Privacy Policy
Bora is a bot that runs challenges and keeps the leaderboard in WhatsApp groups. This policy explains, in plain words, what Bora keeps, why it keeps it and how you delete it. The data controller is Enzo Junqueira, an individual, in Brazil.
What Bora keeps
- Who you are on WhatsApp: your WhatsApp identifier (phone number and/or the internal identifier WhatsApp uses in groups) and the display name WhatsApp itself shows. That is how Bora knows whose check-in is whose.
- The group: group identifier and name, who the admins are, the chosen time zone.
- The check-ins: date and time, points, the value read from the caption (km, minutes, pages…), the status (approved, removed) and the reason for adjustments made by admins. It is the history the group itself reads with
@Bora history. - A fingerprint of the photo, never the photo: to spot a repeated photo, Bora computes a numeric code (a perceptual hash) of the image and keeps only that code. The photo, the video and the link to the media are not kept.
- What is said to Bora: the messages where the bot is tagged (commands, captions) and the events tied to check-ins (reactions, deletions), to work and to settle disputes. To know when it was tagged, Bora receives the group's messages through WhatsApp; it does not reply or react to anything not addressed to it.
- Waiting list (site): the WhatsApp number you type, the date, where the sign-up came from and the page's language.
- Site visits: the site's host (Vercel) counts visits and sign-ups in aggregate, without cookies and without tracking you across sites. Nothing in it identifies you.
- Watch (optional): if you connect a Garmin watch, Bora keeps encrypted access credentials and a summary of each activity (sport, distance, duration, date). No GPS, no workout files. You disconnect whenever you want with
disconnect.
What Bora does not do
- It does not keep photos or videos.
- It does not ask for age, weight, height or goals. It does not build a profile of you.
- It does not use your data for advertising and does not sell or rent data to anyone.
- It does not let an artificial intelligence decide points. When Bora does not understand a command, only the text of the message (no phone, no photo) may be sent to a text classification service to suggest the right command.
Who can see the data
- Your group: leaderboard, history and recaps are messages in the group, visible to every member. That is the product.
- WhatsApp (Meta): messages go through WhatsApp, which has its own privacy policy. Bora is not affiliated with WhatsApp.
- Garmin: only if you connect the watch, and only what Garmin makes available with your authorization.
- Infrastructure providers: our own servers, encrypted backups, the site's host (Vercel) and the text classification service mentioned above, only to run Bora.
- Authorities, where the law requires it.
For how long
As long as the group uses Bora. Finished challenges are kept as seasons, because groups like to look back. The waiting list is deleted when you are invited or when you ask. Watch credentials are deleted when you disconnect.
How to delete
Send delete my data to Bora in a direct message. Your identifier and your name are anonymized in every group; the point records keep nothing that leads to you, so the others' leaderboard does not change. You can also ask by e-mail: contato@joinbora.app, subject "Delete my data". We answer within 15 days.
Your rights
Under Brazil's General Data Protection Law (LGPD), you can ask for access, correction, portability and deletion of your data, and object to processing you consider improper. Just write to the e-mail above.
Security
Data lives on our own infrastructure, with restricted access, encrypted credentials and encrypted backups. No system is infallible; if something happens, we tell the affected groups.
Minors
Bora is not made for people under 18. If you think a minor was signed up, write to us and we delete it.
Changes
This policy may change. The date at the top says which version is current; relevant changes are announced in the group by Bora itself. This English version is a courtesy translation: if it differs from the Portuguese version, the Portuguese one prevails.