Boppn Privacy Policy

Effective date: November 5, 2026

Boppn LLC (“Boppn,” “we,” “us,” or “our”) operates the Boppn mobile application, website, events, and related services (collectively, the “Services”). This Privacy Policy explains what information we collect, how we use and disclose it, and the choices available to you.

1. Information We Collect

Information you provide

Depending on how you use Boppn, we may collect:

• Your first and last name;
• Your email address, telephone number, and date of birth;
• Your ticket and order details, such as what you bought, the amount paid, promo or referral codes, and refunds;
• Answers to registration questions an event organizer or Boppn asks during checkout;
• Your event registration, team assignment, and login or verification information;
• Photos, videos, captions, answers, and other content you submit during an event (“Submitted Media”);
• Messages or information you provide when contacting Boppn for support;
• Details you share when asking about hosting an event, such as your name, email, phone number, and company; and
• Marketing and communication preferences.

Stripe collects and processes your payment card details. Boppn does not store full card numbers.

An event organizer, ticket purchaser, team captain, or other participant may provide some registration information to us on your behalf.

Information collected automatically

When you use the Services, we may automatically collect:

• An assigned user or device identifier, and your IP address;
• Device type, operating system, application version, and basic technical information;
• App interactions, features used, event timestamps, and related usage information;
• Crash reports, performance information, and error logs; and
• Session-replay and diagnostic information used to understand technical issues and improve the Services.

Analytics and session replay

We use PostHog for product analytics, error diagnostics, and session replay, in both the app and the website. Session replay records a reconstruction of how you move through a screen or page, which can show what was on screen at the time.

This activity is not anonymous. In the app, PostHog receives your Boppn user ID, your event and team identifiers, and your team name, along with the screens you view, the actions you take, and your device and app details. Because that user ID belongs to your account, Boppn staff can connect your app activity to your name, phone number, email address, ticket, order, and team. For example, our staff tools show the app version, device, and last-active time for a ticket.

On the website, PostHog and Vercel Analytics record pages viewed and how you use them. If you ask about hosting an event, the name, email address, and phone number you enter are sent to PostHog so we can follow up on your inquiry. The website also stores any referral code in your browser so it can be applied to your purchase.

Precise location

Some tasks ask you to prove you are at a place. With your permission, the app uses your device's precise location while you are using it to show you on a map and check that you are close enough. When you claim one of these tasks, we save your coordinates, their accuracy, and the time with your submission, and event judges and staff can see them. We also record your distance from the location in our analytics. We do not collect your location in the background. You can turn off location access in your device settings, but you will not be able to claim location tasks.

Device photos, camera, and microphone access

With your permission, Boppn may access your device's camera, microphone, or photo library so that you can create or select media for a submission. You may manage these permissions through your device settings.

When you create a submission, a copy may remain in your device's photo library so that you can retry an upload if a network or technical error occurs. Media stored locally on your device is controlled through your device and photo-library settings.

2. How We Use Information

We may use personal information to:

• Register participants and authenticate accounts;
• Assign participants to teams and events;
• Operate, administer, score, and support events;
• Allow event judges to review and grade submissions;
• Display team and event information;
• Process and retrieve Submitted Media;
• Review, annotate, and edit Submitted Media to make recap videos for teams and events;
• Send login codes, event instructions, reminders, safety notices, and service-related communications;
• Provide customer and technical support;
• Detect misuse, protect accounts, and maintain the security of the Services;
• Diagnose crashes and technical problems;
• Analyze and improve Boppn's products, events, and Services;
• Maintain records and comply with legal obligations; and
• Send marketing communications when permitted by law and consistent with your communication preferences.

We do not use Submitted Media to train artificial-intelligence models.

3. Submitted Photos and Videos

How we review, annotate, and edit media

After an event, authorized Boppn personnel may download Submitted Media from our cloud storage to company computers and to Google Drive folders for that event. We may share those folders with the event organizer and with videographers or other partners working on the event.

People at Boppn review this media and may star, clip, caption, and add notes to it. We also use artificial-intelligence tools to help, including to transcribe speech, describe what appears in photos and videos, write captions and text, and assemble edits. These tools may send copies of your media, or low-resolution versions of it, along with task names, team names, and our notes, to the providers listed in Section 4. We use Kino, an AI video editor, to edit recap videos, and Kino works with AI agents such as Anthropic's Claude. We also use OpenAI to write narration from team names and task titles.

