Privacy policy

Effective November 6, 2026

BoonMe is for asking the people you lean on for a hand, and giving one back. This policy explains what the BoonMe iPhone app, this website (boonme.app) and our support site (support.boonme.app) collect, who sees it, where it goes, how long we keep it, and what you can do about it. BoonMe is run by Matthew Weghorst. If anything here is unclear, write to us at info@boonme.app.

The short version

• We collect what BoonMe needs to work, and nothing more.
• Your list of Boonmates is yours: only you see who’s in it. We never collect phone numbers, and the app never sends a message for you.
• You choose who sees each boon. People two steps away, at Boonmates², never see where or when it is.
• BoonMe doesn’t read your calendars.
• BoonMe has no sponsors or in-app purchases. There is nothing to buy, and no payment information reaches us.
• We don’t show ads, sell your information, or use analytics or advertising trackers, in the app or on our websites. The app does report crashes, so we can fix them; the section on crash reports says exactly what is sent.
• Feedback you send from the app reaches us only when you tap Send, and you see the screenshot first.
• The app’s smart suggestions run on your phone, with Apple’s on-device model, and what it reads stays on your phone.
• A few service providers run parts of BoonMe for us. They are listed below, with what each one handles.
• BoonMe is for people 13 and older.
• You can delete your account in the app at any time, and ask us for a copy of your information or to correct or delete it.

What we collect, and why

Your sign-in

Signing in is handled by Clerk. You sign in with Sign in with Apple, or with a one-time code sent to your email address. Clerk keeps your email address, your name if you give one, and the identifiers it needs to sign you in. If you use Sign in with Apple and choose to hide your email, Clerk receives Apple’s private relay address instead. In our own database your account is the Clerk account ID and the name you use in BoonMe; we don’t store your email address there.

Your name and your figure

We keep the name you use in BoonMe and your figure from Build your BoonMe, which is made from preset parts: a body colour, a face colour and one thing. People who can see your boons see your name and your figure beside them.

Your Boonmates

Your Boonmates are your own list of the people you swap boons with. Only you see who’s in it. For each person we keep the name you chose for them and, if they use BoonMe, which account they are.

When you add someone from your contacts, BoonMe first explains what happens, and Apple’s contact picker opens only if you choose it. Only the first name you confirm leaves your phone, with a last initial if you keep one. Their phone numbers, email addresses and the rest of your contacts stay on your phone. The address you pick is kept in your phone’s secure storage and used only to address a message you send yourself. We don’t use your contacts or email addresses to look for BoonMe accounts. Earlier versions of BoonMe could look up one email address you chose from your contacts; that sent the address to our service and to Clerk, and we didn’t store it. Someone using an earlier version who has your email address can find your BoonMe account that way, and sees your name and your figure before you are Boonmates.

You can also show someone your BoonMe code, a link or QR code that adds you to each other’s Boonmates. We keep a one-way code for it, and it stops working after 30 days. Anyone signed in who opens it sees your name and your figure.

Boons, and who sees them

A boon is an ask, an offer, or something you lend. For each one we keep what you wrote (its title and description), when it is, where it is if you add a place or a link, how many people can take it, who it names, its card design, and who took it and whether it got done. When a boon is confirmed, karma moves between the two of you, and we keep that record. When you lend something, we also keep who borrowed it, the days they picked, when they said it’s returned and when the lender confirmed it. If nobody has said it’s returned by the morning after its last day, the borrower gets one reminder.

Each boon has a setting for who can see it:

• Just us: you and the people the boon names.
• Boonmates: also the people who are Boonmates with you both ways. A new boon starts here.
• Boonmates² (Boonmates squared): also their Boonmates, people two steps away from you who may not know you. They see the boon’s title, its card, the names and figures of the people it’s between, and how many places it has. They never see where it is, when it is, or its description.

Seeing a boon never lets someone take it. A boon names the people who can take it, or is for all your Boonmates, and then any of your Boonmates can. Someone you’ve blocked, or who has blocked you, never sees your boons.

If you type a link as a boon’s place, our service fetches that page to show its title and picture on the card, as you type and even if you don’t send the boon. It keeps the title, the site’s name, when it fetched it and a copy of the picture. The site, and the site its picture comes from, see a request from our service, not from your phone. The picture is kept as a card-size copy at a web address that can’t be guessed and names no one; anyone who has that address can see it.

When you type a place under Where, the app sends what you type from your phone to Apple Maps to suggest places, under Apple’s own privacy policy. Our service sees only the place you pick, its name and address, when you save the boon.

Calendars

BoonMe doesn’t read your calendars. When you add a boon to your calendar, the app opens your phone’s own add-event screen; someone you named gets a calendar file from their page. What you do with it is up to you and your calendar app.

