Privacy Policy
Boomph is a children’s app · Effective 4 July 2026 · v1 (beta — under legal review)
Boomph is a chore game designed for children and controlled by a parent or guardian. A grown-up creates the account, sets things up, and stays in charge. This policy explains what we collect, why, and the choices you have. We’ve written it in plain English on purpose.
1. Who we are
Boomph is made by Rough Studio Ltd (Edinburgh, United Kingdom), the “data controller” for your family’s information. Questions, requests or concerns: hey@rough.ink.
2. Our approach
Privacy by design. We build to the principles of the UK Children’s Code, the US Children’s Online Privacy Protection Act (COPPA) and the UK/EU GDPR. That means: we collect as little as possible, keep high-privacy defaults, and never show ads, never use third-party ad-tracking, and never sell your data.
3. What we collect
Parent account: an email address (to sign in and reach you) and a password (stored securely by our authentication provider — we never see it).
Child profile: a first name or nickname, an age, and a chosen cartoon avatar. We don’t need — and don’t ask for — a child’s real identity, surname, address or contact details.
Photos: pictures a child takes of the task — the mess before, and the tidy-up after — so the game can check the job’s done. See the next section on how we keep people out of these.
Minimal technical data: basic, security-related information (such as rate-limiting signals) needed to run the service safely. No behavioural profiling.
4. No images of people — scenes and jobs only
Images of people aren’t allowed. Boomph asks for the scene (the space) and the task only — never a person. Every photo passes an automated check before it is stored or analysed; if a real person is in frame, it’s rejected and never saved. We deliberately keep the mess, not the child. Our safety bar is high on purpose — please keep people, family photos, screens and anything identifying out of shot.
5. How we use what we collect
Only to run the game: to set up missions, and to check a task photo against the task. Photo checks are performed by Google’s Gemini AI acting as our service provider. We use a paid tier, under which your images are not used to train Google’s models. We do not use your data for advertising or profiling.
6. Who we share it with
Only the service providers that make the app work, each acting on our instructions: hosting and private photo storage (Supabase), our web host (Vercel), photo-checking AI (Google Gemini) and transactional email (Resend). No advertisers. No data brokers. No sales.
7. Keeping and deleting data
We keep photos and mission data only as long as needed to run the game, then remove them. A parent can delete everything — every photo and all family data, with no undo — from Settings, or by emailing hey@rough.ink. We action verified deletion requests promptly.
8. Parental rights & control
The account is yours to control. You can access, correct or delete your family’s data, and withdraw consent at any time (which ends the service for that child). To exercise any right, use Settings or email us. You can also complain to the UK’s Information Commissioner’s Office (ico.org.uk).
9. Children’s privacy & consent
Boomph is intended to be set up and run by a parent or guardian, who provides consent on behalf of their child. We design the experience to be age-appropriate. If you believe a child created an account without a parent’s involvement, contact us and we’ll remove it.
10. Security
Data is encrypted in transit and at rest. Photos live in private storage and are served only through short-lived, signed links to the right family. Access is scoped so one family can never see another’s data.
11. Where data is processed
We’re UK-based. Some service providers may process data outside the UK; where they do, we rely on appropriate safeguards for international transfers.
12. Changes & contact
We’ll update this policy as Boomph grows and post the new date here. This is our current beta policy and is under legal review. Anything unclear? hey@rough.ink.