Privacy Policy

Overview

Boba Globe helps users create animated travel map videos. This policy covers the Boba Globe website and iOS and Android apps, including what information we collect, how we use it, the service providers involved, and your privacy choices. For privacy requests, Boba Globe can be reached at [email protected].

The iOS and Android apps are the main way to create with Boba Globe. Some website features described in this policy, such as the browser editor, saved website projects, and website checkout, may be limited or discontinued; where they remain available, or where information from earlier website use is still held, the website descriptions below continue to apply.

Who We Are

Boba Globe is operated by Something Better LLC. Something Better LLC is responsible for the personal information described in this policy unless another provider acts as an independent controller under its own terms. For account, project, support, billing-related, and privacy requests, Boba Globe is the contact point for the service and can be reached at [email protected].

Boba Globe has not named a separate Data Protection Officer, UK representative, or EU representative in this policy. If we appoint one or applicable law requires us to name one, we will update this policy with the required contact details.

Information We Collect

• Account information such as your email address, display name, and authentication provider profile data.
• Project data such as trip names, destinations, routes, imported flight data, visualization settings, thumbnails, and saved exports metadata.
• Route lookup information such as flight numbers, dates, selected flight identifiers, origins, destinations, selected place IDs, route request details, route geometry, and flight track points when you ask for flight, place autocomplete, or directions-route features.
• Commercial and billing information such as Stripe customer and subscription identifiers for website purchases; Apple or Google product, transaction, and purchase verification information for mobile purchases; and plan, status, billing interval, invoices, receipts, renewal state, and cancellation state. We do not store full card numbers.
• Browser storage and preference information such as authentication and session storage, Supabase browser storage, checkout or billing return state, local UI state, and optional editor preference storage if you enable preference storage.
• Technical data such as IP address, browser type, device capabilities, request metadata, rate-limit data, error details, security logs, and limited internal account, project, subscription, or provider event identifiers needed to operate and protect the service.
• Product analytics and diagnostics such as pages and app screens viewed, features used (for example creating a journey, adding a stop, exporting a video, or viewing an upgrade offer), export settings and outcomes, purchase outcomes, app version, device and browser type, approximate location derived from IP address, and error reports. See Product Analytics below.
• Support and feedback information such as your email address, the topic and message you send, any screenshots or images you choose to attach, and the app version, build, and platform when you contact us from the app or website.
• Promotion and partner information such as a creator or partner promo code you enter, the discount or store offer linked to it, and the related first-payment and commission records used to administer invitation-only creator and affiliate programs.

We collect information directly from you, from your authentication or billing provider when you sign in or pay, and from route providers when you request flight, address, or directions-route features.

A summary of categories, purposes, retention criteria, and California-style notice-at-collection details is available in our Privacy Notice At Collection.