People without the app

When you make a boon for someone who doesn’t have the app, they get their own link, and can answer it on a page of boonme.app, with no account. We keep the name you chose for them, what they took and whether it got done, and a one-way code for their link. We never ask for or keep their phone number or email address.

Their page shows the boon, when and where it is, your name, and their own give and take with you. We note when their link was first opened and last used, and you see whether they’ve opened it and whether they took the boon or said they can’t this time. A link is that person’s own: anyone who has it can open their page. A link that is never opened stops working after 30 days. They can add a boon to their own calendar as a file; the file includes their link, so anyone who can see that event in their calendar can open it.

The page itself sets no cookie. If they decide to get the app and keep what they took, a sign-in cookie holds their link for up to an hour while they sign in, and what they took moves to their new account. To stop abuse, the pages count requests from each internet address for one hour, using a keyed one-way code of the address that is never kept with anything someone did.

Reports and blocks

You can report a boon or a person, and block someone. A report keeps who made it, what or who it’s about, the reason you chose and anything you wrote. The person you report isn’t told. The people who run BoonMe read reports, and may hide a boon or suspend an account. A block keeps who blocked whom and the name you knew them by, so you can unblock them later; the person you block isn’t told.

Messages

The app can write a message with someone’s link, and the iMessage app can put a boon into a conversation. Every message is written on your phone and sent only when you tap Send; the app never sends one for you. No name, phone number or email address of anyone in a conversation reaches our servers.

Notifications

If you turn on notifications, we store your phone’s push token with your account, together with a random ID for the installation, and send notifications through Expo’s push service, which hands them to Apple’s Push Notification service to deliver. A notification includes the name of the person who acted and the boon’s title, never its description or place, with the IDs the app needs to open the right screen. You can turn notifications off in the app.

App updates

Each time the app opens, it checks Expo’s update service for a newer version and downloads it if there is one. Expo sees your IP address and a random ID for the installation when it answers.

Crash reports

The app reports problems to Sentry. When it crashes, freezes for a while, or is stopped by the system, it sends a report with the error, where in the app it happened, what the app was doing just before, and details of the device, operating system and app version. Reports carry a random ID for the installation, but no account, email or name. We don’t use Sentry’s performance tracing or session replay, and reports carry neither the app’s log messages nor records of the network requests it made.

When the app crashes or can’t start, it also sends our own service a copy of the error message, where in the code it happened, and when. That copy is stored in our database, and its first lines appear in our hosting provider’s logs, which it keeps for a short time. It carries no account. To stop anyone flooding that service, we count the reports that arrive from each address per hour, using a keyed one-way code of the address.

Feedback you send

You can tell us what you think from anywhere in the app: shake your phone, or choose Send feedback in the menu. The app takes a screenshot of BoonMe’s own screen, never another app’s, and shows it at the top of the feedback sheet. Choose Don’t include and it’s left out. The sheet asks a few multiple-choice questions about what you were doing, and has a box for anything else you want to say. Nothing is sent until you tap Send.

When you tap Send, we receive the screenshot if you kept it, the questions you were asked and your answers, what you wrote, the app’s version, and which kind of screen you were on (for example, a boon’s page). It’s kept with your account. A screenshot shows what was on your screen, which can include the names, figures and boons of other people; look before you send, and leave it out if you’d rather. The people who run BoonMe read feedback, to make BoonMe better. It isn’t shown to anyone else or used for advertising.

On-device intelligence

A few things in the app use Apple’s on-device model, part of Apple Intelligence, which runs on your phone: writing the questions in the feedback sheet from what’s on your screen, filling in a boon from a photo you choose, and suggesting the words of a message. What the model reads, and what it writes, stays on your phone; neither we nor any AI company receive it. Only what you then send leaves your phone: the boon you post, the feedback you send (including the questions it asked), or the message you send yourself in Messages. On phones without Apple Intelligence these features are simpler, or aren’t offered.

AI assistants

BoonMe doesn’t offer AI assistant connections.

Getting the app

You get BoonMe from the App Store. We don’t send marketing email.

Some people help us try new versions through Apple’s TestFlight. For TestFlight, your name and email address go to Apple, through App Store Connect, so that Apple can send you an invitation. TestFlight is run by Apple under its own privacy policy; when you join, Apple shares details with us such as your email address and name, the builds you install, crash reports, and any feedback or screenshots you choose to send.

Our websites

boonme.app uses no analytics or tracking scripts. The only cookies are Clerk’s, on the pages where you request an invitation or sign in to keep what you took from a link, and the short one described under People without the app. Those sign-in forms use Clerk and, to keep out bots, may run Cloudflare’s check and Clerk’s fraud protection, which see your IP address and browser details. Our support site has no sign-in and uses no analytics or tracking scripts either. Like any website, ours are delivered by a host, Vercel, whose servers process your IP address and browser details to deliver pages and keep the service secure.