Finished recap videos may be shown to your team and other participants in the app, and may be given to the event organizer.

Private events

A “Private Event” is an event identified by Boppn or the event organizer as closed to a specific group of people, such as an event conducted for a school, employer, or other organization.

Submitted Media from a Private Event is used only to:

• Administer and operate the event;
• Review, verify, or grade submissions;
• Create recap videos and highlights for the event's teams, participants, and organizer;
• Promote Boppn, when the event organizer approves that use;
• Provide participant or technical support;
• Investigate suspected misuse or violations of event rules; and
• Maintain the security and functionality of the Services.

Private-event media may be viewed by authorized Boppn personnel, event judges, designated administrators of the event organizer, the partners described above, and the service providers listed in Section 4. Boppn does not sell Private Event submissions, and does not use, publish, or distribute them for advertising, marketing, public display, or other unrelated purposes unless the event organizer approves that use.

Designated administrators of the event organizer may be able to view and download event submissions after an event. If an organizer downloads or separately retains content, the organizer's handling of that content may be governed by its own privacy practices and agreements with participants.

Public events

A “Public Event” is an event identified as public during registration or event enrollment.

Boppn may use media submitted during a Public Event for promotional purposes when the participant has agreed to the media release in the Event Waiver or otherwise provided the required permission. Permitted uses may include Boppn's website, social-media accounts, advertisements, and promotional materials.

Participation in a Public Event does not require interaction with or recording of unrelated members of the public unless that requirement is expressly disclosed. Participants should not submit media prominently featuring another person without that person's permission.

Requests concerning promotional media may be submitted to events@justboppn.com. We will honor legally valid requests and reasonable removal requests when practicable. Removal may not affect copies previously published, distributed, reposted by others, or incorporated into materials that cannot reasonably be withdrawn.

Limited operational license

You retain ownership of your Submitted Media. You give Boppn a nonexclusive license to host, store, reproduce, display, transmit, and otherwise process Submitted Media as reasonably necessary to provide the Services, operate the applicable event, and fulfill the uses described in this Privacy Policy.

Any promotional use of Submitted Media is governed by the media release in the Event Waiver and, for Private Events, the event organizer's approval.

4. How We Disclose Information

We may disclose personal information to the following recipients:

Event organizers, judges, and administrators

We may provide registration information, team information, event participation data, scores, answers, and Submitted Media to authorized event judges and designated administrators of the applicable event organizer when reasonably necessary to administer the event.

Teammates

For events that include team communication or team assignments, your name, phone number, and email address may be shared with members of your assigned team, including teammates you did not know before the event.

This information is shared to facilitate event-related communication and collaboration. Participants receive notice of this sharing during registration.

Service providers

We use vendors that process information on our behalf, including:

• Google Firebase, for authentication, databases, and storage of Submitted Media;
• Supabase, for databases, login, and file storage;
• Amazon Web Services, for running our backend services and media jobs;
• Vercel, for hosting our website and website analytics;
• Stripe, for payments, invoices, and refunds;
• Twilio, through Supabase, for telephone-number verification and one-time passcodes;
• A text-messaging provider, for event reminders, updates, and permitted marketing messages;
• Zoho, for email delivery;
• Expo, for delivering push notifications;
• PostHog, for product analytics, error diagnostics, and session replay;
• Google Maps Platform, for maps and place search;
• Google Drive, for storing and sharing downloaded event media and planning files;
• Kino, for video editing, media analysis, and transcription;
• Anthropic (Claude), for AI assistance with reviewing, captioning, and editing media and event content;
• OpenAI, for generating narration text; and
• Calendly, for scheduling calls with people asking about hosting an event.

These providers may process information only as permitted by their agreements with Boppn and their applicable privacy terms.

Boppn shares telephone numbers and relevant message information with these messaging providers when necessary to send authentication, service-related, or permitted marketing messages. Boppn does not provide event photos or videos to them.

Legal, safety, and business purposes

We may disclose information when reasonably necessary to:

• Comply with applicable law, legal process, or a valid governmental request;
• Protect the rights, safety, property, or security of Boppn, our users, event organizers, or others;
• Detect or investigate fraud, misuse, security incidents, or violations of our agreements; or
• Complete or evaluate a merger, financing, acquisition, reorganization, sale of assets, or similar business transaction, subject to appropriate confidentiality protections.