iOS And Android Apps

• Using the app without an account: you can open the app and create journeys on your device without signing in. Signing in is required for online route and flight imports, purchases and restores, and account-linked requests such as account deletion.
• Boba Globe sign-in: the website and mobile apps use a dedicated Boba Globe authentication project through Supabase. You can sign in with an emailed code and, where offered, with Google or Apple. We receive the account identifier, email address, and available sign-in provider profile information needed to authenticate you. If you use Sign in with Apple and choose to hide your email, we receive Apple’s private relay address instead. Using the same Boba account does not synchronize your locally saved mobile journeys or combine subscriptions purchased on different platforms. Your sign-in session is kept in app-private storage on the device that is excluded from cloud backup.
• On-device creations: mobile journeys, visualization settings, and exported videos are stored on your device rather than synchronized to your account. Videos are rendered on the device. Operating-system backup or device-transfer settings may include app data. Removing the app or clearing its data can remove these local creations.
• Optional route backup: if you turn on route backup, the app writes a backup file of your journeys (not your videos) to a file location you choose with your device’s file picker, such as iCloud Drive or Google Drive. The file goes directly to the storage provider you select and is not sent to Boba Globe’s database. That provider’s terms and privacy practices apply, and you can disconnect the backup or delete the file at any time.
• Map and terrain assets: base map textures ship with the app. When you view detailed Terrain 3D relief, the app may download additional public elevation tiles from the AWS Open Data Terrain Tiles dataset hosted on Amazon S3. Those requests include your IP address and the map area being viewed, but not your account or journey details.
• Requested route lookups: when you request online route or flight imports, request details and your authentication token are sent to Boba Globe’s API. Relevant route queries are sent to the route provider to fulfill your request. Choosing a destination is not device GPS tracking; the app does not request background location.
• Store purchases: Apple or Google processes in-app purchases. Boba Globe uses your account identifier, store product and transaction information, purchase verification references, subscription status, renewal state, and expiry to verify purchases, restore access, prevent fraud, and provide Pro. Purchase verification references are stored encrypted in our billing database. Apple and Google process payment details under their own policies; Boba Globe does not receive full payment-card numbers.
• Sharing: using your device’s share controls sends the selected video to the app or destination you choose. That destination’s privacy practices apply. Videos may reveal the journey names, locations, and routes you included.
• Promo codes: if you enter a creator or partner promo code, we check it with Boba Globe’s server and link the accepted code to your account so the related store offer can be shown and the referring partner’s first-payment commission can be calculated. Partners see their program earnings, not your identity, payment details, or journeys.
• Support messages: if you send feedback or a support request from the app, we receive your email address, your message, any images you attach, and app version and platform details, and deliver them to our support inbox through our email provider.
• Only eSIM promotion: the app displays an Only eSIM recommendation and offer. Its links may include fixed campaign identifiers identifying Boba Globe as the referral source. The mobile app does not use an advertising identifier or a third-party advertising SDK to personalize this recommendation.

Website-specific descriptions below, including Stripe checkout and browser export fallbacks, apply when you use those website features. They do not mean mobile journeys and videos are uploaded for storage or encoding.

Product Analytics

We use PostHog, a product analytics provider, on the website and in the iOS and Android apps to understand which features are used, find errors, and improve Boba Globe. By default, analytics runs without cookies or device storage: PostHog counts visits using a privacy-preserving hash that rotates daily, and events are not linked to you or to your account.

If you allow analytics cookies on the website, or turn on Share usage analytics in the app, PostHog also stores a random identifier on your device, links analytics events to your Boba Globe account identifier when you are signed in, and on the website may record masked session replays of page interactions. Replays mask text you type, block the globe canvas and videos, and mask all text on account, billing, and request pages. We remove URL query strings, email addresses, and access tokens from analytics events before they are sent. We do not send your email address to PostHog, and we do not use analytics for advertising.

You can change your choice at any time from our Cookie Policy on the website or from the Account screen in the app.

Cookies And Local Storage

We use essential cookies and browser storage to provide authentication, Supabase session handling, security, checkout and billing access, and saved UI state. Optional editor preference storage is off by default and can be enabled, disabled, or cleared and disabled from our Cookie Policy. Analytics cookies are used only if you allow them, as described in Product Analytics above. We do not use third-party advertising cookies or behavioral advertising trackers.

How We Use Information

• Provide the iOS and Android apps, website features where available, saved projects, exports, authentication, route imports, and subscription features.
• Verify and restore store purchases, show eligible free-trial and promo-code offers, and administer creator and affiliate programs.
• Respond to support requests, feedback, privacy requests, and account deletion requests.
• Process upgrades, manage billing access, and enforce Free and Pro feature limits.
• Protect the service against abuse, troubleshoot errors, and improve performance.
• Communicate account, security, billing, and product updates.

Communications

We send service, transactional, billing, security, privacy, accessibility, and support emails when needed to provide Boba Globe, authenticate accounts, process subscriptions, send invoices or receipts, deliver renewal reminders or price-change notices where required by law, respond to requests, and protect the service.

