Boltex App

Privacy Policy for Boltex

Last Updated & Effective Date: August 3, 2026

Welcome to Boltex (formerly known as Gravity Habits), operated by Memory Booth Solutions ("Company", "we", "us", or "our"). We respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, sync, store, transfer, and protect your information when you use our mobile application (Boltex, available on Android and iOS), our website (https://boltex.app), and associated backend services (collectively, the "Services").

By creating an account, accessing, or using the Services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

1. Data Controller Contact Details

If you have any questions regarding this Privacy Policy or wish to exercise your legal data privacy rights, please contact us at the email address above.

2. Categories of Information We Collect

We collect information directly from you, automatically via your mobile device sensors, and through integrated third-party platforms.

A. Information You Provide Directly

• Account Credentials: Email address, password hashes (secured via Supabase Auth), unique Supabase User ID (UUID).
• Profile & Identity Data: Chosen username/handle, profile biography, avatar profile image URL, subscription/pro status (is_pro).
• User-Generated Content (UGC): Photos and images uploaded to posts, textual feed posts, activity titles, activity descriptions, comments, threaded replies, post/run likes, follow/follower connections, club memberships, and challenge entries.
• Equipment & Gear Data: Brand name, model, and cumulative distance logged for running shoes, bicycles, or other sports gear.
• Support & Communications: Records of support tickets, bug reports, and emails sent to memorybooth.solutions@gmail.com.

B. Location Data (Precise & Approximate)

• Real-Time GPS Coordinates: Latitude, longitude, altitude, movement speed, distance traveled, split times, and timestamped route polylines.
• Collection Scenarios: Collected in the foreground while recording an active workout, and in the background if you navigate away from the app during an ongoing tracking session.
• Privacy Zones: User-defined geofenced buffers that obscure exact starting and ending coordinates of public activity maps to protect your home or office address.

C. Physical Motion, Health & Sensor Data

• Hardware Sensor Telemetry: Pedometer step counts, step cadence, physical activity recognition (ACTIVITY_RECOGNITION), and motion sensor data.
• Workout Metrics: Activity type (running, walking, cycling, etc.), duration, active calorie burn estimates (calculated using MET values).
• Apple Health & Google Health Connect Sync:
  • Read Access: Imported step counts and historical fitness data from Apple Health (iOS) or Google Health Connect (Android).
  • Write Access: Exported completed workout summaries (distance, duration, calories, activity type) to Apple Health or Google Health Connect upon your explicit authorization.

D. Monetization, Ad & Financial Data

• Advertising Identifiers: Google Advertising ID (GAID on Android) and IDFA (on iOS), managed via Google Mobile Ads (AdMob).
• Reward Economy & Wallet Records: Gravity Coin earnings (step rewards), AdCoin balances (earned by watching video ads), ad impression events, video completion logs, and digital wallet balance transaction records.
• Payment & Payout Information: Transaction logs, wallet redemption records, and payout destination details (bank/UPI details provided for coin redemptions).

E. Technical & Device Diagnostics Data

• Device Characteristics: Device model, hardware manufacturer, operating system version, screen resolution, language settings.
• Network & Connection: IP address, mobile network state, internet connectivity indicators (connectivity_plus).
• System Logs & Diagnostics: App performance metrics, crash reports, error stack traces, and local SQLite cache logs.

3. How We Use Your Data & Legal Bases for Processing

We process your personal data under the following legal bases recognized by data privacy laws (such as GDPR, UK GDPR, and CCPA/CPRA):

Detailed Disclosures on Specific Processing Operations:

1. Targeted & Personalized Advertising (Google AdMob)

We integrate Google Mobile Ads (AdMob) to deliver advertisements and reward users with AdCoins. AdMob may use device advertising identifiers (GAID/IDFA) and cookies/SDK tokens to serve targeted ads based on your interests, general region, and app interaction. You can opt out of personalized advertising at any time via your device operating system settings or in-app consent preferences.

2. Commercial Research & Aggregated Data Licensing

We may aggregate, anonymize, or pseudonymize location route data, workout telemetry, step statistics, and demographic trends. We use or share these non-personally identifiable, aggregated datasets with third-party partners, urban planners, fitness equipment manufacturers, research institutions, and data analytics firms for commercial research, product strategy, and industry benchmarks.

3. Artificial Intelligence (AI) & Machine Learning (ML) Training

We utilize anonymized or pseudonymized activity logs, route coordinates, cadence telemetry, and user interaction patterns to train artificial intelligence models, refine activity-recognition algorithms, prevent cheating/ghost-running, and develop automated AI fitness coaching tools. We do not sell raw, un-anonymized health or location data to third parties for AI training without your explicit consent.

4. Anti-Fraud & Security Enforcement

To protect our ad revenue-sharing economy, we analyze step velocity, GPS movement consistency, and ad watch intervals. Accounts detected using mock GPS spoofers, automated step shakers, ad bots, or emulator scripts will have their coin balances forfeited and accounts permanently banned.

4. Third-Party Service Providers & Data Sharing

We do not sell your personally identifiable information (PII) to third parties. We share data only with trusted service providers operating under strict data processing agreements:

1. Supabase, Inc. (Backend Infrastructure & Authentication): Data Shared: User authentication tokens, email, encrypted profile data, uploaded photos, database records. Location: Global cloud infrastructure (US/EU).
2. Google LLC (Google Mobile Ads / AdMob & Google Health Connect): Data Shared: Device Advertising IDs, ad impressions, health step telemetry (when authorized).
3. Apple Inc. (Apple HealthKit): Data Shared: Workout summaries and step telemetry (when authorized).
4. OpenStreetMap / Map Tile Providers: Data Shared: Anonymous map tile requests containing viewport bounding boxes.
5. Legal & Regulatory Authorities: We may disclose information if required by court order, subpoena, law, or to protect the vital security of our users and platform.

