Boon Privacy Policy

Last updated: 16 September 2026

Boon is operated by Nita Labs (“Boon”, “we”, “us”, or “our”). Under applicable UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we act as the Data Controller for the personal data processed through the Boon mobile applications for iOS and Android and related website and support services (collectively, the “Service”).

Please read this Privacy Policy carefully together with our Terms of Service. By accessing or using the Service, you acknowledge that your personal data will be processed in accordance with this policy.

1. What Boon Does and How It Is Built

Boon is a read-only driver-assistance and business-record utility for gig-economy drivers and couriers in the United Kingdom. Boon evaluates offer information displayed by supported third-party driver applications on your device and helps you track earnings, expenses, mileage, shifts, and tax estimates.

Read-only. Boon does not accept, decline, tap, swipe, type into, or otherwise control third-party apps.

Your records stay on your device. Your shifts, earnings, expenses, mileage, offer history, receipt images, and settings are stored and processed on your device. We do not upload your individual trips, your offer history, the text read from another app’s screen, pickup or destination addresses, exact GPS coordinates, or screenshots.

Some information does leave your device, and we set out each case below: your account and subscription details, optional diagnostics, an optional encrypted backup, and — if you turn Insights on — anonymised area-level totals that make the demand map work. Section 2.7 describes exactly what those totals contain. They never include an address, a coordinate, or a single identifiable journey.

2. Personal Data We Process and Purpose

2.1 Account and Sign-In Data

When you register or sign in using Google Sign-In, Sign in with Apple, or Supabase Authentication, we collect:

Email address, display name, and profile image URL.
Supabase account identifier and session/token metadata.
Purpose: to authenticate your identity, manage account access, enforce subscription entitlements, prevent fraud or abuse, and deliver customer support.

2.2 Driver-App Offer Content (Processed On Your Device)

During an active shift, Boon reads the offer details a supported driver app is displaying, so it can tell you what the job is worth.

On iOS, Boon uses Apple’s ReplayKit screen broadcast. A broadcast starts only when you begin it, iOS shows its own confirmation first, and iOS displays a system indicator for as long as it is running.

On Android, Boon uses the Accessibility Service, and MediaProjection screen capture where a platform’s layout cannot be read any other way. MediaProjection starts only after you accept Boon’s own disclosure and Android’s separate screen-capture confirmation.

What is read: fare, pickup and destination text, trip distance, estimated duration, driver rating, and service category.
How it is processed: offer analysis happens in temporary memory on your device. The screen text, the addresses within it, and any captured frames are not uploaded to us. Boon never uses these capabilities to perform actions in another app on your behalf.

2.3 Local Business Records

These records are created through your use of Boon and stored in protected app storage on your device:

Earnings, trips, shift history, working hours, offer logs, and mileage records.
Expenses, recurring operating costs, HMRC tax preferences, and tax estimates.
Scanned receipt photos and extracted transaction details (date, merchant, amount).
Profit thresholds, app preferences, and local settings.
Purpose: local bookkeeping, shift tracking, HMRC self-assessment estimates, and mileage calculation.

2.4 Location and Weather

Location. Where you grant location permission, Boon uses your device’s GPS to calculate mileage during a shift and to show what is happening around you. Your coordinates are used on the device and are not uploaded to us.
Weather. When you use the Home weather feature, Boon sends coordinates rounded to 0.1 degrees (roughly 11 km) to Open-Meteo to fetch a local forecast. Your exact position is never sent.

2.5 Subscriptions and Payments

Boon Pro is sold through the Apple App Store on iOS and Google Play on Android.

Payments are processed by Apple or Google. We never receive or store your card or bank details.
RevenueCat processes your subscription entitlement status, linked to your signed-in account identifier, so the app knows whether your access is active.

2.6 Diagnostics and Reliability Data

We collect a small amount of technical information to keep the app working on the very wide range of devices drivers use.

What is collected: app version, operating-system version, device manufacturer and model, an anonymous session identifier, scanner timings, aggregate success and failure counts, and crash traces.
What is never included: screenshots, screen text, fares, earnings, addresses, GPS logs, receipts, or persistent device identifiers such as IMEI or Android ID.
On Android, this is sent only if you opt in during onboarding.
On iOS, app-launch timing and crash information is sent without a separate opt-in, under our legitimate interest in keeping the app stable. It carries an anonymous per-session identifier rather than your account identifier.
Storage: held in a private database for up to 90 days, then deleted automatically.

2.7 Insights Market Contribution (Optional, Consent-Based)

If you turn Insights on, your device contributes anonymised, area-level totals that make the shared demand map work. This is the only case in which information derived from your offers leaves your device, and it is switched off unless you consent.

What is sent: for each 15-minute period, an H3 area cell (roughly 0.75 km² — about the size of a few streets, never an address), the platform, how many minutes you were active, how many offers you saw, their combined fare and estimated duration and distance, how many Boon graded profitable, marginal or low-profit, and where available your completed trip count and combined earnings for that period.
What is never sent: pickup or destination addresses, exact coordinates, individual trips or offers, passenger information, routes, or screen content. Only totals for a period and an area.
How it is protected: an area is only ever shown back to anyone once at least five different drivers have contributed to it for the same period. A cell with fewer contributors is never displayed.
Purpose: to show drivers which areas are busy, based on what drivers collectively see rather than on what any one person did.
Control: you can turn Insights off at any time in the app, which stops any further contribution.

