Your conversations, your choices

Privacy policy

Updated September 30, 2026

OMELIAN TECHNOLOGIES operates Boop. This policy explains the information we process when you use the app and these support pages. Contact support@feedkiwi.com with questions or privacy requests.

What we process

• Account and profile: your sign-in identifier, email address, display name, profile picture or avatar, and optional gender used to personalize picture questions. Clerk handles sign-in and verification; Apple or Google provides the account details you choose to share when you use those login methods.
• Connections and activity: invite codes, who you link with, relationship type and preferences, question and game identifiers, progress, scores, stars, entitlement dates, time zone, notification settings, and when you use features. Linked people can see presence and last-seen activity.
• Private content: your answers, messages, private questions and collections, journal pages, game choices, drawings, photos, videos, and voice notes. New private content is encrypted on your device before upload. Our servers store encrypted content and the metadata needed to deliver it.
• Device and service information: notification and Live Activity tokens, app/platform details needed for delivery, and technical connection or error information processed by our infrastructure providers, such as IP addresses.
• Support: your email and whatever information or attachments you choose to send us. Do not send passwords or recovery keys.

How we use it

We use this information to operate your account, connect you with people you invite, deliver and synchronize your content, run questions and games, send requested notifications, provide support, protect the service, and comply with legal obligations. Depending on your location, the legal basis is providing the service you request, your consent for optional features, our legitimate interests in security and support, or a legal obligation.

We do not sell your personal information, use it for cross-app advertising tracking, or send your private conversations to AI providers. This launch version does not request payment details or automatically bill you. These pages have no analytics scripts or advertising cookies.

Usage analytics and diagnostics

Boop uses limited usage measurements and technical error reports to improve features and reliability. Collection is enabled by default. PostHog receives feature events, coarse operation timing, app version and a random identifier that changes when the app restarts or you sign out. Sentry receives filtered technical failures and native crash locations. We do not send either provider your private content, encrypted payloads, recovery keys, account identifiers, relationship identifiers, contact details, game choices, search terms, screen recordings or screenshots. Providers receive network connection information such as your IP address; Boop disables analytics geolocation enrichment and person profiles.

Previous opt-outs remain respected on the device where they were saved. Sign-out and account deletion clear pending reports on that phone and start a new telemetry session. Reports already received follow the providers’ retention settings and are not automatically erased by account deletion; we do not keep a mapping from the random analytics identifier to your account. Contact support@feedkiwi.com for privacy requests, including access, deletion or objections to processing. Analytics may be processed in the United States. Reports are never used for advertising.

Encryption and its limits

Private conversation keys are created and kept on your devices. A recovery key lets you restore access on another device; we cannot recover a lost key. Profile information, profile photos, connections, activity metadata, and public preset content are not end-to-end encrypted.

A recipient can save or share what you send. Notifications can show decrypted previews on their device, subject to their settings. Unlinking cannot erase copies someone already saved. Devices restored with the same recovery key share one encryption identity; this is not a system with independent per-device keys or forward secrecy.

If you used a test version before encryption was introduced, old content may remain unencrypted until migrated using You → Privacy & recovery. Previously published collections and saved copies do not become private simply because public discovery is hidden in this release.

Who receives information

Your linked people receive the content and profile information shared with them. We use Clerk for authentication, Convex for backend processing and storage, PostHog for usage analytics, Sentry for diagnostics, and Apple services for notification delivery and optional Apple sign-in. Google processes authentication when you choose Google sign-in. Support email is processed through our email provider. Providers process information needed to deliver their services; processing can take place outside your country, including in the United States, with applicable contractual and legal safeguards.

We may disclose information when required by law, to protect people's safety or the service, or as part of a business transfer subject to appropriate privacy protections.

Your permissions and choices

Camera, microphone, selected photos, notifications, and alarms are used only for the relevant features. You can decline or change permissions in iOS Settings and still use other parts of the app. Photos and recordings are sent when you choose to submit them. You can edit your profile, unlink a person, regenerate an invite code, and delete your account in the app.

Retention and deletion

We keep account data and saved history while needed to provide your account and the features you use. Unlinking is separate from deleting an account; some history can remain until account deletion.

To delete your account, open You → Delete my account → Delete everything. This removes your app profile, owned private content and uploaded files from active storage, ends your links, and deletes your Clerk sign-in account. If a step fails, the app shows a retry screen. Previously public contributions may remain as unattributed shared copies; copies downloaded or exported by recipients cannot be recalled.

We retain a minimal sign-in identifier and deletion timestamp to prevent old sessions from recreating an erased account. Provider backups, security logs, and support correspondence can remain for their operational retention periods or where legally required; deleting an account does not instantly purge every backup. Contact us for help with data retained by a provider.

Your privacy rights

Depending on where you live, you may request access, a copy, correction, deletion, restriction, or portability of your information, object to certain processing, or withdraw consent. Email support@feedkiwi.com; we may need to verify ownership. You can also contact your local data protection authority. We cannot decrypt your private history for a support request. A parent or guardian concerned about a child's information can contact the same address.

Changes

We will update the date above when this policy changes and provide additional notice when required for a material change.