This Privacy Policy describes how Wrights Creative Services, L.L.C. ("we," "us," or "our") collects, uses, stores, and shares information when you use the The Are You Bored!? App service, including our iOS app, Android app, and web application at areyoubored.app (collectively, the "Service").
By using the Service, you agree to the collection and use of information as described in this policy. This policy is incorporated into and subject to our Terms of Service.
| Data Type | What It Includes | When Collected |
|---|---|---|
| Account Information | First name, last name, email address, encrypted password | When you create an account |
| Custom Activities | Title, description, category, and color of activity cards you create | When you create a custom activity card |
| Feedback | Star rating, written comment, app version, and an anonymized device key | When you submit in-app feedback |
| Data Type | What It Includes | Purpose |
|---|---|---|
| Activity Completions | Which catalog activities you have marked as completed and the timestamps | Track history, compute streaks, trigger achievements |
| Favorites & Likes | Which activities you have favorited or liked | Personalize your card stack and categories |
| Gamification Data | XP balance, current level, level name, unlocked achievement keys | Power the XP/level/achievement system |
| Streak Data | Current streak count and last active date | Display streak in app, trigger streak achievements |
| Purchase Records | Platform (Apple/Google), transaction ID, product ID, purchase date, environment (sandbox/production) | Verify and activate Premium access |
| Email Log | Recipient email, template type (welcome/achievement/level-up), subject, send status, timestamp | Track transactional email delivery; diagnose failures |
| Auth Tokens | Cryptographic bearer token, device name, device model, platform (iOS/Android/web), expiry | Authenticate API requests; support multi-device login |
| Data Type | What It Includes | Purpose |
|---|---|---|
| Device Token | FCM (Android) or APNs (iOS) push token, platform label | Send push notifications to your device |
| Platform Identifier | The platform you used to make each API request (ios / android / web) | Analytics; platform-specific behavior |
| IP Address | Your IP address at time of request | Security; abuse prevention; server logs |
| App Version | Version string submitted with feedback | Diagnose and reproduce reported issues |
We do not collect:
We use the information we collect to:
We do not use your information for automated profiling that produces legal or similarly significant effects, nor for targeted advertising.
We do not sell, rent, or trade your personal information to third parties.
We share information only in the following limited circumstances:
The Service integrates with the following third-party services. Each operates under its own privacy policy:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Apple App Store / APNs | iOS in-app purchases; push notifications | apple.com/legal/privacy |
| Google Play / FCM | Android in-app purchases; push notifications | policies.google.com/privacy |
| Firebase (Google) | Push notification delivery (FCM); analytics | firebase.google.com/support/privacy |
We encourage you to review the privacy policies of these services. We are not responsible for their data practices.
If you grant permission, we may send push notifications to inform you of app-related events (such as new content or reminders). Your device push token is transmitted to Apple (APNs) or Google (FCM) to facilitate delivery.
You can withdraw permission for push notifications at any time through your device's system settings (iOS: Settings → Notifications → Are You Bored; Android: Settings → Apps → Are You Bored → Notifications). Disabling push notifications does not affect your account or other app functionality.
When you create an account, we send a welcome email to the address you provided. We also send emails when you unlock significant achievement milestones and when you advance to a new XP level.
These are transactional communications directly related to your account activity. All sent emails are logged (recipient, template type, subject, status, timestamp) for delivery diagnostics.
To opt out of non-essential email communications, contact us at legal@areyoubored.app. Note that certain critical account emails (such as password reset) cannot be disabled.
We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:
When you delete your account, it is immediately flagged as deleted and your access is revoked. Your data is retained for up to 30 days, during which account restoration may be possible by contacting support. After 30 days, we will remove or anonymize your personal data, except where retention is required by law or legitimate business necessity (such as purchase records).
We implement industry-standard security measures to protect your information, including:
Despite these measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage you to use a strong, unique password for your account.
In the event of a data breach that affects your personal information, we will notify affected users as required by applicable law.
The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at legal@areyoubored.app and we will delete that information promptly.
For users between the ages of 13 and 18, we recommend parental guidance when using the Service and reviewing these policies together.
Depending on your location, you may have the following rights regarding your personal information:
| Right | Description |
|---|---|
| Access | Request a copy of the personal information we hold about you |
| Correction | Request that we correct inaccurate or incomplete information |
| Deletion | Delete your account directly from your profile on the web app, or request deletion by contacting us |
| Portability | Request your data in a structured, machine-readable format |
| Objection | Object to certain uses of your data, such as analytics |
| Restriction | Request that we limit processing of your data in certain circumstances |
| Withdraw Consent | Where processing is based on consent, withdraw it at any time without affecting prior lawful processing |
To delete your account, sign in to the web app and use the Delete Account option in your profile. For all other rights requests, contact us at legal@areyoubored.app. We will respond within 30 days. We may need to verify your identity before fulfilling your request.
California residents have the right to know what personal information we collect, the right to delete that information, the right to opt out of the "sale" of personal information (we do not sell personal information), and the right to non-discrimination for exercising these rights. To submit a verifiable consumer request, contact us at the email above.
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, our legal bases for processing your personal information include: (a) performance of a contract (providing the Service); (b) legitimate interests (security, fraud prevention, service improvement); and (c) your consent (push notifications, certain emails). You have the right to lodge a complaint with your local data protection authority.
The Service is operated from the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country.
By using the Service, you consent to the transfer of your information to the United States.
We may update this Privacy Policy from time to time. When we do, we will update the "Effective Date" at the top of this page. For material changes, we will provide notice through the Service (such as an in-app notification or email) at least 14 days before the changes take effect.
Your continued use of the Service after any changes constitutes your acceptance of the updated policy.
If you have questions about this Privacy Policy, want to exercise your data rights, or have a privacy concern, please reach out:
We aim to respond to all privacy inquiries within 5 business days.