iBoard Privacy Policy

Last updated: March 2026

Introduction

iBoard ("we", "our", or "us") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our iBoard application and related services, including our website at iboard.live.

Information We Collect

iBoard collects the following information to provide our services:

• Account Information: Email address and name when you create an account
• User Content: Events, tasks, photos, and quotes you add to your board
• Device Information: Device type and screen ID for syncing
• Location: City/region for weather display (optional)
• Voice Data: Voice commands are processed in real-time and not stored
• Google Calendar Data: When you choose to connect your Google Calendar, we access your calendar events (read-only) to display them on your iBoard dashboard. See "Google API Services" section below for details.
• Google Drive Data: When you choose to connect your Google Drive, we access your Drive files (read-only) to allow you to browse and display photos on your board. See "Google API Services" section below for details.

How We Use Your Information

• Display your personalized dashboard on your TV and mobile devices
• Sync data between your TV and mobile devices
• Provide weather information for your location
• Process voice commands using AI
• Display your Google Calendar events on your board (when connected)
• Display your Google Drive photos on your board (when connected)

Google API Services — User Data Policy

iBoard's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What Google data we access

When you explicitly choose to connect your Google account, iBoard requests access to the following scopes:

• Google Calendar (read-only): We read your calendar events to display them on your iBoard dashboard. Scope: calendar.readonly
• Google Drive (read-only): We read your Drive files to let you browse and select photos for your board. Scope: drive.readonly

How we use Google data

• Google Calendar events are fetched and displayed on your iBoard calendar screen so you can view your schedule on your TV or dashboard.
• Google Drive photos are fetched and displayed on your iBoard photo slideshow so you can show personal photos on your board.
• Google data is only accessed when you initiate a sync action within the app.
• We do not use Google data for advertising, market research, or any purpose unrelated to providing the iBoard service.

Storage and retention of Google data

• Calendar events synced from Google Calendar are stored in your iBoard account (via Firebase Firestore) so they can be displayed on your board.
• Google Drive photo URLs are cached temporarily for display purposes.
• You can remove synced Google data at any time by disconnecting the integration or deleting events from your board.
• We do not store your Google OAuth tokens beyond the current browser session.

Sharing of Google data

• We do not share, sell, or transfer your Google user data to any third parties.
• We do not use your Google user data to serve advertisements.
• Google data is only accessible to you through your own iBoard account.

Limited Use disclosure

iBoard's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google data to provide and improve the iBoard service features that the user has requested.
• We do not transfer Google data to others unless necessary to provide the service, with user consent, or for legal reasons.
• We do not use Google data for serving advertisements.
• We do not allow humans to read Google data unless with user consent, for security purposes, to comply with law, or when aggregated and anonymized for internal operations.

Data Storage

Your data is stored securely using Google Firebase services (Firestore and Firebase Storage). We do not sell or share your personal information with third parties.

Data Protection

We implement the following technical and organisational measures to protect your data, including any sensitive data received from Google APIs:

• Encryption in transit: All data transmitted between your device and our servers is encrypted using HTTPS/TLS (Transport Layer Security).
• Encryption at rest: All data stored in Google Firebase (Firestore and Firebase Storage) is encrypted at rest using AES-256 encryption, managed by Google Cloud's built-in encryption infrastructure.
• Authentication and access control: Access to your data requires Firebase Authentication. Each user can only access their own account data. Server-side Firestore security rules enforce strict per-user data isolation.
• OAuth token security: Google OAuth tokens are handled in-memory during the browser session and are not persisted to our database. Tokens are transmitted only over encrypted HTTPS connections.
• API key protection: Third-party API keys (such as OpenAI for AI content generation) are stored as Firebase secrets on the server side and are never exposed to client-side code.
• Minimal data collection: We only collect and store data that is necessary to provide the iBoard service. Google Calendar and Drive data is accessed read-only and used solely for display on your dashboard.
• Data isolation: Each user's data is logically separated in our database. No user can access another user's content, calendar events, or photos.
• Secure infrastructure: Our backend runs entirely on Google Cloud Platform (Firebase), which maintains SOC 1, SOC 2, SOC 3, and ISO 27001 certifications for data security.

Third-Party Services

iBoard uses the following third-party services:

• Google Firebase: Authentication, data storage, and hosting
• Google Calendar API: Read-only access to your calendar events (when you choose to connect)
• Google Drive API: Read-only access to your Drive files for photo display (when you choose to connect)
• Google Gemini AI: Voice command processing and AI features
• OpenWeatherMap: Weather data for your location

Revoking Access

You can revoke iBoard's access to your Google account at any time by:

• Visiting your Google Account permissions page and removing iBoard
• Disconnecting the Google integration within the iBoard app

After revoking access, iBoard will no longer be able to access your Google Calendar or Google Drive data. Previously synced calendar events stored in your iBoard account can be manually deleted.

Data Deletion

You can delete your account and all associated data at any time through the app settings or by contacting us at support@iboard.live. Upon account deletion, all your data including synced Google data will be permanently removed from our systems.

Children's Privacy

iBoard is not intended for children under 13. We do not knowingly collect information from children under 13.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: support@iboard.live

Website: https://iboard.live

© 2026 iBoard. All rights reserved.