Privacy Policy
Boyo is a travel journal: you log the places you go, and you choose what to publish to the people who follow you. This policy explains what we collect, why, and what you can do about it. It covers the Boyo iOS app and the pages on share.boyo.inc and boyo.inc.
Who we are
Boyo Inc. is the controller of the personal data described here. Reach us at support@boyo.inc.
What we collect
| Account | Email address, and — if you sign in with Apple or Google — the account identifier they return. Apple's Hide My Email relay address is fine; we never see your real one. A password, stored only as a hash, if you sign up with email. |
|---|---|
| Profile | Your name, username, avatar and optional home city. These are public. |
| Your content | Trips, spots, ratings, recommendations, notes, photos and videos, bookmarks, likes and comments. Trips are private until you publish them. |
| Places | The coordinates attached to a spot, which come from the place you picked in search or the pin you dropped. If you tap the "locate me" button on a map, we take a single position fix to centre it — we do not track your location, and Boyo never asks for background or "always" location access. |
| Notifications | An Apple push token for your device, plus the app version and release channel, so notifications reach the right install. |
| Usage | Which trips get viewed, and the destinations you search for. We use these to order the Discover feed and suggest destinations. |
| Reports | If you report content or block someone, we keep the report and the block so we can act on it. |
What we do with it
- Run the app: sign you in, store your trips, show them to the people you chose.
- Send the notifications you asked for — follows, likes, comments, new trips from people you follow, and the occasional notice that an update is available.
- Send transactional email: confirmation, password reset, and account notices. No marketing email without your say-so.
- Order Discover and suggest destinations from your searches and who you follow.
- Keep Boyo usable: review reports, enforce the Terms, and fix things that break.
We do not sell your data. We do not run ads. We do not use third-party analytics or advertising SDKs, and we do not track you across other companies' apps or websites.
What other people can see
Your profile, your username and your published trips are public — inside the app, and to anyone with a share link you hand out. Private trips, planned trips, archived trips, your bookmarks and your searches are not. Deleting a trip removes it from Boyo; it does not retrieve copies other people already saved or screenshotted.
Who processes it for us
| Supabase | Database, storage and API hosting (Tokyo region). |
|---|---|
| Apple | Sign in with Apple, and push notification delivery via APNs. |
| Sign in with Google. | |
| Resend | Transactional email delivery. |
| Pexels | Stock cover images, when a trip or spot has no photo of its own. Your content is never sent to Pexels — we only fetch an image. |
| Deno Deploy | Serves share links and these pages. |
They act on our instructions and may process data outside your country. Maps and place search are handled on your device by Apple's MapKit; opening a spot in Apple Maps, Google Maps, Waze or Citymapper hands it to that app under its own policy.
How long we keep it
Your account and content stay until you remove them. Deactivating hides your account and can be undone by signing back in. Deleting is permanent: your profile, trips, spots, media, bookmarks, likes and comments are removed, and we cannot restore them. Reports and blocks are kept after a deletion where we need them to keep enforcing a decision, and backups roll off on their own schedule.
Your choices
- Access and correction — your profile and every trip are editable in the app.
- Deletion — Profile → Settings → Delete Account Permanently. Deactivation sits next to it if you'd rather step away reversibly.
- Notifications — turn them off in iOS Settings, or never grant them.
- Location — Boyo works fine if you deny it; you lose only the "centre on me" map button.
- A copy of your data, or any other request — email support@boyo.inc and we'll answer within 30 days.
Depending on where you live you may have rights to access, correct, delete, port or object to the processing of your data, and to complain to your local data protection authority.
Children
Boyo is not for children under 13, and we don't knowingly collect their data. If you believe a child has an account, email us and we'll remove it.
Security
Traffic is encrypted in transit, passwords are hashed, and access to your private content is enforced at the database level, per row, not just in the app. No system is perfect; if something goes wrong we will tell affected users.
Changes
If this policy changes materially we'll update the date above and, where it matters, tell you in the app.