Privacy policy

Boujolie runs this app and decides what is done with the information on this page. Write to us at remeurme@gmail.com about anything here, including the requests further down. A person reads it.

Boujolie is offered in the United States. We are not open in the European Union or the United Kingdom yet.

Your account: the email address you sign up with, which must be verified before you can use the app, and a password. A name, a username, a line about yourself, one link, a picture and a phone number are optional, and you write every one of them yourself.

Your phone number is there to keep your account safe: to check it is you, and to get you back in if you are ever locked out. We do not send codes to it yet. It is never used for advertising and it is never given to a brand, and clearing the field under Signing in removes it.

Your hair, if you say: the type, porosity, length and what you are dealing with, under Profile. It is shown on your page beside your name and is what Curated in Search reads, because that is what it is for. Every part of it is optional, and you can change or clear any of it there.

What you tell us about your taste: the marks you choose in Taste. You choose them, you can change them, and you can clear them.

What you share: posts, comments, photographs and videos you upload, the products you rate, the worlds you join, the people you follow, and the things you save to your boards. A rating on a product carries the hair profile you had stated that day, so a reader can be told how many people with hair like theirs said it worked; that figure is a count, and nobody is ever told who rated what.

What you buy here: your orders, what they cost, and where the parcel is. An order you place while signed in carries your account, so your Purchases can show it. We do not collect what you spend anywhere else, and we never connect to your bank or read a card.

How the app is used: which posts, pieces and worlds were looked at, saved, bagged, joined, liked, commented on or shared, and how many people did each. These are counts. Somebody who is not signed in is counted under a random number that lives only in the tab they are browsing in and is gone when they close it. It is never joined to an account, and nothing about this is kept on your device from one visit to the next.

Your network address, briefly, and only where we have to count requests before anybody has signed in: it is how we stop somebody hammering the sign-in page or the waitlist. It is kept for at most two hours and then deleted. It is never used to work out where you are, and it is never shown to anybody.

A username you give up. The name itself rests for 30 days before anybody else can take it, 90 days if a shop was trading under it, so that a link somebody followed does not quietly land on a stranger. The record of it belongs to your account and goes when your account goes.

We set no advertising cookies and no tracking cookies. There is no advertising network here, no analytics service, no tag manager and no third-party script on any page, so nothing on this site reports what you do to anybody else.

What we do set, and why. Five cookies keep you signed in, remember whether you asked to stay signed in, and carry the two-step check while you are doing it. One more remembers this browser for two years, so that a sign-in from a browser we have not seen can email you about it. That one stays after you sign out on purpose, because a browser it forgot would look like a new one every time.

Your browser also keeps some of the app itself, on your device and nowhere else: your bag, your boards, what you saved and liked, the words you muted, and whether you chose light or dark. None of it is sent to us as a record about you, and clearing your browser data clears it.

Counting is the last one. It is how a world learns that four hundred people saw a post today, and it never names anybody, never follows you to another website, and is never handed to a brand or anyone else as anything but a number. You can turn it off for your account under Your data in More, and it stops at once.

To run the product: showing your posts to the rooms you posted them in, tracking your orders, and sending the alerts you asked for.

To sort what you see. The feed reads the taste you stated and, if you switch it on, what you buy here. That switch is off unless you turn it on, it is under Your data in More, and turning it off stops the reading going forward.

To tell a brand how its own world is doing, in counts: how many people a post reached, how many came back to a piece, how many saved it. Counts name nobody.

We do not sell your data. We do not run an advertising network, and we do not follow you around the internet. A brand may pay us to put one of its own posts in front of more people here; that post says Sponsored on its face, and the brand learns only how many people it reached, never who.

Running your account and your orders: because you asked us to. Signing you in, showing your posts where you posted them, carrying a purchase to the brand and telling you where the parcel is. Without this there is no app to use.

Tailoring, and any mail you asked for: because you said yes. Using what you buy here to shape what you see is off until you turn it on, under Your data in More, and turning it off stops it going forward. Saying no costs you nothing but the tailoring.

Your ratings, lightly: because saying a product worked for you is you saying what you like. The words on the posts whose products you rate 4 or 5 put a few posts in those words on your Home, about one in twenty, and the rest of the page is untouched. Nobody else sees your ratings, no brand is told, and taking a rating off the product stops it counting.

Counting, and keeping the doors locked: because we have a fair interest in knowing how many people a world reached and in stopping abuse, and neither names anybody or follows you anywhere. The counting has a switch under Your data in More. You can object to either by writing to us.

The sales record: because the law requires us to keep one. This is the only thing on this page you cannot have erased, and the reason is under How long we keep it.