Boba Globe does not currently send marketing newsletters or third-party promotional email campaigns. We may operate invitation-only creator or affiliate programs that use one-time invite links, creator promo codes, Stripe checkout attribution, and payout records to administer program access, audience discounts, and creator commissions. Before adding unrelated marketing emails, newsletters, or broad promotional messaging, we will update our public notices where needed and provide consent, opt-out, unsubscribe, or other controls required by applicable law.

Purposes And Legal Bases

If the GDPR, UK GDPR, or similar privacy laws apply, our legal bases include providing and performing the service contract, our legitimate interests in securing Boba Globe, preventing abuse, rate limiting, troubleshooting, and improving the service, complying with legal obligations such as tax and accounting rules, and consent where required for optional communications or non-essential cookies.

• Account creation, sign-in, saved projects, exports, and requested route features: contract necessity for signed-in features and requested services, plus legitimate interests in reliable service operation and abuse prevention.
• Checkout, subscriptions, invoices, receipts, taxes, accounting, refunds, chargebacks, and disputes: contract necessity, legal obligations, and legitimate interests in billing integrity and dispute handling.
• Invitation-only creator and affiliate programs: contract necessity and legitimate interests for creator access, promo-code attribution, commission calculation, payout administration, abuse prevention, and accounting records.
• Security, fraud prevention, rate limiting, debugging, service integrity, and incident response: legitimate interests in protecting Boba Globe, users, and paid features, and legal obligations where security or financial records must be kept.
• Service emails, lifecycle notices, and support responses: contract necessity for authentication, billing, subscription, security, and account notices; legitimate interests for support and service reliability; and legal obligations where notices are required.
• Optional editor preference storage or future non-essential storage: consent where required by law, with controls described in our Cookie Policy.

Account email and session data are required to provide signed-in features. Payment information is required to buy Pro. If you do not provide information required for an account, saved project, route lookup, or payment, the related feature may not work.

Our legitimate interests are operating, securing, debugging, protecting, supporting, and improving Boba Globe in ways users reasonably expect, while limiting collection and retention to what is needed for those purposes.

Service Providers

Apple and Google handle mobile store purchases and provide transaction information used to verify and restore subscriptions. Their own privacy policies apply to their store accounts and payment processing. We use service providers including Supabase for authentication, database, storage, and session handling, using a dedicated Boba Globe project for website and mobile sign-in; PostHog for product analytics and error reports; Stripe for checkout, payments, invoices, billing portal access, and subscription status; AWS SES or similar email providers for authentication and lifecycle emails; Vercel, CloudFront, or similar hosting and CDN providers for app and asset delivery; Amazon S3, which hosts the public AWS Open Data Terrain Tiles dataset used for Terrain 3D relief; an npm package CDN such as unpkg if FFmpeg fallback export code is enabled and your browser loads it; Flightradar24 when you request flight route features; Geoapify when you request enabled place autocomplete, geocoding, or driving/transit route features; the Wikimedia Foundation (Wikipedia) when you search for places in the apps; BusMaps when you request enabled transit route features; and Google Maps Platform only if approved Google directions-route features are enabled and requested.

More detail is available on our Service Providers And Subprocessors page.

Video exports are processed in your browser where possible. If the FFmpeg fallback exporter is enabled and used, your browser may download FFmpeg core JavaScript and WebAssembly assets from a package CDN; that request can expose technical request metadata to the CDN, but Boba Globe does not send your project frames to that CDN for encoding.

If you use enabled Geoapify route features, the search query, origin, destination, selected place details, route mode, and route request details are sent to Geoapify to return autocomplete suggestions, geocoding results, and route geometry. Geoapify processes that information under the Geoapify Privacy Policy. When you search for a place in the apps, Boba Globe's servers also send the search text, without account or device identifiers, to Wikipedia to rank well-known landmarks; the Wikimedia Foundation processes it under the Wikimedia Privacy Policy. If you use enabled BusMaps transit route features, origin and destination coordinates, selected place details, route mode, and route request details are sent to BusMaps to return public-transit route geometry and timing. BusMaps processes that information under the BusMaps Privacy Policy. If the optional Google Maps provider is enabled and requested instead, Google processes route and place information under the Google Privacy Policy.