5. User Privacy Rights & Choices (GDPR, UK GDPR, CCPA/CPRA, US State Laws)

Depending on your jurisdiction, you have the following rights regarding your personal data:

• Right of Access & Portability: Request a copy of the personal data we hold about you, including your GPS run history and profile data.
• Right to Rectification: Update or correct inaccurate account information directly in app settings.
• Right to Erasure (Account Deletion): Request permanent deletion of your account and associated data. You can initiate account deletion inside the Boltex app settings or by emailing memorybooth.solutions@gmail.com.
• Right to Withdraw Consent: Revoke permissions for Location, Motion Sensors, Apple Health, Google Health Connect, or Personalized Ads at any time via device settings.
• Right to Opt-Out of Sale / Sharing / Targeted Ads: Request that your pseudonymized or aggregated data be excluded from commercial data licensing or targeted advertising.
• Non-Discrimination: We will not discriminate against you for exercising any of your legal privacy rights.

To submit a privacy rights request, email us at memorybooth.solutions@gmail.com with the subject line "Data Privacy Request". We respond to all requests within 30 days.

6. Data Retention & Security

Retention Period

• Active Accounts: We retain your account, profile, activity runs, posts, and coin records for as long as your account remains active.
• Deleted Accounts: Upon receiving an account deletion request, all personal identifiers, email records, profiles, and un-aggregated GPS logs are permanently erased from our Supabase production database within 30 days.
• Anonymized Analytics: Fully anonymized, aggregated statistical datasets (which cannot be linked back to any individual) may be retained indefinitely for historical reporting and AI model training.

Data Security Measures

We implement industry-standard technical and organizational security measures:

• All data in transit is encrypted using TLS 1.3 / SSL.
• Production database storage in Supabase is protected with AES-256 encryption at rest.
• Row Level Security (RLS) policies strictly isolate user database records so users can only access authorized data.

7. International Data Transfers

Your information may be transferred to, stored, and processed in servers located outside of your state, province, or country (including the United States and European Union). We ensure that international data transfers comply with applicable data protection laws through Standard Contractual Clauses (SCCs) and robust cloud infrastructure safeguards.

8. Children's Privacy

Boltex is intended solely for users aged 13 and older (or 16 and older in certain EU jurisdictions). We do not knowingly solicit or collect personal information from children under 13. If we discover that a child under 13 has created an account, we will immediately delete their account and purge all associated data. If you believe a minor has provided us with personal information, please contact memorybooth.solutions@gmail.com.

9. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect app updates, legal requirements, or changes in our data practices. When updates are made, we will revise the "Last Updated" date at the top of this policy and notify you via an in-app banner or email notification prior to the changes taking effect.

10. Contact Us

If you have questions, concerns, or complaints regarding this Privacy Policy or our data handling practices, please contact us:

MojiBoom App

Privacy Policy for MojiBoom

Last updated: March 06, 2026

This privacy policy applies to the MojiBoom app (herein referred to as "Application") for mobile devices that was created by MemoryBooth (herein referred to as "Service Provider") as a Commercial service. This service is intended for use "AS IS".

Information Collection and Use

The Application collects information when you download and use it. This information may include information such as:

• Your device's IP address
• The Application pages you visit, the time and date of your visit, the time spent on those pages
• The time spent on the Application
• The operating system you use on your mobile device

The Application does not gather precise information about the location of your mobile device.

The Service Provider may use the information you provided to contact you from time to time to provide you with important information, required notices and marketing promotions.

For a better experience, while using the Application, the Service Provider may require you to provide us with certain personally identifiable information. The information that the Service Provider requests will be retained by them and used as described in this privacy policy.

Third Party Access

Only aggregated, anonymized data is periodically transmitted to external services to aid the Service Provider in improving the Application and their service. The Service Provider may share your information with third parties in the ways that are described in this privacy statement.

Please note that the Application utilizes third-party services that have their own Privacy Policy about handling data. Below are the links to the Privacy Policy of the third-party service providers used by the Application:

• Google Play Services
• AdMob

The Service Provider may disclose User Provided and Automatically Collected Information:

• as required by law, such as to comply with a subpoena, or similar legal process;
• when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
• with their trusted services providers who work on their behalf, do not have an independent use of the information we disclose to them, and have agreed to adhere to the rules set forth in this privacy statement.

Opt-Out Rights

You can stop all collection of information by the Application easily by uninstalling it. You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network.

Data Retention Policy

The Service Provider will retain User Provided data for as long as you use the Application and for a reasonable time thereafter. If you'd like them to delete User Provided Data that you have provided via the Application, please contact them at memorybooth.solutions@gmail.com and they will respond in a reasonable time.

Children's Privacy

The Application is designed for a general audience. We have implemented a "Neutral Age Screen" to identify the age of our users. For users who identify as under the age of 13:

• We do not knowingly collect, use, or disclose any personally identifiable information.
• We automatically configure the AdMob SDK to disable personalized advertising and behavioral tracking.
• We only serve advertisements that are rated G (General) and are from Google Play Families Self-Certified Ads SDKs.

If you are a parent or guardian and believe we have inadvertently collected information from your child, please contact us at memorybooth.solutions@gmail.com.

Security

The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains.

Changes

This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.

Your Consent

By using the Application, you are consenting to the processing of your information as set forth in this Privacy Policy now and as amended by us.

Contact Us

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at memorybooth.solutions@gmail.com.