iBoard Privacy Policy

Last updated: March 2026

Introduction

iBoard ("we", "our", or "us") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our iBoard application and related services, including our website at iboard.live.

Information We Collect

iBoard collects the following information to provide our services:

• Account Information: Email address and name when you create an account
• User Content: Events, tasks, photos, and quotes you add to your board
• Device Information: Device type and screen ID for syncing
• Location: City/region for weather display (optional)
• Voice Data: Voice commands are processed in real-time and not stored
• Google Calendar Data: When you choose to connect your Google Calendar, we access your calendar events (read-only) to display them on your iBoard dashboard. See "Google API Services" section below for details.
• Google Drive Data: When you choose to connect your Google Drive, we access your Drive files (read-only) to allow you to browse and display photos on your board. See "Google API Services" section below for details.

How We Use Your Information

• Display your personalized dashboard on your TV and mobile devices
• Sync data between your TV and mobile devices
• Provide weather information for your location
• Process voice commands using AI
• Display your Google Calendar events on your board (when connected)
• Display your Google Drive photos on your board (when connected)

Google API Services — User Data Policy

iBoard's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What Google data we access

When you explicitly choose to connect your Google account, iBoard requests access to the following scopes:

• Google Calendar (read-only): We read your calendar events to display them on your iBoard dashboard. Scope: calendar.readonly
• Google Drive (per-file access): When you pick a folder via the Google Picker, iBoard gets access to that specific folder and its contents only — we never see the rest of your Drive. Scope: drive.file

How we use Google data

• Google Calendar events are fetched and displayed on your iBoard calendar screen so you can view your schedule on your TV or dashboard.
• Google Drive photos are fetched and displayed on your iBoard photo slideshow so you can show personal photos on your board.
• Google data is only accessed when you initiate a sync action within the app.
• We do not use Google data for advertising, market research, or any purpose unrelated to providing the iBoard service.

Storage and retention of Google data

• Calendar events synced from Google Calendar are stored in your iBoard account (via Firebase Firestore) so they can be displayed on your board.
• Google Drive photos: When you connect a Drive folder, iBoard mirrors selected photos from that folder into your private Firebase Storage bucket so they can be displayed reliably on your TV, optionally AI-enhanced, and resized for high-resolution playback. We only mirror photos from the specific folder you select; no other Drive content is accessed.
• Google OAuth refresh tokens: To keep your Drive folder in sync without repeatedly asking you to sign in, we store a Google OAuth refresh token on our servers, encrypted at rest by Firebase Firestore. This token is used only by our Cloud Function to read the specific folder you connected. It is never shared and is automatically revoked when you disconnect Drive from iBoard.
• You can remove synced Google data at any time by disconnecting the integration. When you disconnect Drive, mirrored photos are scheduled for deletion after a 7-day grace period (so an accidental disconnect can be undone).

Sharing of Google data

• We do not share, sell, or transfer your Google user data to any third parties.
• We do not use your Google user data to serve advertisements.
• Google data is only accessible to you through your own iBoard account.

Limited Use disclosure

iBoard's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google data to provide and improve the iBoard service features that the user has requested.
• We do not transfer Google data to others unless necessary to provide the service, with user consent, or for legal reasons.
• We do not use Google data for serving advertisements.
• We do not allow humans to read Google data unless with user consent, for security purposes, to comply with law, or when aggregated and anonymized for internal operations.

Data Storage

Your data is stored securely using Google Firebase services (Firestore and Firebase Storage). We do not sell or share your personal information with third parties.

Data Protection

We implement the following technical and organisational measures to protect your data, including any sensitive data received from Google APIs:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using HTTPS/TLS (Transport Layer Security).
• Encryption at rest: All data stored in Google Firebase (Firestore and Firebase Storage) is encrypted at rest using AES-256 encryption, managed by Google Cloud's built-in encryption infrastructure.
• Authentication and access control: Access to your data requires Firebase Authentication. Each user can only access their own account data. Server-side Firestore security rules enforce strict per-user data isolation.
• OAuth token security: Google OAuth tokens are handled in-memory during the browser session and are not persisted to our database. Tokens are transmitted only over encrypted HTTPS connections.
• API key protection: Third-party API keys (such as OpenAI for AI content generation) are stored as Firebase secrets on the server side and are never exposed to client-side code.
• Minimal data collection: We only collect and store data that is necessary to provide the iBoard service. Google Calendar and Drive data is accessed read-only and used solely for display on your dashboard.
• Data isolation: Each user's data is logically separated in our database. No user can access another user's content, calendar events, or photos.
• Secure infrastructure: Our backend runs entirely on Google Cloud Platform (Firebase), which maintains SOC 1, SOC 2, SOC 3, and ISO 27001 certifications for data security.

Third-Party Services

iBoard uses the following third-party services:

• Google Firebase: Authentication, data storage, and hosting
• Google Calendar API: Read-only access to your calendar events (when you choose to connect)
• Google Drive API: Read-only access to your Drive files for photo display (when you choose to connect)
• Google Gemini AI: Voice command processing and AI features
• OpenWeatherMap: Weather data for your location
• Replicate: Basic AI photo enhancement (Real-ESRGAN model). Photos you upload or manually mark for enhancement are processed by Replicate.com to improve sharpness, color, and detail. Replicate does not retain processed images for model training.
• OpenAI (Smart Enhance): Premium AI photo enhancement (gpt-image-1 model). Only photos you explicitly tap "Smart Enhance" on are sent to OpenAI for processing — never automatically. OpenAI's data usage policy for API customers prohibits using submitted images to train models. Smart Enhance usage is rate-limited per user and per project to control cost.

Revoking Access

You can revoke iBoard's access to your Google account at any time by:

• Visiting your Google Account permissions page and removing iBoard
• Disconnecting the Google integration within the iBoard app

After revoking access, iBoard will no longer be able to access your Google Calendar or Google Drive data. Previously synced calendar events stored in your iBoard account can be manually deleted.

Data Deletion

You can delete your account and all associated data at any time through the app settings or by contacting us at support@iboard.live. Upon account deletion, all your data including synced Google data will be permanently removed from our systems.

Children's Privacy

iBoard is not intended for children under 13. We do not knowingly collect information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: support@iboard.live

Website: https://iboard.live

© 2026 iBoard. All rights reserved.