Boba Globe is operated by Something Better LLC. Web subscriptions are sold through Link using Stripe Managed Payments, which handles billing, applicable taxes, and transaction support. Manage your subscription through Link or your Boba Globe billing settings.

Sharing

We do not sell personal information, share personal information for cross-context behavioral advertising, use personal information for targeted advertising, or use personal information for profiling that produces legal or similarly significant effects. We share information with service providers as needed to run Boba Globe, comply with law, prevent abuse, process payments, send service emails, or complete actions you request.

Legal Requests And Safety

We may preserve or disclose information if we believe in good faith that it is required by law, valid legal process, legal obligation, security or abuse prevention needs, protection of users or providers, or an emergency involving risk of harm. We review legal requests for authority, validity, scope, date range, conflicts, cross-border public-authority requirements, and user privacy impact; seek to narrow overbroad requests where appropriate; and notify affected users where legally allowed. More detail is available on our Legal Requests page.

Business Purpose Disclosures

Boba Globe discloses personal information to service providers and recipients for business purposes such as authentication, hosting, storage, security, debugging, support, payment processing, subscription management, email delivery, asset delivery, and requested route features. We do not receive or disclose full card numbers: Stripe handles website payment details, and Apple or Google handles mobile store payment details.

• Identifiers and account information: disclosed to authentication, database, hosting, email, security, and support providers, including Supabase for Boba Globe sign-in.
• Support and feedback information: disclosed to hosting and email providers to deliver your message to our support inbox and to reply to you.
• Project content and saved visualization information: website projects may be disclosed to database, storage, hosting, CDN, and support providers. Mobile journeys and videos stay on the device unless you share them; requested route lookup and geolocation-like route information is disclosed to Flightradar24, Geoapify, BusMaps, or Google Maps Platform only when you request those features.
• Commercial and billing information: disclosed to Stripe through Boba Globe’s billing account for website purchases, and Apple or Google for mobile store purchase verification. Our billing database processes the account-linked records described above for subscriptions, receipts, fraud prevention, disputes, and tax or accounting obligations.
• Internet, device, and security information: disclosed to hosting, CDN, database, logging, security, and infrastructure providers to deliver, debug, protect, and monitor the service, including limited internal account, project, subscription, or provider event identifiers in structured operational logs.
• Browser storage and preference information: processed in your browser and disclosed to authentication/session providers, hosted checkout and billing providers, hosting, CDN, database, logging, security, and infrastructure providers as needed for sign-in, security, checkout and billing access, local UI state, and optional editor preferences if you enable them.

For the 12 months before the last updated date above, Boba Globe has not sold personal information, shared personal information for cross-context behavioral advertising, or used personal information for targeted advertising. We have disclosed the categories described above to service providers and recipients for the business purposes described in this policy.

Sensitive Personal Information

Boba Globe does not ask for government identifiers, health information, biometric identifiers, or full payment-card details. Travel routes, precise places, flight tracks, and account login data can still be sensitive depending on how you use the service. We use that information to provide requested features, protect accounts, process payments, and meet legal obligations; we do not use it to infer sensitive characteristics or for cross-context behavioral advertising.

Boba Globe does not use or disclose sensitive personal information for purposes that require a right to limit under the CCPA, such as cross-context behavioral advertising, profiling, or inferring characteristics unrelated to the features you request.

Boba Globe is not a health app and does not ask for consumer health data. We do not use route, place, flight, or project information to identify, infer, rank, or target a person's physical or mental health status, health-care choices, reproductive or gender-affirming care, or visits to health-related locations. Please do not send unnecessary health, biometric, government-id, financial-account, or similar sensitive information in project names, support requests, or privacy requests.

Boba Globe does not collect device GPS data or background location. Route and place information is entered, imported, or requested by you for creative map visualization features.

International Transfers

Boba Globe and our service providers may process information in the United States and other countries where we or they operate. If you are in the EEA, UK, Switzerland, or another region with transfer rules, your information may be transferred to countries that may not provide the same level of protection as your home jurisdiction.

