Back to Boon
Legal

Privacy Policy

Last updated: July 12, 2026 · Effective July 12, 2026

1. Who We Are

Boon is a product of Brainy Circles OÜ, a company registered in the Republic of Estonia (Tallinn). This policy covers both boon.ink (the public site and early-access waitlist) and app.boon.ink (the Boon product itself, for users whose seat has opened). Brainy Circles OÜ is the data controller for the personal data described below.

2. Information We Collect

We collect the following categories of personal data:

  • Waitlist information: the email address you submit on boon.ink to join the early-access list, and which page or campaign referred the signup.
  • Account information: once your seat opens on app.boon.ink, the email address and password you register with (your password is stored only as a salted hash, never in plain text), and the authentication tokens issued to your browser to keep you signed in.
  • Product content: the briefs and messages you send to Boon (for example, "friendly fintech logo, approachable but credible"), Boon's replies, and the fonts, pairings, and collections you save.
  • Usage data: standard technical data collected by our hosting providers, such as IP address, browser and device type, pages visited, and request timestamps.

We do not currently collect payment information. Boon does not charge for access as of the effective date above; if that changes, this policy will be updated before any billing data is collected.

3. How We Use Your Information

  • To operate the waitlist, including inviting seats in waves and sending the founding-list welcome email.
  • To create and secure your app.boon.ink account and keep you signed in.
  • To generate font suggestions, pairings, and licensing information in response to your briefs.
  • To save and sync your collections, saved pairings, and taste preferences across sessions.
  • To improve Boon's suggestion quality, using deidentified or aggregated usage patterns.
  • To send transactional email (welcome, account, and product notices) via Resend.
  • To secure the service, prevent abuse, and enforce our Terms of Service.

4. AI Processing

When you chat with Boon, the text you type is sent to a large language model to generate the natural-language reply, either Anthropic's Claude models (served through Amazon Web Services Bedrock, hosted in the EU) or, as a fallback, xAI's Grok. The underlying font search, ranking, and pairing logic is Brainy's own first-party model, run on our own infrastructure, not a third-party AI API.

We do not permit Anthropic or xAI to use your conversations to train their models. We may use deidentified, aggregated signals from how briefs map to saved or rejected fonts to improve Boon's own first-party ranking model over time.

5. Legal Basis for Processing (GDPR)

We process your data based on:

  • Contract: to run the waitlist and to provide the app.boon.ink product you signed up for.
  • Consent: where you have given it, such as the waitlist welcome email.
  • Legitimate interest: service security, fraud and abuse prevention, and improving Boon's suggestions.
  • Legal obligation: retention of accounting and tax records under Estonian and EU law.

6. Cookies and Local Storage

app.boon.ink stores your authentication tokens in your browser so you stay signed in. The site loads webfont files from Google Fonts, which receives your browser's IP address when a page loads. We do not run advertising trackers or analytics cookies at this time.

7. Data Retention

  • Waitlist entries are kept until you unsubscribe, request deletion, or your seat is issued and you register an account.
  • Account, product, and collection data is retained while your account is active.
  • Chat history is retained to power your saved fonts and preferences, and is deleted with your account.
  • You may request deletion of your data at any time; verified requests are actioned within 30 days, except where we must keep records by law (for example, billing and tax records).

8. Your Rights

Under GDPR and applicable law, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request deletion of your data ("right to be forgotten").
  • Object to or restrict processing.
  • Receive a portable export of your data.
  • Withdraw consent at any time (for the waitlist, use the one-click unsubscribe link in any email, or write to us).
  • Lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

To exercise any of these rights, email ron@brainycircles.com from the address associated with your waitlist entry or account.

9. Sub-Processors

We share data with the following categories of providers to operate Boon:

  • Vercel (USA): hosting for boon.ink and app.boon.ink.
  • Amazon Web Services (EU, Frankfurt): application servers, database, and Bedrock AI inference.
  • xAI (USA): fallback conversational AI processing.
  • Resend (USA): waitlist and transactional email delivery.
  • Google (Google Fonts, USA): delivery of webfont files used on the site.

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

10. International Transfers

Brainy Circles OÜ is based in the EU. Some of our service providers (Vercel, xAI, Resend, Google) are US companies, and data may be processed outside the EU/EEA as a result. These transfers are protected by Standard Contractual Clauses or equivalent safeguards, and, where applicable, by EU-US Data Privacy Framework certification.

11. Security

We use encryption in transit (TLS), encryption at rest at our cloud providers, salted password hashing, and scoped access controls to protect your data.

12. Children

Boon is not intended for anyone under 16. We do not knowingly collect data from children under 16. If you believe a child has joined the waitlist or created an account, contact us at ron@brainycircles.com and we will delete the associated data.

13. Changes to This Policy

We may update this policy as Boon changes. Material changes will be communicated through the site or by email at least 14 days before they take effect. Continued use after the effective date constitutes acceptance.

14. Contact

For privacy questions, email ron@brainycircles.com.

Brainy Circles OÜ
Tallinn, Estonia