BoletoPrivacy Policy
Effective date: August 26, 2026
Boleto is a personal concert tracker — a place to keep the shows you have tickets to, share them with friends you choose, and look back on the ones you’ve been to. This page explains what data Boleto collects, why, and what you can do about it.
The plain summary: Boleto only collects what’s needed to make the app useful for you. Nothing is sold. Nothing is shared with advertisers. There are no third-party trackers.
What we collect
When you sign in
- Sign-in happens through Apple or Google only. We receive the email address your provider shares (with Sign in with Apple you can choose a private relay address) and, if shared, your name. Boleto never sees or stores a password.
Your profile
- Username and an optional avatar — a photo you choose, or a colored monogram we generate.
- Home city — used to surface shows near you. You type it yourself; we don’t read your device location. Approximate coordinates for the city are computed on your device (via Apple MapKit) and stored with it.
As you use the app
- Shows you track — artist, venue, date and times, ticket details (who holds the ticket, the ticketing platform, seat info if any), and any notes you write.
- Wishlist and followed artists — shows you want to go to, and artists you follow. Followed artists are always private to you.
- Ratings — the how-was-the-show answer you give after a show (a sentiment choice, never a number) and any note you attach.
- Friends and sharing — your friendships (always mutual), your per-show visibility choice (private, or visible to friends), likes and comments on friends’ activity, and ticket-holding links between you and friends (who holds whose ticket for a show).
- Concert photos — photos you attach to a past show. They’re stored in a private bucket and served through short-lived signed links; a friend can see them only when your settings for that show allow it.
- Notification preferences and, if you enable notifications, the device token needed to deliver them. Day-of reminders are scheduled locally on your device.
Calendar import (only if you use it)
- If you grant calendar access, Boleto scans your calendar on your device to suggest shows it recognizes. Only the shows you confirm are saved to your account. Your calendar’s contents are not uploaded or stored anywhere.
When you send feedback
- The text of your message, plus the app version, device model
(e.g.
iPhone17,1), and OS version — so reports can be matched to specific builds.
Diagnostics
- The app reports crashes, errors, and performance data to Sentry so we can find and fix problems. These reports carry an anonymous install identifier — not your name, email, or username — and never include your notes, photos, messages, or search text. Network logs in these reports are stripped to non-identifying parts.
On this website
- If you join the waitlist, we store your email address, your position in line, and how you found us (the link’s referral tags). We’ll use it to email you about access and launch — nothing else.
What we don’t collect
- Your device location — we only know the home city you typed.
- Your contacts, or your photo library beyond the photos you deliberately attach.
- Advertising identifiers. There are no ads, no ad networks, and no cross-site trackers — in the app or on this site. Because nothing tracks you across other apps or sites, a browser’s “Do Not Track” signal changes nothing here — there’s no tracking to turn off.
Who processes your data
Boleto runs on a small set of service providers, each used only for what it’s named for:
- Supabase — database, authentication, and photo storage.
- Apple / Google — sign-in.
- Sentry — crash and error reports (see Diagnostics above).
- Apple Push Notification service — notification delivery.
- Spotify and Ticketmaster — when you search for an artist or show, the search runs against their catalogs to return results. Searches aren’t used to build any advertising profile.
No data is ever sold, rented, or shared with advertisers.
When you tap through to a ticketing platform or another external site, what happens there is governed by that service’s own privacy policy, not this one.
Sharing between users
Boleto is friends-only. Nothing you add is public: only confirmed friends can see your activity, and only when your per-show setting allows it. Friendships are mutual — nobody can follow you without your acceptance. You can set any show to private, and you can remove a friend at any time.
How long we keep data
Your data is kept while your account exists. Deleting your account removes your account and content, including photos. Diagnostic reports and server logs are kept for a limited period and then age out. Waitlist emails are kept until launch outreach is done or you ask to be removed, whichever comes first.
Security
Data is encrypted in transit, photos live in a private bucket reachable only through short-lived signed links, and access to production systems is limited to the people who run Boleto. No system is perfectly secure and we can’t promise otherwise — but the app is built so that the sensitive paths (sign-in, photos, who-can-see-what) are enforced by the database itself, not just by the app’s good behavior.
Children
Boleto is not for children under 13, and we don’t knowingly collect their data. If we learn an account belongs to a child under 13, we’ll delete the account and its data.
Where Boleto operates
Boleto is operated from the United States, and data is stored and processed there. If you use Boleto from somewhere else, you’re sending your data to the U.S.
Your choices
- Visibility — every show has its own private / friends setting, changeable any time.
- Notifications — controllable in the app and in system settings.
- Delete your account — available in the app’s settings. Deletion removes your account and your content, including photos.
- Waitlist — to be removed from the waitlist, email us and we’ll delete your address.
Changes to this policy
If the policy changes, the new version is posted here with an updated effective date. Meaningful changes will be called out in the app or by email.
Contact
Questions about privacy or your data: getboleto@gmail.com