Privacy Notice At Collection

Overview

This notice summarizes the personal information Boba Globe collects at or before collection, why we collect it, how long we keep it, and where to learn more. It should be read together with our Privacy Policy, Cookie Policy, Privacy Requests And Choices page, and Legal Requests page.

Mobile Storage And Sign-In

The website, iOS and Android apps use Boba Globe authentication through Supabase. Mobile journeys and videos are saved and rendered on your device, without account synchronization. Device backups may include app data. These local creations are not uploaded to our project storage; requested online route queries, authentication, and store purchase verification still use our servers and the relevant providers. Deleting a local journey or video removes that app copy, but does not remove copies you shared or saved elsewhere.

You can use the app without an account; signing in is required for online route imports, purchases, and account requests. If you turn on optional route backup, the backup file goes directly to the cloud storage location you choose, not to Boba Globe. Detailed Terrain 3D relief may download public elevation tiles from Amazon S3, which receives your IP address and the map area viewed.

Categories Collected

• Identifiers and account information: Email address, display name, authentication provider profile data, account identifiers, and account creation time. Purpose: Authentication, account display, security, support, and service communications. Retention: While your account is active or as needed for security, support, legal, or dispute obligations.
• Project content and saved visualization information: Trip names, stops, destinations, route legs saved in projects, visualization settings, imported flight data, thumbnails, and saved project metadata. Purpose: Saving, loading, rendering, exporting, and supporting your Boba Globe projects. Retention: While your account is active or until you delete projects or request deletion, unless retention is legally required.
• Commercial and billing information: Stripe customer and subscription identifiers for website purchases; Apple or Google product, transaction, and encrypted purchase verification references for mobile purchases; plan, status, billing interval, invoices, receipts, renewal state, and cancellation state. Purpose: Checkout, subscription entitlement, invoices, billing support, tax, accounting, fraud prevention, and dispute handling. Retention: As needed for billing, tax, accounting, fraud prevention, dispute, legal, and compliance obligations.
• Internet, device, and security information: IP address, browser type, device capabilities, request metadata, rate-limit data, error details, security logs, and limited internal account, project, subscription, or provider event identifiers. Purpose: Operating Boba Globe, securing accounts, preventing abuse, troubleshooting, and improving reliability. Retention: For the period needed to operate and protect the service, unless longer retention is needed for an investigation or legal obligation.
• Product analytics and diagnostic information: Pages and app screens viewed, features used, export settings and outcomes, purchase outcomes, app version, device and browser type, approximate location derived from IP address, and error reports. If you opt in: a random device identifier, your Boba Globe account identifier, and masked website session replays. Purpose: Understanding feature use, diagnosing errors, and improving Boba Globe. Not used for advertising. Retention: For as long as needed to analyze product use and reliability, subject to the retention limits of our PostHog project. Cookieless events are not linked to you; opted-in events linked to your account are deleted on verified request.
• Browser storage and preference information: Authentication and session storage, Supabase browser storage, checkout or billing return state, local UI state, and optional editor preference storage if you enable it. Purpose: Keeping you signed in, protecting account and paid features, supporting checkout and billing access, and remembering optional editor preferences on this device if you choose to enable them. Retention: Session and authentication storage follows provider and browser settings. Optional editor preference storage is off by default and remains only until you disable it, use the Cookie Policy clear-and-disable control, or clear site data.
• Route lookup and geolocation-like route information: Origins, destinations, selected place identifiers, route geometry, flight numbers, selected flight identifiers, and flight track points. Purpose: Providing requested flight, place autocomplete, directions-route, map visualization, and export features. Retention: While saved in your projects or as needed to provide requested features, unless deletion or longer legal retention applies.
• Support and feedback communications: Email address, topic, message, screenshots or images you choose to attach, and app version, build, and platform details. Purpose: Responding to support requests, feedback, privacy and deletion requests, troubleshooting, and improving Boba Globe. Retention: For as long as needed to resolve the request and keep a record of it, unless longer retention is needed for security, legal, or dispute obligations.
• Promotion and partner program information: A creator or partner promo code you enter, the linked discount or store offer, and related first-payment and commission records. Purpose: Showing eligible offers, attributing referred subscriptions, calculating creator commissions, preventing abuse, and accounting. Retention: As needed for program administration, accounting, tax, fraud prevention, dispute, and legal obligations.

