Who we are
Boundly is made by Infinite Future (“we”, “us”). If you have any question about this policy or your data, contact us at support@infinitefuture.xyz.
Screenshots and photos
When you run a check, you choose screenshots or photos of your kid's Roblox Parental Controls (for example, the Top games or Blocked games list, which Roblox may call “experiences”). Here is what happens to them:
- On your phone: images are cropped, downscaled, and stripped of location and other EXIF metadata before they leave your device.
- In transit: they are sent over an encrypted HTTPS connection to Boundly's server.
- Analysis: our server uses an AI model (Anthropic's Claude) to read the game names shown in the image. Images are sent to Anthropic only for this purpose.
- Deletion: images are deleted immediately after processing. We never store them.
- Your kid's details: if a username, display name, avatar, or other personal detail is visible in an image, we ignore it and never store it. We only extract game names.
Your kid's profile
To personalize results, the app sends our server only three things: your kid's age band (for example, 8–10), the concerns you selected (for example, strangers or horror), and your strictness setting. Your kid's nickname and your answers about “what's happened so far” stay on your device and are never sent to us.
Anonymous install ID and app verification
- The app creates a random install ID the first time it runs. It is not linked to your name, email, Apple ID, or any other identity. We use it to rate-limit requests, return the results of your own recent checks, and count anonymous events.
- We use Apple's App Attest (part of DeviceCheck) to confirm requests come from a genuine copy of the Boundly app. This gives us a cryptographic key for your install, not personal information.
Anonymous analytics
We count a small set of app events so we know whether Boundly is working for parents. These are tied only to the anonymous install ID:
- onboarding step reached
- check completed
- paywall shown
- trial started
- subscribed
- block queue completed
- weekly check returned
We do not use third-party analytics, advertising, or tracking SDKs, and we do not track you across other apps or websites.
Check results and game information
A check result contains the games identified (by their public Roblox game IDs) and our verdicts. Game details such as names, creators, and thumbnails come from public Roblox endpoints. Results are kept for 24 hours so the app can reopen them (for example, right after you subscribe), then deleted.
Pro alerts
If you subscribe to Boundly Pro and allow notifications, we can alert you when a game your kid played gets flagged by other parents. To do this we store your device's push notification token, your anonymous install ID, and the public Roblox game IDs from your past checks. Nothing else. Notifications are delivered through Apple Push Notification service.
Feedback and reports
If you tap “Wrong?” or report a game, we receive what you submit: the game, your feedback type, an optional note you write, your kid's age band, and the related check. Please don't include personal details in notes. We use feedback to improve verdicts for all parents.
Purchases
Subscriptions are handled entirely by Apple. We never see your payment details. We receive signed transaction information from Apple and from the app so we can verify that your Boundly Pro subscription is active.
What we don't do
- No accounts, and we never ask for your or your kid's Roblox password.
- No advertising, no ad SDKs, no cross-app tracking.
- We never sell your data or share it for advertising.
How long we keep data
| Data | Kept for |
|---|---|
| Screenshots and photos | Not stored — deleted immediately after processing |
| Check results (game IDs and verdicts) | 24 hours |
| Past-check game IDs and push token (Pro alerts) | While your subscription is active, plus 30 days |
| Analytics event counts | Aggregated into anonymous totals |
| Feedback and reports | As long as needed to improve verdicts; delete on request |
Service providers
We rely on a few providers to run Boundly. Each processes data only to provide its service to us:
- Vercel — hosting for our server and this website
- Neon — database
- Anthropic — AI analysis of screenshots to read game names
- Apple — in-app purchases, App Attest, and push notifications
Children
Boundly is an app for parents and guardians. It is not directed at children, and we do not knowingly collect personal information from children. If you believe a child's personal information has reached us, contact support@infinitefuture.xyz and we will delete it.
Your choices and rights
You can stop using Boundly at any time and delete the app, which removes everything stored on your device. Because we don't have accounts, the data we hold is tied only to an anonymous install ID. To request access to or deletion of data associated with your install, or to exercise any rights you have under local law (such as GDPR or CCPA), email support@infinitefuture.xyz. We may ask for details that help us find data linked to your install.
Security
All traffic between the app and our server is encrypted with HTTPS, requests are verified with App Attest, and we keep stored data to the minimum described above.
This website
This website does not use cookies for tracking or advertising and has no analytics scripts. Our hosting provider may process standard server logs (such as IP address) for security and reliability.
Changes
If we change this policy, we will update the effective date above and, for significant changes, let you know in the app.
Contact
Infinite Future
support@infinitefuture.xyz