Draft. This document is a working draft written by the product team and has not been reviewed by a lawyer. Do not rely on it until it is finalised.

Privacy Policy

Draft v0.1 · Last updated October 8, 2026

The short version

Boonspot detects overnight stays on your device. We never receive, store, or log a GPS track.
What leaves your phone is a spot id plus hour buckets (arrive hour, depart hour, the night's date) and your one-tap morning answer.
Raw stays are deleted after 30 days. What remains is anonymous nightly counts per spot, with no user identifiers.
Enforcement reports describe places, not people. Your reporter id is removed from a report after 7 days.
The website only shows areas roughly a quarter square mile wide, and only where 3 or more different people contributed.
You can export everything we hold about you, and delete your account and all raw data, from the app or at /account/delete.

1. Who we are

Boonspot (“we”, “us”) operates the Boonspot mobile app and the website at boonspot.app. Contact: privacy@boonspot.app (placeholder — set before launch).

2. What we collect

2.1 Account data

Your email address (for magic-link sign-in) or the identifier provided by Sign in with Apple or Google. We do not collect your name unless the provider sends it; we do not use it.

2.2 Stays (the core of the product)

With your permission, the app uses background location (significant-change updates and geofences, not continuous GPS) to notice when you stay in one place for roughly five hours overlapping 10 pm–6 am local time. That detection runs entirely on your phone. If a stay is detected, the app snaps it to the nearest known spot (or asks you to confirm a new one) and sends us only:

the spot id (or, for a new spot, one coordinate pair you explicitly confirmed),
the local date of the night,
the arrival hour and departure hour (whole hours, e.g. 22 and 7),
whether you left between midnight and 5 am,
your morning answer: Good, Meh, Got knocked, Ticket, or no answer.

The location samples used for detection are discarded on the device once a stay is summarised. We never store, transmit, or log raw location histories, speeds, or routes.

2.3 Reports

Enforcement reports (knock, asked to leave, ticket, tow warning, drive-by; by police, security, an owner, or unknown; at an hour) and spot reports (closed, dangerous, wrong location, etc.). These describe a place. Your user id is attached only to enforce rate limits and is removed from enforcement reports after 7 days and from spot reports after 30 days.

2.4 Contribution points

A ledger of the points you earned (confirmed stay, report, a spot you added being confirmed by someone else). This is how exact spots unlock.

2.5 Technical data

Standard server logs (IP address, user agent, request path, timestamp) retained for up to 14 days for security and debugging. We configure analytics and crash reporting to never include coordinates.

3. What we do not collect

Raw GPS tracks or continuous location.
Contacts, photos, microphone, or any other device data.
Precise location on the website. The website receives no location from you at all unless you type a city name into search.

4. How we use data

To compute community scores for spots and areas (reliability, enforcement risk, crowding), to rank recommendations near you (computed per request; your position is not stored), to award contribution points, to rate-limit abuse, and to operate your account.

5. Retention

Raw stays: 30 days, then permanently deleted.
Nightly aggregates per spot: kept indefinitely. They contain counts only (how many vehicles, how many good nights, how many incidents) and no user identifiers.
Enforcement reports: kept; reporter id removed after 7 days.
Account and points: until you delete your account.
Server logs: up to 14 days.

6. Sharing

We do not sell data. We share aggregate, anonymous area statistics publicly on the website. We use infrastructure providers (database and hosting, map tiles, app stores, optional subscription processing) that process data on our behalf under contract. Map tiles are fetched from the tile provider configured for the app; that provider sees the tile requests (map areas you look at), not your stays.

7. Your rights and controls

Export: Settings → Export my data in the app (copy or share it as JSON), or /api/v1/me/export while signed in on the web.
Delete: Profile → Delete account, or /account/delete. Deletion removes your account, stays, points, and sessions immediately, and strips your id from any reports. Aggregates cannot be re-identified and are kept.
Location permission: you can use the app without background location; detection simply won't run and you can log stays manually.
Residents of the EU/UK, California, and other jurisdictions may have additional rights (access, correction, portability, objection). Contact us to exercise them.

8. Children

Boonspot is not directed at children under 16 and we do not knowingly collect their data.

9. Security

Row-level security in the database ensures each user can only read their own raw data, exact spot locations are only served to contributors, and the public tier can never return coordinates. Secrets are stored only on servers, never in app bundles.

10. Changes

We will post changes here and bump the date above. Material changes will be announced in the app.