Privacy Policy

This policy explains what Teddys Livs AB ("we") collects when you use Boone, why, and the choices you have. It applies alongside our Terms.

Data we collect

Account: email address, display name, sign-in method.
Public profile: the display name you choose may appear publicly in Boone — for example, on the landing page activity ticker showing the most recent treasure claim, on business pages you interact with, and to other players who see your claims. Pick a display name you're comfortable showing publicly. You can change it from your account settings.
Profile picture (optional): if you upload one, we store it in Lovable Cloud storage and show it on your player card according to your card-visibility setting. Before it goes live, the image is automatically scanned (perceptual-hash blocklist and an AI vision check) to filter hate symbols, sexual content, graphic violence, and other policy violations. Admins may remove pictures that break our conduct rules even after that automated check. You can remove your picture at any time from Account.
Location: your precise GPS coordinates while you have the Explore screen open. Used to show nearby treasures and verify claims. The coordinates of a successful claim are recorded with the claim.
Location breadcrumb trail (anti-fraud): while the Explore tab is open, we record a low-frequency location ping (roughly every 45 seconds) including your coordinates, GPS accuracy, and country derived from your IP address. These pings are kept for at most 24 hours and are used solely to detect location spoofing and protect game integrity. They are not used for advertising or shared with third parties.
Claim metadata (anti-fraud): for each treasure claim we store the reported GPS accuracy, the server-computed distance to the treasure, the country derived from your IP address, whether your device reported mock-location, and an automated risk score. We use this to revoke fraudulent claims and review suspicious activity.
Activity: treasures you claim, redeem, or report; fire lookout activations; herbalist visits; treasures and presets you create as a business.
Crews: the crew you belong to or lead, crew name, member list, and invitations you send or receive.
Wallet & rewards: your Boone Bucks balance, wallet transaction history, and records of any treasure redemptions (which treasure, when, and the redemption code issued).
Gift card redemptions: when you request a gift card we record the request, your chosen brand and value, the recipient email you provide, the timestamp you confirmed you are 18+ and accepted the terms, and — if location was available — the coordinates at the time you submitted. Boone staff review each request. Approved requests are fulfilled through our gift-card partner GoGift: the recipient email, chosen brand, and denomination are shared with GoGift so they can deliver the card.
Push notifications: if you opt in, we store the browser-issued push endpoint and its encryption keys so we can send you nearby-treasure and quest alerts. You can turn this off any time from Account.
Business staff devices: Business Pro accounts can add "redeemer devices" for staff; we store a device label and a hashed access token. Revoking a device is instant.
Business data: business name, address, description, contact details, owner identity.
Payments: subscription status and metadata from our payment processor (Stripe). We do not store card numbers.
Technical: standard server logs (IP, user agent, error traces) used for security and debugging.

Why we use it (legal bases)

Contract: running your account, processing claims and redemptions.
Consent: precise location access (you can revoke at any time).
Legitimate interest: fraud prevention and anti-cheat (location trail, claim metadata, IP country, device signals), enforcing per-week limits, abuse reports, basic analytics, and publishing recent activity (e.g. the landing-page ticker) to demonstrate the Service is in use.
Legal obligation: tax and accounting records for paid plans.

Anti-fraud processing

Because Boone awards real-world rewards based on physical location, we operate automated fraud-detection systems. We process your recent location trail, GPS accuracy, the country derived from your IP address, device type, and (where available) mock-location signals from your operating system to compute a risk score for each claim. Claims that score above an internal threshold may be automatically blocked or queued for human review. Repeated fraudulent activity may result in suspension. You can request human review of any blocked claim by contacting us.

Note on web browsers: mock-location detection on web is best-effort. Reliable spoof detection requires a native mobile wrapper, which is on our roadmap; until then, we lean on the location trail, IP country, and other signals for web players.

Who we share data with

Lovable Cloud — application hosting and database.
Stripe — payment processing and subscription billing.
GoGift — gift-card fulfillment for approved reward redemptions (recipient email, brand, denomination).
Resend — transactional email delivery (magic links, receipts, crew invites, notifications).
Web push services — Apple, Google, and Mozilla push relays deliver notifications to your device when you have them enabled.
Google — when you choose Google sign-in, and for map tiles where applicable.
OpenStreetMap / Mapbox — map tiles on the Explore screen.

We do not sell your personal data. We do not share it for third-party advertising.

Retention

Account data is kept until you delete your account. Treasure history tied to a business is retained while the business exists. Location breadcrumb pings are kept for at most 24 hours. Push notification subscriptions are removed when you sign out on that device or turn notifications off. Wallet transactions and redemption records are kept for the life of the account for audit. Server logs are kept for up to 90 days. Legal/tax records for payments are kept as long as the law requires.

Your rights

Depending on where you live, you have the right to access, correct, export, restrict, or delete your data, object to certain processing, and withdraw consent. You can:

Export a full JSON copy of your data from Account → Privacy → Export my data.
Delete your account from Account → Privacy → Delete my account.
Revoke location permission anytime from Account → Privacy.
Contact us at privacy@boone.gg for anything else.
Complain to your local data protection authority if you believe we've mishandled your data. In Sweden, this is Integritetsskyddsmyndigheten (IMY).

Security

We apply appropriate technical and organisational measures to protect your data, including TLS in transit, encryption at rest provided by our hosting platform, role-based access control, and row-level security on user data in our database.

Children

Boone is not intended for users under 13. If you believe a child has signed up, contact us and we will remove the account.

International transfers

Our processors may store data in regions outside your own. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses.

Beta status and data changes

Boone is under active development. The way we store data — including tables, fields, indexes, retention windows, and derived signals — may change as the product evolves. We will act reasonably to preserve your account, treasures, wallet balance, and history through those changes, but in exceptional circumstances (major migrations, corrupt data, security incidents, or discontinued features) some data may be migrated, redacted, reset, or lost, and specific features or activities may be paused or removed. Where we materially change how personal data is processed, we will bump the version of this policy and prompt you in-app.

Business rejections

When a Host rejects one of your redemption codes at their venue, they are required to record a short free-text reason. That reason is stored so Boone admins can review rejection patterns and act on abuse of the tool. The reason is not shared with the Explorer whose code was rejected, and is not shown on any player-facing surface. If you believe a rejection was applied in error, contact us at privacy@boone.gg.

Changes

If we change this policy materially, we'll bump the version and prompt you in-app before continued use.

Contact

Data controller: Teddys Livs AB — Aktiebolag (AB), Sweden, registered ID 559380-3876. Email: privacy@boone.gg.