Your privacy matters. Here is how we handle your data.
Last Updated: September 2026
This Privacy Policy describes how Boomerang ("we," "us," or "our"), an Australian mobile application developed in Queensland, collects, uses, and shares information when you use our mobile application ("App"). By using the App, you agree to the collection and use of information in accordance with this policy.
We are committed to protecting your personal information and being transparent about how we use it. This policy applies to all users of the Boomerang mobile application, regardless of how you access or use it.
We collect information you provide directly to us, including:
We automatically collect certain information when you use the App:
The App may request the following device permissions:
Each permission is optional. The App will function with reduced features if you decline any permission.
We use the information we collect to:
The free tier of the App displays advertisements provided by Google AdMob. To serve ads, AdMob may collect information including your device's advertising identifier (IDFA on iOS, Advertising ID on Android), IP address, general location, and ad interaction data. AdMob uses this data to serve and measure ads, including personalised ads where permitted.
App Tracking Transparency (iOS): The first time you use the App on iOS, you will be asked via Apple's App Tracking Transparency prompt whether to allow Boomerang to track your activity across other companies' apps and websites. If you decline, AdMob will only serve non-personalised (contextual) ads. You can change this preference at any time in your device Settings → Boomerang → Tracking.
Google AdMob's use of your data is governed by Google's privacy policy at policies.google.com/privacy. Boomerang itself does not sell or directly share your personal information with advertisers.
Premium subscribers enjoy a completely ad-free experience: no ads are requested or displayed, and no ad interaction data is generated for premium users. The Google AdMob and consent SDKs are still initialised when the App starts, before your subscription status is known, so the App Tracking Transparency prompt described above is shown to all iOS users on first launch regardless of whether you later subscribe.
We share information with trusted third-party service providers who assist in operating the App:
We may disclose your information if required to do so by law or in response to valid legal requests by public authorities, including to meet national security or law enforcement requirements.
We implement appropriate technical and organisational measures to protect your information:
Your data is primarily stored on servers managed by Supabase. While we take every reasonable precaution, no method of electronic transmission or storage is 100% secure.
Data breach notification: If a data breach occurs that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme under the Privacy Act 1988.
We retain your personal information for as long as your account is active or as needed to provide you with the App. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it by law.
Returned item records may be retained in an anonymised form for aggregate analytics purposes.
Under applicable Australian privacy law (including the Privacy Act 1988), you have the right to:
To exercise any of these rights, contact us at boomerangborrowingapp@gmail.com.
If you use the App from the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR) and UK GDPR give you additional rights, and we rely on the following legal bases to process your information:
In addition to the rights listed in section 7, you have the right to:
We do not use your personal information to make decisions based solely on automated processing that produce legal or similarly significant effects. Where your information is transferred outside the EEA or UK, we rely on appropriate safeguards such as Standard Contractual Clauses with our service providers.
The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.
Your information may be transferred to and processed in countries other than Australia, including where our service providers operate. We ensure appropriate safeguards are in place for such transfers and comply with the Australian Privacy Principles regarding cross-border disclosure of personal information.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the App, sending a push notification, or updating the "Last Updated" date at the top of this page. Your continued use of the App after changes constitutes acceptance of the updated policy.
If you have any questions, concerns, or complaints about this Privacy Policy or our privacy practices, please contact us:
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
By using the Boomerang App, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your information as described herein.