Privacy Policy

Last updated: March 23, 2026

1. Information We Collect

We collect information you provide directly:

  • Account information: Name, email address, date of birth, username, password
  • Profile information: Bio, avatar photo, banner photo, academic interests, graduation year, state/region
  • User content: Posts, comments, messages, forum posts, event details
  • Verification data: College email addresses for .edu verification

We automatically collect:

  • Device information: Device type, operating system, browser type
  • Usage data: Pages visited, features used, interaction patterns
  • Log data: IP address, access times, referring URLs

2. How We Use Your Information

  • Provide, maintain, and improve the Platform
  • Personalize your college discovery experience
  • Enable communication between users
  • Moderate content and enforce community guidelines
  • Send service-related notifications
  • Analyze usage patterns to improve features
  • Prevent fraud and ensure Platform security

3. Information Sharing

We do not sell your personal information. We may share information with:

  • Other users: Your profile information, posts, and public activity are visible to other Platform users
  • Service providers (subprocessors): we share data with the following providers strictly to operate the Platform:
    • Supabase — authentication, database, file storage, and realtime messaging infrastructure
    • Resend — transactional email delivery (e.g., verification emails, university inquiries)
    • Apple Push Notification Service and Firebase Cloud Messaging — push notification delivery on iOS and Android (only when you opt in to notifications)
  • Universities: Aggregated, anonymized data about platform engagement (never individual user data without consent)
  • Legal requirements: When required by law, regulation, or legal process

4. Data Storage and Security

Your data is stored securely using industry-standard encryption. We use Supabase for backend infrastructure, which provides row-level security, encrypted storage, and SOC 2 Type II compliance. While we take reasonable measures to protect your data, no system is 100% secure.

5. Your Rights and Choices

You have the right to:

  • Access: View and download your personal data
  • Correction: Update inaccurate information via your profile settings
  • Deletion: Delete your account and associated data at any time
  • Portability: Request a copy of your data in a portable format
  • Opt-out: Disable push notifications and marketing emails

6. Children's Privacy

BoomerangBoard is not intended for children under 16. Users must be at least 16 years old to create an account, and a date of birth is required at signup to verify eligibility. We do not knowingly collect personal information from children under 16. If we discover that we have collected information from a user under 16, we will delete it promptly.

7. Push Notifications

With your permission, we may send push notifications about messages, connection requests, and Platform updates. You can disable push notifications at any time through your device settings or the app.

8. On-Device Content Moderation

To keep the community safe, we run image and text moderation locally on your device before content is uploaded. Image moderation uses TensorFlow.js with the open-source NSFWJS model; text moderation uses an open-source profanity dictionary. These checks run entirely in your browser or app — your photos and message drafts are not sent to any external moderation service before being posted. If you choose to publish content, only the published content is sent to our servers (where it remains subject to user reporting and human review).

9. Cookies and Tracking

We use essential cookies to maintain your session. We do not use third-party advertising trackers. Analytics data is collected in aggregate form to improve the Platform.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Your continued use after changes constitutes acceptance.

11. Contact Us

For privacy-related questions or to exercise your rights, contact us at privacy@boomerangboard.com.