Privacy Policy

Last Updated

May 22, 2026

Who We Are

Boondock is a camping site discovery app operated by Boondock App LLC, a Delaware limited liability company. When this policy says "Boondock," "we," "us," or "our," it means Boondock App LLC doing business as Boondock.

If you have questions about this policy or how we handle your data, reach us at privacy@boondock.app.

Data We Collect

Account

When you sign in with Apple or Google, we receive your email address. That is the only account identifier we store. We do not receive your name, phone number, or any other profile data from those sign-in providers unless you choose to share it.

Device

When the app crashes or encounters an error, Sentry (our crash reporting tool) automatically collects your device model, operating system version, and app version. This information helps us reproduce and fix bugs. No advertising identifiers are collected.

Usage

PostHog records which screens you open and which buttons you tap. This tells us which features people find useful so we can improve the app. PostHog analytics do not include your name or email address -- each event is linked only to an anonymous identifier.

Payment

RevenueCat manages subscription receipts on our behalf. We receive your subscription status (active or inactive), the product identifier for your plan, and your subscription expiry date. We never see your full payment card number or billing address -- those stay with the App Store or Google Play.

Location

Your precise location is used only when you explicitly tap Find sites near me on the map. The coordinate is sent to our backend to return nearby camping sites and is not written to our database. We do not track your location in the background, and we do not build a history of where you have been.

Saved Sites

When you favorite a site, we store that association (your user id plus the site id) in our database so your favorites sync across devices.

How We Use It

| Data | Purpose |
|---|---|
| Email address | Sign-in, account recovery, transactional messages you request |
| Device info | Crash diagnosis and fix |
| Usage events | Understanding feature engagement; product improvement |
| Location (in-session) | Returning camping sites near your current position |
| Saved sites | Syncing your favorites across devices |
| Subscription status | Unlocking premium features and enforcing entitlements |

We do not use any of your data to build advertising profiles or to serve you targeted ads. We do not sell your data.

Sharing

We share data only with the processors listed below, and only to the extent needed for each processor to perform its function.

Supabase -- hosts our Postgres database and handles authentication. Your email address and saved sites are stored here. Supabase is US-hosted, and a GDPR Data Processing Addendum is in place.

RevenueCat -- manages subscription receipts from the App Store and Google Play. RevenueCat receives your subscription status and product identifier.

Sentry -- receives crash reports containing device model, OS version, and app version. Sentry retains these reports for 90 days.

PostHog -- receives anonymized usage events (screen views, button taps). PostHog is US-hosted, and analytics data is retained on a 12-month rolling basis.

Mapbox -- serves the map tiles you see in the app. Your IP address may be transmitted to Mapbox as part of standard HTTPS requests, but no personally identifiable information from your Boondock account is sent.

Anthropic -- generates AI-written summaries for camping sites (available to premium users). We send only public site data (name, location, amenities) to Anthropic. No account data, no email address, no user identifiers.

We may disclose your information if required by law or to protect the rights, safety, or property of Boondock, our users, or the public. We will notify you of any such disclosure where legally permitted to do so.

Retention

| Data type | How long we keep it |
|---|---|
| Account record (email, saved sites) | Until you request deletion |
| Subscription status | Until you request deletion |
| Usage analytics (PostHog) | 12 months rolling |
| Crash reports (Sentry) | 90 days |
| Location queries | Never persisted |

After you delete your account, we remove your email address and saved sites within 14 days (the grace period lets you cancel an accidental deletion). Anonymized, aggregated analytics that cannot be linked back to you may be retained beyond these periods.

Your Rights

We support the rights granted to you under the GDPR (if you are in the EU or UK) and the CCPA (if you are a California resident). You do not need to be in those jurisdictions to use these features -- they are available to all Boondock users.

Access your data (GDPR Article 15 / CCPA Right to Know)
Go to Settings > Privacy > Export my data. You will receive a JSON file containing your account record, saved sites, and subscription status.

Correct your data (GDPR Article 16)
Go to Settings > Account to update information associated with your profile.

Delete your account (GDPR Article 17 / CCPA Right to Delete)
Go to Settings > Privacy > Delete my account. Deletion takes effect after a 14-day grace period, during which you can cancel the request. Once the grace period passes, your account record and saved sites are permanently removed.

Data portability (GDPR Article 20)
Your data export (described under Access above) is delivered in JSON format, which you can import into other services that accept it.

Object to processing (GDPR Article 21)
Contact us at privacy@boondock.app to object to processing.

Opt out of sale (CCPA)
Go to Settings > Privacy > Opt out of data sale. Boondock does not sell your personal information. This option is available as a formal acknowledgment of your CCPA right.

Non-discrimination (CCPA)
Exercising any of the rights listed above will not affect the service you receive. You will not be charged a different price, given a lower-quality experience, or denied access to features because you exercised a privacy right.

To submit a request by email instead of in-app, write to privacy@boondock.app with the subject line Privacy Request. We will respond within 30 days (GDPR) or 45 days (CCPA), with one possible extension where permitted by law.

Children Under 13

Boondock is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, please contact us at privacy@boondock.app and we will delete that account promptly.

International Transfers

Boondock is operated from the United States. If you are in the European Union, European Economic Area, or United Kingdom, your data may be transferred to and processed in the US.

We rely on the following safeguards for those transfers:

• Supabase has a GDPR Data Processing Addendum and Standard Contractual Clauses (SCCs) in place, covering transfers of your account data to US-hosted infrastructure.
• Sentry and RevenueCat participate in standard contractual clause frameworks for international data transfers.

If you would like a copy of the relevant safeguards, contact us at privacy@boondock.app.

Changes to This Policy

When we make material changes to this policy, we will update the Last Updated date at the top and, where required by law, notify you via email or an in-app notice before the changes take effect. Continuing to use Boondock after a change takes effect means you accept the updated policy.

Contact

Boondock App LLC
privacy@boondock.app

For EU/UK users: if you are not satisfied with our response to a privacy request, you have the right to lodge a complaint with your local data protection authority. In the EU, you can find your authority at edpb.europa.eu. In the UK, the relevant authority is the Information Commissioner's Office at ico.org.uk.