1. Overview

Boundaries ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

2. Information We Collect

Information You Provide

When you register, apply to join our team, or contact us, we may collect: your name, email address, professional background, and any other information you voluntarily submit through our forms.

Financial Data

Boundaries is built on an offline-first, privacy-by-design architecture. All financial data you enter (budgets, spending limits, transactions) is stored locally on your device and is never transmitted to our servers unless you explicitly enable cloud sync features.

Usage & Analytics Data

We may collect anonymized usage data (e.g., feature interactions, crash reports) to improve the Service. This data does not identify you personally and is processed in aggregate.

Device Information

We may collect device identifiers, operating system version, and similar technical data necessary for the Service to function correctly and to diagnose technical issues.

3. How We Use Your Information

To operate, maintain, and improve the Service.
To respond to your inquiries or job applications.
To send transactional communications (e.g., confirmation emails via Resend).
To detect, prevent, and address technical issues or fraudulent activity.
To comply with legal obligations.
To analyze anonymized usage trends and improve user experience.

4. Data Storage & Retention

Your personal data submitted via forms (e.g., job applications) is stored in our secure database (Supabase). We retain this data only as long as necessary to fulfill the purpose for which it was collected or as required by law. Financial data remains on your device unless you opt into a future cloud sync feature. You may request deletion of your data at any time by contacting us at privacy@boundaries.app.

5. Third-Party Services

Resend

We use Resend to deliver transactional emails. Your email address may be processed by Resend solely for the purpose of delivering communications you request. Resend is GDPR-compliant.

Supabase

We use Supabase as our backend database provider for storing form submissions. Supabase is SOC 2 Type II certified and GDPR-compliant. Data is stored in the EU region unless otherwise specified.

Apple (App Store)

If you download Boundaries from the Apple App Store, Apple may collect certain data in accordance with their own privacy policy. We encourage you to review Apple's Privacy Policy.

6. GDPR & Your Rights (EU/EEA Users)

If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):

Right of access — request a copy of the personal data we hold about you.
Right to rectification — request correction of inaccurate data.
Right to erasure — request deletion of your personal data ("right to be forgotten").
Right to restriction — request that we limit the processing of your data.
Right to data portability — receive your data in a structured, machine-readable format.
Right to object — object to processing based on legitimate interests.

To exercise any of these rights, contact us at privacy@boundaries.app. We will respond within 30 days.

7. Cookies & Tracking

Our website may use minimal, essential cookies required for the Site to function (e.g., session management). We do not use third-party advertising cookies or tracking pixels. You can disable cookies in your browser settings; however, some features of the Site may not function properly as a result.

8. Children's Privacy

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such data, please contact us immediately at privacy@boundaries.app and we will delete it.

9. Data Security

We implement industry-standard security measures including encryption in transit (TLS), access controls, and regular security audits to protect your data. However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security and encourage you to take steps to protect your own information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last Updated" date at the top of this page and, where appropriate, by sending you an email notification. Your continued use of the Service after any changes constitutes your acceptance of the new policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: privacy@boundaries.app