Privacy Policy

• Account details. Your email address and, if you sign in with Google, your name and profile details Google shares with us. If you sign up with a password, it is handled by Firebase Authentication and stored hashed; we never see it.
• Your projects. The names of your projects, the messages you send to the builder, the replies, and the website code generated for you. On paid plans, images you attach to a message are stored and served at a public, unguessable web address so your website can show them.
• Reports. If you report a problem with something the AI made, what you wrote, plus a copy of that project's website and recent chat so we can review it.
• Notification token. If you use our Android app, the token Google gives your phone for push notifications, so we can tell you when your website has finished building. It is removed when you sign out or delete your account.
• Usage records. For every AI request: the time, the model used, the number of tokens, the cost, and whether it succeeded, linked to your account ID. This is how we apply plan limits and work out what a request costs. It does not include the text of your messages.
• Plan and allowance. Which plan you are on and how much of your free allowance you have used. If you subscribe in our Android app, Google Play handles the payment and we never see your card details; we receive an identifier for your purchase and its status (for example when it renews or ends) so we can give you the plan you paid for.
• Technical and analytics data. Our website uses Google Analytics for Firebase, which collects things like pages visited, device and browser type, and approximate location, using identifiers stored in your browser. Our Android app uses Google Analytics and Firebase Crashlytics, which send usage events and, if the app crashes, a crash report (the error, device model, Android version and an app installation identifier). Our servers also keep ordinary logs such as IP address and errors.

• To create your account, sign you in, and run the builder and your projects.
• To generate websites: your messages, your chat history and your current website are sent to an AI model.
• To enforce free and paid plan limits, and to measure and pay for the AI costs of the service.
• To prevent abuse, including stopping the free allowance being reset by deleting and re-creating accounts.
• To understand how the service is used, keep it secure, fix problems, and answer your messages.

We do not sell your personal information. We use these providers to run the service:

• Google (Firebase and Google Cloud). Hosting, sign-in, our database, file storage, analytics and crash reports.
• Google (Gemini API). Your messages, chat history and current website code are sent to Google's Gemini models to generate your website. Google processes this under its own API terms and privacy policy.

If we add other AI providers, we will name them here. We may also disclose information where the law requires it, or to protect our users and service.

Websites built in the playground are private to your account. They are shown to you in a preview and are not published anywhere unless you choose to publish one. When you publish a website we copy its current version to a public web address (endingboredom.com/s/…) that anyone with the link can open, without signing in. It stays online until you take it offline or delete your account, and later changes are not published until you publish again. Please don't put other people's personal information or anything confidential into your messages or websites.

• Your account, projects and chats are kept until you delete them or your account.
• Usage records and your free-allowance record are kept after an account is deleted, as explained below.
• Server logs and analytics data are kept for a limited period set by our providers.

You can delete your account yourself, any time, at endingboredom.com/profile (sign in, then choose "Delete account"). This works the same whether you use the website or the Android app. Deleting your account permanently removes your sign-in, your email and name from our systems, your projects, your chats and your generated websites.

What we keep after you delete your account, and why:

• Usage records (time, model, tokens and cost), tied only to a random account ID with no name or email, so we can account for what the service has cost us.
• A free-allowance record. A one-way hash of your email (which can't be turned back into your email) and the number of free projects used. If you sign up again with the same email, your free allowance continues where it left off rather than resetting. This is to prevent abuse of the free plan.

You can also download a copy of your personal data (your account details, projects and chats) from your profile before you delete it. If you can't sign in, contact us and we'll help.

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict how we use it, and to complain to your local data protection authority. You can access, export and delete your data yourself from your profile; for anything else, contact us using the details below.

Our providers may process data in countries other than your own, including the United States. We rely on our providers' safeguards for international transfers.

EndingBoredom is not directed at children under 13, and you must be at least 16 to create an account where that is the age of digital consent in your country. If you believe a child has given us personal information, contact us and we will delete it.

We protect your data with the security of our providers, encrypted connections, and access controls so that project data can only be read through our servers by the account that owns it. No system is perfectly secure, so we can't guarantee absolute security.

We may update this policy. When we do, we'll change the date at the top, and for significant changes we will tell you in the product or by email.

Questions or requests about your privacy? Reach us through our contact page.