At the time of writing this contribution is made by the Android app only. The iOS app builds its demand map from your own history on your device and does not contribute to the shared totals.

2.8 Encrypted Cloud Backup (Optional)

If you turn on cloud backup, Boon encrypts a copy of your business records on your device and stores the encrypted file with us, so you can restore it on a new phone.

The file is encrypted before it leaves your device using a passphrase you set. We cannot read its contents.
If you lose that passphrase, we cannot recover your backup for you.
You can turn cloud backup off and delete the stored file from within the app.

2.9 Diagnostics Export and Support Replays

Local replay set. For up to 4 days after an app update, Boon may keep up to 8 processed offer frames on your device to verify scanner accuracy. These delete automatically after 4 days and are never uploaded on their own.
Support export. You may choose to send us a diagnostics file. It can contain scanner logs, system information, and local replay images showing offer text. Sending it is entirely voluntary and it is used only to resolve your support ticket.

3. Lawful Bases for Processing (UK GDPR Article 6)

Performance of a contract (Art. 6(1)(b)) — providing the app, verifying subscription access, managing your account, and delivering support you ask for.
Consent (Art. 6(1)(a)) — the Insights market contribution, Android reliability data, cloud backup, location, camera, local replay, and weather. You may withdraw consent at any time in the app or by contacting us.
Legitimate interests (Art. 6(1)(f)) — preventing fraud, securing our infrastructure, keeping the app stable across devices, and defending legal claims.
Legal obligation (Art. 6(1)(c)) — complying with UK statutory, accounting, or legal requirements.

4. How We Share Information

We do not sell, rent, trade, or monetise your personal data. The following providers process data on our behalf under written agreements meeting UK GDPR Article 28:

ProcessorPurposeLocation / safeguardSupabase Inc.Authentication, account database, encrypted backups, optional reliability and Insights dataUK / EEA / US (UK Addendum / SCCs)Apple Inc.Sign in with Apple, App Store billingGlobal (UK Addendum / SCCs)Google LLCGoogle Sign-In, Google Play Billing, Android integrityGlobal (UK International Data Transfer Agreement)RevenueCat, Inc.Subscription entitlement and billing statusUS (UK Addendum / SCCs)Open-Meteo GmbHWeather lookup from rounded coordinatesEEA (UK adequacy decision)

5. International Data Transfers

Where data is transferred or processed outside the United Kingdom, we apply safeguards under UK GDPR Chapter V:

Transfers to countries the UK Secretary of State has deemed adequate, such as EEA countries.
Standard Contractual Clauses with the UK International Data Transfer Addendum for transfers to third countries such as the United States.

6. Retention and Deletion

On-device records — earnings, shifts, mileage, receipts, offer history, and settings stay on your device until you delete them in the app, clear app storage, or uninstall Boon.
Account information — kept while your account is active. On deletion request, removed within 30 days, except where retention is legally required.
Insights market totals — area-level totals are retained in aggregate form and cannot be attributed back to you individually once combined. Turning Insights off stops further contribution.
Reliability and diagnostics — deleted automatically after 90 days.
Encrypted cloud backup — kept until you replace or delete it, or your account is deleted.
Local replay samples — deleted automatically 4 days after an update, or immediately if you withdraw reliability consent.
Support diagnostics files — deleted within 30 days of your ticket being resolved.

7. Your Rights

Under UK law you have the right to:

Access — request a copy of the personal data we hold about you.
Rectification — have inaccurate or incomplete data corrected.
Erasure — request deletion of your account and associated server-side data.
Restriction or objection — limit or object to our processing in certain circumstances.
Portability — receive your data in a structured, commonly used, machine-readable format. Boon also lets you export your full records to a file from within the app at any time.
Withdraw consent — at any time, without affecting processing already carried out lawfully.

Under the Consumer Rights Act 2015, digital content supplied to you must conform to contract, be fit for purpose, and be of satisfactory quality.

To exercise any of these rights, email support@getboon.app. We will respond within one calendar month.

Supervisory Authority

If you believe our processing breaches UK data protection law, you can complain to the Information Commissioner’s Office (ICO):

Website: https://ico.org.uk
Helpline: 0303 123 1113

8. Security

In transit and at rest. Server communication uses TLS. Server databases are encrypted at rest. Cloud backups are additionally encrypted on your device before upload, with a passphrase we do not hold.
On device. Your records are held inside the operating system’s protected app storage — the app sandbox and Keychain on iOS, and the app sandbox on Android — and the business-records database is itself encrypted.
Access control. Staff access to backend infrastructure is restricted on a need-to-know basis.

9. Children’s Privacy

Boon is for adults working as professional drivers and couriers. You must be at least 18 to use the Service. We do not knowingly collect data relating to children.

10. Changes to This Policy

We may update this policy to reflect changes in our legal obligations, the app, or our data practices. If a change is material, we will tell you through an in-app notice or another appropriate method before it takes effect, and update the date at the top of this document.

11. Contact

Nita Labs Data protection contact: support@getboon.app