Boon Privacy Policy
Last updated: 24 July 2026
Boon is operated by Nita Labs ("Boon", "we", "us", or "our"). Under applicable UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we act as the Data Controller for the personal data processed through the Boon Android application and related website and support services (collectively, the "Service").
Please read this Privacy Policy carefully together with our Terms of Service. By accessing or using the Service, you acknowledge that your personal data will be processed in accordance with this policy.
1. What Boon Does and Our Architecture
Boon is a read-only, local-first driver-assistance and business-record utility engineered for gig-economy drivers and couriers in the United Kingdom. Boon evaluates incoming offer information displayed by supported third-party driver applications on your device and helps you track earnings, expenses, mileage, shifts, and tax estimates.
Key Architectural Commitments:
Read-Only / No Control: Boon does not accept, decline, tap, swipe, type into, or otherwise control third-party apps.
Local-First Processing: All financial records, offer calculations, screen evaluations, receipt images, and mileage histories are stored and processed locally on your physical device. They are not automatically uploaded to our servers.
2. Personal Data We Process and Purpose
We process personal data to deliver, secure, and improve our Service. We categorize the data as follows:
2.1 Account and Sign-In Data
When you register or sign in using Google Sign-In or Supabase Authentication, we collect:
Email address, display name, and profile image URL.
Supabase account identifier and session/token metadata.
Purpose: To authenticate your identity, manage account access, enforce subscription entitlements, prevent fraud or abuse, and deliver customer support.
2.2 Driver-App Screen Content (On-Device Processing)
During an active shift, Boon uses Android Accessibility Service permissions and, where granted, Android MediaProjection screen-capture permissions, to inspect job-offer details displayed by supported driver apps.
Data Inspected: Fare, pickup/destination text, trip distance, estimated duration, driver rating, and service category.
Processing: Offer analysis occurs entirely in temporary memory (RAM) on your local device. We do not upload, aggregate, or sell screen text, offer details, trip addresses, or screen recordings. Boon does not use Accessibility or MediaProjection features to execute automated actions in other apps.
2.3 Local Business Records and On-Device Storage
The following records are generated through your use of Boon and stored locally in protected app storage on your device:
Earnings, trips, shift history, working hours, offer logs, and mileage records.
Expenses, recurring operating costs, HMRC tax preferences, and tax estimates.
Scanned receipt photos and extracted transaction metadata (date, merchant, amount).
Profit thresholds, app preferences, and local settings.
Purpose: To provide local bookkeeping, shift tracking, HMRC self-assessment estimations, and mileage calculations.
2.4 Location and Weather Services
Location: If location permissions are granted, Boon uses device GPS locally to calculate mileage during active shifts. Coordinates remain on your device.
Weather: When you use the Home weather feature, Boon sends rounded coordinates (latitude and longitude rounded to 0.1 degrees, approximately ~11 km accuracy) to Open-Meteo to retrieve localized weather forecasts. Exact GPS coordinates are never sent.
2.5 Subscriptions and Financial Transactions
When you purchase a subscription:
Payments are processed directly by Google Play. We do not collect or store full credit/debit card details or bank details.
RevenueCat processes subscription entitlement status tied to your signed-in account ID to confirm active access.
2.6 Optional Technical Reliability Data
If you explicitly opt-in during onboarding, Boon sends privacy-minimised diagnostics to assist with platform stability.
Data Collected: App version, Android version, device manufacturer/model, scanner timings, aggregate success/failure counts, and crash/ANR traces.
Exclusions: Does NOT include your account ID, persistent device identifiers (IMEI/Android ID), screenshots, screen text, fares, GPS logs, addresses, earnings, or receipts.
Storage: Stored in a private Supabase database for up to 90 days and deleted automatically.
2.7 Diagnostics Export and Support Replays
Local Replay Set: For up to 4 days after an app update, Boon may store up to 8 processed offer frames locally on device to assist in scanner performance verification. These auto-delete after 4 days and are never uploaded automatically.
Support Export (Diagnostics ZIP): You may manually export and send a Diagnostics ZIP to Boon support. This package may contain scanner logs, system information, and local replay screenshots showing offer text. Sending this file is entirely voluntary and is used solely to resolve your support ticket.
3. Lawful Bases for Processing (UK GDPR Article 6)
We rely on the following lawful bases to process your personal data:
Performance of a Contract (Art. 6(1)(b)): Processing necessary to provide the Boon App, verify subscription access, manage your account, and deliver requested technical support.
