Privacy Policy

Who's responsible

The data controller is Philippe Roualle, publisher of Boast (boast-app.com). For any question or request regarding your data, write to contact@boast-app.com.

What we collect

Your account. Your mobile number, which serves as your identifier and is used to receive your login code. Your first and last name, and your date of birth — solely to verify the minimum age requirement; it is never displayed. Optionally: an email address, a city, a description, a profile photo and your favourite sport.

Your activities. The matches and training sessions you log: sport, score, date, time, duration, club, participants, description and photos.

Your reactions. The smatchs you give and the comments you write on activities, including mentions of other players.

Your connections. Your circle on Boast, invitations you send or receive, the groups you create or belong to, the players you block and the clubs you choose to follow.

Your reports. If you report content or a player, we keep a record of the report and the decision taken — it is the audit trail of moderation. The reported player is never told who reported them.

Your contacts, if you import them. The numbers and names you choose to share from your phone, so you can find the partners who are already signed up and invite the rest. This import is optional and you can decline it without losing access to the app. These contacts are never shown to other players, nor used to suggest anything to them.

Your location, if you ask for it. When you tap "Nearby" while recording an activity, your approximate location is used to sort clubs we already know from nearest to farthest. It's only read while the app is open, it's never stored or shared with a third party, and declining this access costs you nothing but that sorting.

Your device, if you accept notifications. A technical identifier provided by Apple or Google that allows us to send you a notification. It tells us nothing about your location or how you use your phone.

The bare technical minimum. A session cookie to keep you signed in, and the verification codes sent by SMS or email, stored in encrypted form and valid for ten minutes.

Boast uses no advertising trackers, does no profiling and sells no data.

Who can see what

Your phone number is never shown to other users, under any circumstances.

Visibility is your call, activity by activity: public, limited to the participants' extended circle, or restricted to the participants alone. A match declined by an opponent is no longer visible to anyone.

Your first name, last name, photo, city and bio are visible to other players — that's how they recognise you.

Why we process it

This data is used to run the service you signed up for: logging you in, displaying your activities and statistics, connecting you to your circle, and notifying you of anything that concerns you. The legal basis is the performance of the contract between us.

Contact import and notifications rely on your consent, which you can withdraw at any time — from your phone's settings for notifications, or from Settings → Notifications for emails and texts.

We write to you a few times a year to announce what's changing in Boast: the legal basis is our legitimate interest in keeping you informed about the service you use. Every email carries an unsubscribe link, and you can also turn these messages off from Settings → Notifications — new features will still be visible in the app.

Who we entrust them to

We use technical service providers solely to keep the service running. None of them is allowed to use your data for its own purposes.

• •Brevo — sending SMS and emails (France)
• •Bunny — photo storage and delivery, plus daily backup copy (Germany)
• •Google Places — address search when you create a club; only the text you type is sent
• •Apple — delivering notifications to your iPhone
• •Google — delivering notifications to your Android phone
• •Scaleway — server, database and hourly backup hosting (France)

Where your data lives

The server and the database are in France, in Paris. Traffic between the app, the server and the database is encrypted (HTTPS and TLS): no one can read it along the way.

A backup is taken every hour at this host, in France. An additional copy is deposited each night with a second host, in Germany — so that a major incident at the first one does not take your data with it. It never leaves the European Union.

How long we keep it

Your account data and activities are kept for as long as your account exists. When you delete it, they are erased from the app immediately; any backups that still hold a copy are destroyed within thirty days at the latest.

Verification codes expire after ten minutes. A device identifier is deleted as soon as you turn off notifications or uninstall the app.

Your rights

You can view and correct most of your data directly in the app, from Settings. Beyond that, European regulation gives you the right to access your data, to have it rectified or erased, to request a portable copy, to restrict its processing and to object to it.

Write to contact@boast-app.com: we reply within a month. If our answer doesn't satisfy you, you can file a complaint with the CNIL (cnil.fr).

Minors

Boast is open from 13 years old. Your date of birth is requested at sign-up; under 13, the account is refused.

Between the ages of 13 and 15 — the French threshold for digital consent — signing up requires the approval of a parent or legal guardian, declared when the account is created. Parents: if your child signed up without your approval, write to contact@boast-app.com and we'll delete the account.

A player without the app can have their games recorded by someone who keeps their profile — usually a parent. Such a profile is not an account: we collect only the first name, the last name and, if the holder adds one, a photo. No date of birth, no phone number, no email address, and no message is ever sent to them. The holder can delete it at any time from the settings; deleting it erases the profile and the games attached to it.

If you notice that an account has been created by a child under 13, report it from their profile and we'll delete it.

Changes

If this policy changes substantially, we'll let you know in the app before the change takes effect. The date at the top of this page shows the most recent revision.