of the internet.

9.6 How to Submit a California Privacy Request

Email us at support@boomboom.email or write to [INSERT PHYSICAL MAILING ADDRESS]. We’ll respond to verified requests within 45 days. If we need additional time (up to 90 days total), we will notify you within the initial 45-day period and explain the reason for the extension.

10. Do Not Track

Some browsers and devices send “Do Not Track” (DNT) signals. Our app doesn’t currently respond to DNT signals because there’s no agreed-upon standard for how to handle them. You can manage your data preferences through your iOS device settings as described in Section 8.4 — that’s the most reliable way to control tracking on your device.

11. Third-Party Services

BoomBoom may link to or integrate with third-party services. Once you leave our app or interact with a third-party service, their privacy policy governs — not ours. Here are the third-party services we currently use:

Firebase by Google (Crashlytics & Analytics): Privacy Policy
Apple (App Store & In-App Purchases): Privacy Policy
PayPal (Payout Processing): Privacy Policy

12. Updates to This Policy

We may update this Privacy Policy as our app evolves. When we make meaningful changes, we’ll let you know — either through a notification in the app or an email to your registered address. The “Effective Date” at the top will always show when it was last updated.

If a change significantly affects how we handle your data, we’ll give you advance notice and, where required, ask for your consent. Continuing to use BoomBoom after an update means you’re okay with the new policy. If you’re not, you can always delete your account.

13. Get in Touch

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

BoomBoom Support
Email: support@boomboom.email
Legal: legal@boomboom.email
Mailing Address: [INSERT PHYSICAL MAILING ADDRESS]

We respond to all inquiries, though response times may vary. For formal privacy requests, we will respond within 45 days as required by law.

Last updated: [INSERT DATE]