No sale of personal information

Boppn does not sell personal information for money. Boppn does not disclose personal information for cross-context behavioral advertising.

5. Communications

Service-related communications

We may send communications necessary to provide the Services, including:

• One-time passcodes and security messages;
• Registration confirmations;
• Team assignments and event instructions;
• Event reminders, changes, and safety information; and
• Responses to customer-support requests.

Where permitted by law, receiving necessary service-related communications may be a condition of using features that depend on those communications.

Marketing communications

We send promotional text messages only when we have the consent required by applicable law. Consent to receive promotional text messages is not required to purchase a ticket or participate in an event.

Message frequency may vary, and message and data rates may apply. You may opt out of promotional text messages by replying STOP. You may opt out of promotional emails by using the unsubscribe link in the message.

Opting out of marketing does not prevent us from sending nonpromotional messages that are necessary to provide the Services or administer an event.

6. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain appropriate business and legal records, resolve disputes, enforce agreements, and satisfy legal obligations.

Unless a different period is disclosed:

• Private-event photos and videos, including copies downloaded for recap videos, are retained until you or the event organizer ask us to delete them, and for no more than 3 years after the event;
• Media used pursuant to a public-event media release may be retained for as long as reasonably necessary for the permitted use;
• Account and registration information is retained until you ask us to delete it, except for records we need to keep, such as order and tax records, which we anonymize;
• Support communications are retained for 365 days; and
• Analytics, crash, and diagnostic information is retained according to Boppn's settings and the retention practices of the applicable service provider.

Information may remain temporarily in encrypted backups or system logs until those records are overwritten or deleted through ordinary retention processes.

7. Your Choices and Rights

Depending on where you reside, you may have the right to request that we:

• Provide access to personal information associated with you;
• Correct inaccurate personal information;
• Delete certain personal information;
• Provide a portable copy of certain information;
• Restrict or object to certain processing; or
• Honor an appeal concerning a privacy request.

You may submit a request by emailing events@justboppn.com. We may need to verify your identity before completing a request. Certain information may be retained where permitted or required by law.

You may also:

• Manage camera, microphone, photo-library, location, and notification permissions through your device;
• Delete your login in the app's Settings. This does not delete your ticket information or Submitted Media. To delete those, email us at the address below;
• Reply STOP to opt out of promotional text messages;
• Use the unsubscribe link to opt out of promotional emails; and
• Contact us regarding the removal of media used for promotional purposes.

If Boppn processes information on behalf of a school, employer, or other event organizer, we may refer your request to that organizer when appropriate.

8. Children and Minors

The Services are not directed to children under 13, and Boppn does not knowingly collect personal information from children under 13 without legally sufficient authorization.

Some events, including college or school events, may include participants under 18. Where required, Boppn or the event organizer may obtain authorization from a parent or legal guardian or provide additional notices applicable to minor participants.

If you believe a child under 13 has provided personal information to Boppn without appropriate authorization, contact us at events@justboppn.com.

9. Data Security

Boppn uses reasonable administrative, technical, and organizational safeguards designed to protect personal information. These measures may include encryption during transmission, access controls, authentication, and secure cloud storage.

No method of transmission or storage is completely secure. Accordingly, we cannot guarantee that information will never be accessed, used, or disclosed improperly.

10. Storage and Processing in the United States

Boppn and its service providers may store and process information in the United States and other locations where they operate. Privacy laws in those locations may differ from the laws where you reside.

11. Third-Party Services and Links

The Services may contain links to, or embedded content from, third-party websites, venues, ticketing services, or platforms, such as Instagram posts and Calendly scheduling. Boppn does not control those third parties' privacy practices. Their handling of information is governed by their own policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. The updated policy will identify its effective date.

If we make a material change, we will provide notice through the app, website, email, or another reasonably appropriate method. Where legally required, we will obtain consent before applying a materially different use to information previously collected.

13. Contact Us

Questions, privacy requests, and concerns may be directed to:

Boppn LLC
Email: events@justboppn.com
Mailing address: 125 Christopher St New York, NY 10014