Who else handles your information

We use these service providers to run BoonMe. They handle information on our behalf, only to provide their service to us, and they may not use it for anything else:

• Clerk — sign-in and accounts, in the app and on this website.
• Svix — delivers Clerk’s account updates to our service.
• Vercel — hosts our service and our websites.
• Neon — hosts the database that stores BoonMe’s information.
• Expo — relays push notifications and delivers app updates.
• Apple — Sign in with Apple, push notification delivery, place suggestions from Apple Maps, the App Store, TestFlight and App Store Connect, and the info@boonme.app mailbox (iCloud Mail).
• Sentry — crash reports from the app.
• Cloudflare — the bot check on sign-in pages, through Clerk.

We also use Claude, an AI assistant made by Anthropic, to build and run BoonMe. When it helps us look into a problem, read feedback or check a report, what it reads from BoonMe, such as a boon, an account record or a crash report, goes to Anthropic’s service. Model training is turned off for our Anthropic account, and Anthropic handles that information under its own terms and privacy policy.

We don’t sell or rent your information to anyone, we don’t share it for advertising, and we don’t let anyone else collect it through the app or our websites. Besides these providers and Anthropic, the only others who see what you put into BoonMe are the people each boon’s setting lets see it, anyone you send a link to, someone who finds your account by your email address (as described above), and the sites whose links you add.

Identifiers, and what they are for

The app uses a few identifiers that are not your name: your Clerk account ID, to sign you in; random installation IDs for push notifications, app updates and the iMessage app, to reach the right phone; a random installation ID in crash reports; a one-way code for each link held by someone without the app, for each shared link, and for your BoonMe code. We use them for signing in, delivery, keeping the service running and secure, and fixing crashes, and for nothing else: never to build a profile, to advertise, or to track you across other apps or sites.

How long we keep it, and deleting it

• Your account, your name, your figure and your Boonmates: until you delete your account.
• Boons: a boon disappears from the app when whoever made it deletes it, but we keep its record, including its words, until that account is deleted. A boon someone is holding can be cancelled but not deleted, and stays as the record of what happened; if one of you deletes your account, that person’s words and name are taken off it.
• Someone without the app: the name you chose for them and what they took, for as long as those boons are kept, or until they ask us to delete it. A link nobody opened stops working after 30 days.
• Reports and blocks: until the account that made them, or the one they’re about, is deleted. When the people who run BoonMe act on a report, we keep a record of what they did.
• Feedback: screenshots for 90 days, and the rest of what you sent for one year, or until you delete your account, whichever comes first.
• Crash reports: Sentry keeps them for our plan’s retention period, at most 90 days. Our own copies aren’t deleted automatically yet; ask us and we’ll remove them.
• Titles and card-size pictures fetched from links aren’t deleted automatically yet; ask us and we’ll remove them.
• Records that have stopped working, such as expired codes, signed-out phones and notifications already sent, aren’t deleted automatically yet; ask us and we’ll remove them.
• Our database host keeps a restore history for at most 30 days, so what you delete can stay in it until that time runs out.

Deleting your account. In the app, open the menu (your figure, at the top left), choose Account, then Delete my account; it’s also on the screen you see while you’re on the list. Deleting removes your sign-in, your name, your figure, your Boonmates, your BoonMe code, the words of what you wrote, anything kept from earlier versions on your plan or from your calendars, your blocks and reports, the feedback you sent, and your phones’ notification registrations. A boon someone already took from you, or gave you, stays with them as a record that it happened, without your words or your name, and karma that moved to others stays with them. If the app can’t delete your account, or if you’d rather, email info@boonme.app from the address you sign in with and we’ll delete it within 30 days.

People under 13

BoonMe is for people 13 and older, and we don’t knowingly collect information from anyone younger. If you think someone under 13 has an account, write to info@boonme.app and we’ll delete it and what it holds, or they can delete it themselves: menu, then Account, then Delete my account.

Security

Your information travels encrypted between the app, our websites and our providers, and is stored by providers who encrypt it at rest. Access to the database and to our providers’ dashboards is limited to the people who run BoonMe. If there’s a breach that affects you, we’ll tell you.

Your choices

• Change your name and your figure, in the app.
• Choose who can see each boon: Just us, Boonmates or Boonmates².
• Remove someone from your Boonmates, or block them.
• Leave the screenshot out of feedback, or don’t send feedback at all.
• Turn notifications off, in the app or in your phone’s Settings.
• Delete your account, in the app: menu, then Account, then Delete my account.
• Ask us for a copy of your information, or to correct or delete it, at info@boonme.app.

Changes to this policy

If we change this policy, we’ll update this page and the date at the top. If a change affects how we use information you’ve already given us, we’ll tell you in the app or by email first.

Contact

BoonMe is run by Matthew Weghorst.
Email: info@boonme.app
Mail: 6210 Wilshire Blvd Ste 200 PMB 578, Los Angeles, CA 90048
Phone: (818) 574-3018