Where privacy laws require transfer safeguards, we rely on lawful transfer mechanisms such as adequacy decisions, the EU Standard Contractual Clauses, the UK International Data Transfer Agreement or UK Addendum, provider data-processing terms, transfer-risk assessments, and supplementary technical, contractual, or organisational measures where appropriate. Provider references are listed on our Service Providers And Subprocessors page.

Retention

We keep account and project data while your account is active or as needed to provide the service. Billing, security, support, and transaction records may be retained as required for accounting, tax, fraud prevention, dispute, and legal obligations. Server logs are kept for the period needed to secure and operate the service unless a longer period is required for an investigation or legal obligation. We maintain an internal retention schedule to review, delete, or anonymize personal information when it is no longer needed.

Mobile journeys, videos, and settings stay on your device until you delete them, clear the app’s data, or remove the app. Route backup files stay in the storage location you chose until you delete them there. Boba Globe cannot access or remotely erase these device or backup copies.

Your Privacy Rights And Choices

You can update profile information, delete saved projects, manage website billing through Stripe or store subscriptions through Apple or Google, and review our Billing Policy. To request deletion of your Boba Globe account data, open Account in the iOS or Android app and choose Request account deletion, use our website account deletion page, or email Boba Globe support at [email protected] from the email address on your account. Account deletion requests include deleting or anonymizing account profile data and saved project data unless retention is required for billing, fraud prevention, security, tax, legal, or dispute obligations.

Deletion requests are reviewed by our support team rather than completed instantly. We complete account deletion within 30 days of receiving your request, and email your account address to confirm completion. Submitting a request does not immediately delete data, sign you out, or cancel a subscription. A Boba Globe deletion request covers the Boba sign-in identity used on both the website and mobile apps, cloud content and complimentary access. Required financial records may be retained; device-local copies must be removed separately. More detail is on our Privacy Requests And Choices page.

We review deletion and erasure requests under applicable law. Where required, we delete or anonymize active account, project, and user-owned thumbnail information, assess whether affected service providers or recipients need notice, and explain any retained categories and reasons. Some retained records, backups, and provider systems may follow secure deletion, restoration-suppression, or provider-deletion cycles instead of immediate physical deletion.

Depending on where you live, including under the GDPR and UK GDPR, you may have rights to request access, correction, deletion, portability, restriction, objection, or withdrawal of consent. California residents may also have rights under the California Consumer Privacy Act (CCPA) to request notice of categories of personal information collected, used, disclosed, or retained, and to opt out of sale or sharing if those activities occur. We do not sell or share personal information for cross-context behavioral advertising.

For correction or completion requests, tell us what account, profile, subscription-status, or project information you believe is inaccurate or incomplete and the corrected value. We will review the request under applicable law, may ask you to update project content directly where self-service editing is available, and will explain the decision and any required appeal or complaint routes if we cannot make the requested change.

Where applicable law requires portability, we provide portable information in a structured, commonly used, machine-readable format after verification. If you ask us to transmit portable information directly to another service, we will review whether the transfer is technically feasible, lawful, and secure before doing so.

For subject access requests, where applicable law requires, we confirm whether we process your personal information, provide a copy of the personal information we can disclose, and include supplementary information about purposes, categories, recipients, retention, rights, complaint routes, sources, and transfer safeguards. We may ask you to clarify a broad or unclear request, and we may redact or withhold another person's information unless disclosure is legally allowed. We provide access responses through a concise, intelligible, and secure support path.

If you ask us to restrict processing, we will review whether restriction is available under applicable law, such as while we check contested accuracy, while an objection is pending, where processing is unlawful and you prefer restriction to deletion, or where you need information preserved for a legal claim. If restriction applies, we will limit active use of the affected information except where the law permits continued processing.