Sources

We collect information from you, your browser or device, authentication providers, Stripe, Apple, Google, service providers that operate Boba Globe, and route providers such as Flightradar24, Geoapify, BusMaps, or Google Maps Platform when you request those features.

Business Purpose Disclosures

We disclose collected categories to service providers and recipients for business purposes such as authentication, hosting, storage, security, debugging, support, payment processing, subscription management, email delivery, asset delivery, browser-loaded export tooling, and requested route features. Identifiers and account information may be disclosed to authentication, database, hosting, email, security, and support providers. Project content and saved visualization information may be disclosed to database, storage, hosting, CDN, and support providers. Route lookup and geolocation-like route information may be disclosed to database, storage, hosting, CDN, and support providers when saved or supported, and to Flightradar24, Geoapify, BusMaps, or Google Maps Platform only when you request related route features. Commercial and billing information may be disclosed to Stripe through Boba Globe’s billing account for website purchases, or Apple and Google for mobile store purchase verification. Internet, device, security, browser storage, and preference information, including limited internal account, project, subscription, or provider event identifiers in structured operational logs, may be disclosed to hosting, CDN, package CDN, database, logging, security, browser, and infrastructure providers as needed for the service.

For the 12 months before the last updated date above, Boba Globe has not sold personal information, shared personal information for cross-context behavioral advertising, or used personal information for targeted advertising.

Sale, Sharing, And Advertising

Boba Globe does not sell personal information, share personal information for cross-context behavioral advertising, use personal information for targeted advertising, or use personal information for profiling that produces legal or similarly significant effects. Boba Globe does not use advertising pixels or behavioral advertising trackers. PostHog product analytics runs without cookies unless you allow analytics cookies, and it is not used for advertising.

Sensitive Personal Information

Boba Globe does not ask for government identifiers, health information, biometric identifiers, or full payment-card details. Travel routes, precise places, flight tracks, and account login data can still be sensitive depending on how you use the service. We use that information to provide requested features, protect accounts, process payments, and meet legal obligations; we do not use it to infer sensitive characteristics.

Boba Globe does not use or disclose sensitive personal information for purposes that require a right to limit under the CCPA, such as cross-context behavioral advertising, profiling, or inferring characteristics unrelated to the features you request.

Boba Globe is not a health app and does not ask for consumer health data. We do not use route, place, flight, or project information to identify, infer, rank, or target a person's physical or mental health status, health-care choices, reproductive or gender-affirming care, or visits to health-related locations. Boba Globe does not collect device GPS data or background location.

Please do not send unnecessary health, biometric, government-id, financial-account, or similar sensitive information in project names, support requests, or privacy requests.

Children And Age Requirements

Boba Globe is a general-audience service and is not directed to children under 13. Users must be at least 13, and must meet any higher age, parent or guardian consent, or other age-related condition required by local law for online services. If you believe a child provided personal information to Boba Globe, contact [email protected].

Your Rights

Depending on where you live, you may have rights to access, delete, correct, port, restrict, object to, or limit certain uses of personal information. California residents and residents of other U.S. states with privacy laws may also have rights to opt out of sale, sharing, targeted advertising, or certain profiling if those activities occur, use an authorized agent where available, appeal denied requests where available, and be free from unlawful discrimination for exercising privacy rights.

Boba Globe does not sell personal information, share personal information for cross-context behavioral advertising, or use personal information for targeted advertising. Where applicable law requires us to honor Global Privacy Control or another legally recognized universal opt-out mechanism or opt-out preference signal, we treat the signal as an opt-out request and publish a machine-readable GPC support resource at /.well-known/gpc.json, but those signals do not change our current sale, sharing, or targeted-advertising practices because those activities are not enabled. To submit a request, follow the instructions on our Privacy Requests And Choices page.

More Information

Details about service providers are available on our Service Providers And Subprocessors page. Questions can be sent to [email protected].