Quiet about
your data, too.

Who we are

Boop is a small app for iPhone, iPad, and Apple Watch made by Gabby Welson under snowy bagel. This policy covers the Boop apps, the Boop service at api.getbooped.app, and this website. Boop is currently in private beta.

What Boop stores

• Your display name. The name your connections see. If you sign in with Apple, Boop may use the name Apple shares the first time; you can change it in the app.
• A Sign in with Apple identifier. Apple gives Boop a stable, app-specific user identifier so you can sign back in. Boop does not ask Apple for your email address and does not store one.
• Sign-in sessions. When you sign in, your device keeps a session token in its Keychain. The server stores only a one-way hash of it, plus when it was created. Private-beta sign-in codes and connection invitation codes are also stored only as hashes and expire on their own.
• One push notification token. For the single phone or tablet you choose to receive boops on, Boop stores its Apple Push Notification service token, whether it is a development or production build, and whether you allowed Critical Alerts.
• Account basics. When your account was created, which Boop accounts you have connected with, and whether you have paused incoming boops.
• Boop history. For each boop: who sent it, who received it, when it was sent and when it expires, its delivery status, and when it was acknowledged with “Got it.” A boop has no message content.

What Boop doesn’t collect

No email address, phone number, contacts, location, photos, or message content. No advertising, no analytics or crash-reporting SDKs, no tracking across apps or websites, and no selling or sharing of data with data brokers. Boop doesn’t store IP addresses in its database, and its server logs don’t record session tokens, invitation codes, notification contents, or device tokens.

This website has no accounts, cookies, or analytics. Invitation pages read the invite code in your browser only and never send it anywhere.

How it’s used

Only to run Boop: to sign you in, show your name to the people you’ve connected with, deliver boops to your chosen device, show recent boops and acknowledgments, and enforce limits that keep boops from becoming spam. Your name is visible to your connections and to someone you send an invitation to.

How long it’s kept

• Boop history is deleted automatically after 7 days.
• Unused sign-in and invitation codes are deleted after they expire (invitations last up to 7 days).
• Sessions last until you sign out or delete your account.
• Your name, Apple identifier, connections, and push token are kept while your account exists.

Service providers

• Railway hosts the Boop service, its database, and this website. As with any host, Railway’s infrastructure handles network requests, including IP addresses, to deliver them.
• Apple provides Sign in with Apple and delivers notifications through the Apple Push Notification service. A boop notification includes the sender’s display name. Apple also distributes the beta through TestFlight, under Apple’s own privacy policy.

Deleting your account

In the app, go to Settings → Delete account. This permanently deletes your account from the Boop service, including your name, Apple identifier, sessions, push token, connections, invitations, and boop history. Signing out removes the session from that device and the server.

You can also stop Sign in with Apple for Boop in your Apple Account settings. You can ask us what data we hold about you, or to delete it, using the contact below.

Children

Boop is not directed at children under 13, and we don’t knowingly collect data from them.

Changes

If what Boop collects changes, this page will be updated before the change takes effect, and the effective date above will change.

Contact

Questions or requests: hello@getbooped.app.