Where we rely on legitimate interests, you may object to processing based on your particular situation. We will review the objection under applicable law and explain whether we will stop, limit, or continue the processing because a permitted exception applies. Boba Globe does not currently use personal information for unrelated direct marketing; if that changes, you may object to direct marketing at any time and we will stop direct-marketing use as required by law.

Other U.S. state privacy laws may also provide rights to confirm processing, access, correct, delete, port, opt out of targeted advertising, opt out of sale, opt out of certain profiling, or appeal a denied privacy request where those rights apply. Boba Globe does not currently use personal information for targeted advertising or for profiling that produces legal or similarly significant effects.

If an applicable U.S. state privacy law gives you the right to appeal a denied request or complain to a state attorney general or privacy regulator after an appeal decision, our response will include the appeal result and any regulator complaint instructions required by that law.

You do not pay a fee to submit a privacy request. Where applicable law allows, if a request is manifestly unfounded, excessive, repetitive, or asks for extra copies, we may ask for clarification, refuse to act, or charge a reasonable administrative fee. If we refuse a request or charge a fee, we will explain the reason and include appeal or complaint routes where required.

You can withdraw optional editor preference storage consent at any time by disabling optional editor preference storage or using the clear-and-disable control on our Cookie Policy page, using the same control surface that enables it. Withdrawal applies going forward, does not affect processing based on consent before withdrawal, and does not disable storage required for authentication, checkout, billing, security, or saved-project features.

California residents may also have rights to correct inaccurate personal information, limit certain uses of sensitive personal information, use an authorized agent, and be free from unlawful discrimination for exercising privacy rights. Where applicable law requires us to honor Global Privacy Control or another legally recognized universal opt-out mechanism or opt-out preference signal, we treat the signal as an opt-out request and publish a machine-readable GPC support resource at /.well-known/gpc.json. Because Boba Globe does not sell personal information, share personal information for cross-context behavioral advertising, or use personal information for targeted advertising, those signals do not change our current sale, sharing, or targeted-advertising practices.

To exercise a privacy right, email [email protected]. We may ask you to verify your account email, or to provide proof of authorization for an agent, before completing the request. For authorized agent requests, we may also ask you to verify your own identity directly or confirm the agent's permission where applicable law allows. We respond within the timeframes required by applicable law, including GDPR/UK GDPR and CCPA timing plus other U.S. state privacy timing where those laws apply. If you are in the EEA, UK, or Switzerland, you may also lodge a complaint with your local data-protection authority.

Step-by-step request instructions are available on our Privacy Requests And Choices page.

Security

We use access controls, row-level database policies, HTTPS, encrypted storage of store purchase verification references, app-private storage for mobile sign-in sessions, and provider-managed security features. No internet service is perfectly secure, so you should only upload route and travel data you are comfortable processing through the service. Security questions and vulnerability reports can be submitted through our Security Policy.

Children

Boba Globe is a general-audience service and is not directed to children under 13. You must be at least 13 to use Boba Globe. If local law requires a higher age, parent or guardian consent, or another age-related condition for online services, you must meet that requirement before using Boba Globe.

We do not knowingly collect personal information from children under 13 or from anyone below the local age where required consent or permission is missing. If you believe a child provided personal information to Boba Globe, contact [email protected]. We will review the report and delete, disable, or otherwise handle the information as required by applicable law.

Parents and guardians can also use Apple, Google, and device parental controls to restrict app downloads and in-app purchases.

Automated Decisions

We do not make legal or similarly significant decisions about users using solely automated processing, and we do not use automated processing or AI to make employment, credit, housing, insurance, health-care, legal, or similarly significant decisions. Automated checks may enforce authentication, abuse prevention, plan limits, payment status, and feature access.

Changes To This Policy

We may update this policy as Boba Globe changes or legal requirements evolve. The date above shows when this policy was last updated. If we make material changes or plan to use personal information for a new purpose, we will update this policy and provide notice where required before starting the new processing.

Contact

Business mailing address: Something Better LLC, 380 Hamilton Ave #1393, Palo Alto, CA 94301, United States.

Questions about this policy can be sent to Boba Globe support at [email protected].