Consent (Art. 6(1)(a)): Required for optional reliability data sharing, location/camera access, local replay features, and weather updates. You may withdraw consent at any time via in-app settings or by contacting us.
Legitimate Interests (Art. 6(1)(f)): Necessary for preventing fraud, securing our server infrastructure, verifying platform integrity, and defending legal claims.
Legal Obligation (Art. 6(1)(c)): Necessary to comply with UK statutory obligations, accounting standards, or legal disputes.
4. How We Share Information and Data Processors
We do not sell, rent, trade, or monetize your personal data. Third-party service providers process data strictly on our behalf under written data processing agreements complying with UK GDPR Article 28:
ProcessorPurpose / Service ProvidedLocation / Transfer SafeguardSupabase Inc.Authentication, user account DB, optional reliability events
UK / EEA / US (UK Addendum / SCCs)
Google LLCGoogle Sign-In, Google Play Billing, Android Integrity
Global (UK International Data Transfer Agreement)
RevenueCat, Inc.Subscription entitlement & billing status management
US (UK Addendum / SCCs)
Open-Meteo GmbHNon-precise local weather lookup (rounded coordinates)
EEA (UK Adequacy Decision)
5. International Data Transfers
Where data is transferred or processed outside the United Kingdom, we ensure appropriate legal safeguards are implemented in accordance with UK GDPR Chapter V:
Transfers to countries deemed to provide an adequate level of data protection by the UK Secretary of State (e.g., EEA countries).
Standard Contractual Clauses (SCCs) combined with the UK International Data Transfer Addendum for transfers to third countries such as the United States.
6. Retention and Deletion Schedule
Local Device Data: Financial logs, earnings, shift histories, mileage, receipt images, and app settings remain on your physical device until you delete them inside the app, clear app storage, or uninstall Boon.
Account Information: Retained while your account remains active. Inactive accounts or deletion requests result in complete removal within 30 days, except where retention is legally mandated for tax or accounting purposes.
Optional Reliability Logs: Automatically purged from our database after 90 days.
Local Replay Samples: Purged automatically 4 days post-update or immediately if reliability consent is withdrawn.
Support Diagnostics ZIPs: Deleted within 30 days of resolving and verifying your support ticket.
7. Your Statutory Privacy Rights (UK GDPR & Consumer Rights)
Under UK law, you possess explicit rights regarding your personal data:
Right of Access (Subject Access Request): Request a copy of the personal data we hold about you.
Right to Rectification: Request correction of inaccurate or incomplete personal data.
Right to Erasure ('Right to be Forgotten'): Request the permanent deletion of your account and associated server data.
Right to Restrict or Object: Limit or object to our processing of your data under specific circumstances.
Right to Data Portability: Obtain your data in a structured, commonly used, and machine-readable format.
Right to Withdraw Consent: Where processing relies on consent, you may withdraw it at any time without affecting prior lawful processing.
Consumer Rights Act 2015: Digital content supplied must conform to contract, be fit for purpose, and be of satisfactory quality. This Privacy Policy outlines how your data supports the digital service delivered under consumer protection standards.
To exercise any of these rights, email us at support@getboon.app. We will respond within one calendar month.
Supervisory Authority
If you believe our processing infringes upon UK data protection laws, you have the statutory right to lodge a complaint with the Information Commissioner's Office (ICO):
Website: https://ico.org.uk
Helpline: 0303 123 1113
8. Security Measures
We enforce rigorous technical and organizational measures to safeguard your personal information:
Encryption in Transit & at Rest: All API and server communications utilize TLS 1.3/1.2 transport security. Server databases use AES-256 encryption at rest.
On-Device Isolation: Local data is stored within Android's secure app sandbox environment.
Access Control: Staff access to backend infrastructure is restricted on a strict need-to-know basis.
9. Children's Privacy
Boon is exclusively designed for adults engaged in professional driving, delivery, and gig-economy work. You must be at least 18 years of age to use the Service. We do not knowingly collect or process data belonging to children.
10. Changes to This Policy
We may update this Privacy Policy to reflect changes in our legal obligations, software updates, or data practices. If a material change occurs, we will notify you through an in-app banner or electronic communication prior to implementation and update the date at the top of this document.
11. Contact Details
If you have questions, privacy requests, or wish to exercise your legal rights, please contact:
Nita Labs
Data Privacy Lead / Contact: support@getboon.app