Privacy policy

Last updated October 14, 2026. Applies to the Bored Room iPad app and to boredroom.space.

Bored Room does not collect, store, transmit, or sell any personal data. There is no Bored Room server. The app runs entirely on your iPad and talks only to Google.

What the app does with your data

The app reads the room's calendar in one of two ways, both chosen by you. With a service account, you load a key file your administrator created; the iPad uses it to read only the calendars your administrator shared with that account, and the key never leaves the iPad. With Google sign-in, the app asks for permission to read the room's calendar and optionally to create events so the room can be booked from the iPad; administrators also grant read access to the organization's room list, used only to show the list during setup.

Calendar data is fetched from Google's servers by the iPad and displayed on the iPad. It is not sent anywhere else. It is not written to disk beyond iPadOS's normal caching. It is refreshed every minute and replaced.

Your credential, whether a service account key or a Google sign-in token, is stored in the iPad's keychain, protected by the device. It is used only to talk to Google. Removing it in the app deletes it from the iPad; a sign-in token is also revoked with Google.

What stays on the iPad

• The room name, chosen calendar, theme, font, and display preferences.
• A background photo, if you chose one. The app keeps a resized copy in its own storage.
• A hashed copy of your settings PIN.

Deleting the app deletes all of it, except credentials in the keychain, which are cleared when you remove them in the app. A Google sign-in can also be revoked at myaccount.google.com/permissions.

What we don't do

• No analytics or usage tracking of any kind.
• No crash reporting services.
• No advertising, no advertising identifiers.
• No third-party SDKs. The app contains only our code and Apple's frameworks.
• No network connections except to Google's OAuth and Calendar APIs.
• No logging of meeting titles, attendees, or any calendar content, on the device or elsewhere.

What Apple may tell us

If you have opted in to sharing analytics with developers in iPadOS settings, Apple provides us with aggregate, anonymous statistics such as device model, OS version, and country. We cannot see individual devices or users. We use this to decide which iPads and OS versions to support. You can turn this off under Settings › Privacy & Security › Analytics & Improvements.

Google API Services

Bored Room's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained through Google APIs is used only to display and, when you choose, book the selected room's calendar on the iPad. It is never transferred to others, used for advertising, or read by humans.

This website

boredroom.space is a static site. It sets no cookies and runs no analytics. If you email us, we keep the email so we can reply.

Managed deployments

If your organization deploys Bored Room through an MDM, the organization may push settings (service account key, room name, calendar, PIN, theme) to the iPad. Those settings are handled by your organization's MDM under its own privacy terms; Bored Room only reads them from the device.

Children

Bored Room is a business tool and is not directed at children.

Changes

If this policy changes, the date at the top changes and the previous version is kept in the app's public source history. We will not change the central promise: no backend, no data collection.

Contact

The Bored Room · hello@boredroom.space