Last updated: 1 August 2026 · Applies to the Boba (Bocah Bahagia) Android app, package com.bocahbahagia.app
Boba is a chore and reward app used by one family at a time. This policy describes exactly what the app stores, why, and how to get rid of it. It is written to match what the app actually does — not a generic template.
Boba (Bocah Bahagia) is an independent Android app. For privacy questions, data access requests and deletion requests, contact bobaprodaps@gmail.com.
A parent signs in with Google Sign-In. We never see or store your Google password. From that sign-in we store:
Children do not have accounts. A child profile is created by a parent and contains only what the parent enters plus in-app progress:
No email address, phone number, contact list, location or advertising identifier is collected from a child — ever.
Only if a parent switches on “require a proof photo” for a chore. The child may then attach a photo from their gallery or camera. Photos are compressed on the device, uploaded to Google Cloud Storage, and shown to the parent for approval. They are deleted automatically 7 days after upload by a scheduled job. Boba never uploads a photo the child did not explicitly attach.
If you buy a Pro subscription, payment is handled entirely by Google Play. We never receive or store your card, bank or billing details. We store your family's subscription status — whether it is active, which plan, and when it expires — and a one-way hashed reference to the Google Play purchase, used to make sure one purchase unlocks one family.
| Purpose | Data used |
|---|---|
| Sign you in and keep you signed in | Google account identifier, name, email |
| Let both parents manage the same children | Family membership, roles, invite codes |
| Run chores, rewards, coins and the level journey | Family content, child profile progress |
| Let a child sign in on their own device | Pairing code, PIN hash |
| Notify a parent when a child finishes a chore | Push token, chosen language, notification records |
| Show a parent the proof of a finished chore | Proof photo (max 7 days) |
| Unlock Pro features for your family | Subscription status, hashed purchase reference |
We do not use your data for profiling, advertising, or automated decisions that affect you legally.
Boba runs on Google Firebase. Google LLC acts as our processor for
authentication, database storage, file storage and push delivery, and Google
Play processes subscription payments. Data is stored in Google Cloud in the
asia-southeast1 region.
We do not sell your data and we do not share it with advertisers, data brokers or analytics providers. We disclose data only where the law requires it.
| Data | Retention |
|---|---|
| Proof photos | Deleted automatically 7 days after upload |
| A deleted child profile | Their chores, redemptions, coin ledger, notifications and pairing entry are deleted with the profile |
| Your account and family | Kept while you use Boba; deleted on request — see below |
| Subscription records | Kept while the subscription is active, and afterwards only as long as needed for billing and refund handling |
Boba is designed to be set up and supervised by a parent. A child never creates an account, never provides an email address, and never signs in with an identity provider. Everything on a child profile is either typed in by their parent or generated by using the app.
Boba shows no advertising, uses no ad SDKs and does no personalised profiling, which is how we comply with children's privacy rules including the US Children's Online Privacy Protection Act (COPPA) and the child-specific provisions of the EU GDPR. A parent can view, correct or delete any child profile at any time from inside the app, and deleting a profile also disables that child's pairing code so their device can no longer sign in.
Nothing in the child experience sells anything. A subscription can only be started from a parent's own Google-authenticated account on the parent side of the app. The screens a child sees contain no price, no plan name, no purchase button, no link out to a store or website, and no message asking them to get an adult to buy anything. Where a feature is switched off for a family, the child is simply told it is not currently available and that a parent controls it.
You can ask us to give you a copy of your data, correct it, or delete it. Most of it you can already edit or delete yourself inside the app. For anything else, email bobaprodaps@gmail.com and we will respond within 30 days. Depending on where you live you may also have the right to object to processing, to restrict it, or to complain to your local data protection authority.
Full instructions, including exactly what is removed and what is kept, are on the Delete your account and data page.
One limitation we would rather state plainly than bury. A child's device deliberately has no account: it signs in with a pairing code and a PIN, which keeps us from having to collect an email address or any other identifier from a child. The trade-off is that the records a child's device needs to read — child profiles, chores and rewards — are not protected by a password on that device, so they should not be treated as private against a determined attacker. This is why those records deliberately hold as little as possible: a first name or nickname chosen by the parent, a cartoon avatar, and in-app progress. There is no email address, phone number, address, date of birth, photo of a child, location or advertising identifier anywhere in them, and PINs are only ever stored hashed. Treat a pairing code as a secret, and recreate a child profile if one leaks.
If this policy changes we will update the date at the top of this page. If a change materially affects how we use your data, we will also say so in the app.