We email you to verify your address, to confirm a sign-in from a new device, and to tell you when your password or two-step setting changes. Those are about the safety of your account and cannot be switched off while you have one.

A world you have joined may send its insiders a post by email. The email carries the post’s picture and a way back to it, we send it, and the brand never sees your address. Leaving the world stops them.

A brand can invite you to help run its world by typing your address. The email names the brand and the person who typed it, and the link in it works once, for a week. If you do not accept, nothing else follows.

A brand you interact with sees what you chose to show: your public profile, your posts and comments in its world, and the orders you placed with it, which it needs to fulfil them. Your name stands on an order only when you bought signed in; otherwise the brand sees a shopper.

Brands also see counts about their own world. A brand never sees your email address from us, never sees what you do in another brand’s world, and never sees anything about how you pay.

What you said or chose to show is public: your profile, your posts, your comments, the boards you did not close. What you merely did is private. Lists that are yours can be closed by you, beside the list itself.

No location is shown anywhere unless you wrote it in your own line.

The order of what you see is sorted by counts and by the taste you stated: what a thing proved with the people who met it, with a guaranteed share of the feed kept for things nothing has proved yet. Nothing scores you, nothing sorts people, and there is no profile of you held across brands.

Nothing here makes a decision about you by itself that has any legal or comparable effect. We do not decide what you may buy, what you may earn or whether you may be here by running a number about you.

A small number of companies run parts of the product for us. They act on our instructions, they may not use anything for their own purposes, and this is all of them.

Supabase holds the database, the sign-in records and the files you upload. Vercel hosts the site and serves every page. Resend sends the mail described above. Stripe takes the card or bank details a brand saves, and holds the details a creator gives to be paid. Shopify is the brand’s own store: when you buy, the order is placed there, and we read back the order number, what it cost, its state and the delivery details the store published. We never ask a store for its customers.

One more, and it is worth saying exactly what happens. When you choose a password we check it against a public list of passwords found in old breaches, at Have I Been Pwned. Your password never leaves this site and neither does your address: five characters of a one-way scramble go out through our own server, which is not enough to work backwards to a password or to say who asked.

Boujolie is run from the United States and your data is held there. If you are reading this from somewhere with its own rules about data leaving the country, that is the journey it makes.

The companies above hold it under written terms that require them to protect it and to use it only for us. We will not move it anywhere that offers it less protection than this page promises.

If you set up payment, you give your name, your date of birth and your bank details to Stripe, who hold them and run the identity checks the law asks of them. We never see them. What we keep is the account Stripe hands back, what you earned, and the day each payment went out.

Your account and what is on it: until you close it. Closing takes 90 days, and you can stop it on any of them.

What you posted, saved or wrote: until you delete it, or until your account closes.

The counting: the individual readings are deleted after 30 days. What survives them is the daily totals, which name nobody, and those are kept for 400 days so a brand can compare a season against the one before it.

A network address counted before sign-in: at most two hours. A username you gave up: the name rests 30 days, or 90 for a shop, then anybody may take it.

A sale: kept. We are required to keep a record of what was sold, and a creator has been paid out of it. After the account behind it is gone that record holds the name that was shown on it and nothing else, no address and nothing you typed. A claim waiting to be paid is held until the brand’s returns window has passed, and at most 30 days from delivery where a store never reports one, so that money can always reach whoever earned it.

You can delete a post, a comment, a photograph, a board or a taste mark at any time, and it is gone from the product. A post you would rather keep than show can be archived instead; only you see it there, and you can bring it back.

You can delete your whole account from More. It closes 90 days later, and until then you can keep it: the same place says the date and gives you the way back. On that day your files are removed first, then everything your account owned, and it is permanent. A world you run alone closes with your account. Nothing closes while an order is unsent, a parcel is still on its way, a creator is still owed or a bill is still open; the screen says which one it is. You can also ask us and we will do the same.

A sale made here keeps the name of who bought it and the name of whoever drove it, after the account behind it is gone. We are required to keep a sales record, a creator has been paid out of it, and a receipt that names nobody is no record at all. That is the name you chose to show and nothing else: no email, no address, nothing you typed.

Order records a brand needs for its own accounting, such as an invoice for a thing it shipped you, may survive at the brand under its own paperwork. Counts that were never about one person stay counts.

You can ask to see what we hold about you, to correct it, to have it erased, to get a copy you can take elsewhere, to have us stop using it for a while, and to object to our using it at all. Where you said yes to something you can take that back, and where a switch does it the switch is the fastest way.

Most of it you can do yourself without asking: your own pages hold what you wrote, More holds the switches, and Purchases holds what you bought and earned. For anything else, write to remeurme@gmail.com. We answer within a month, and we will tell you if something has to be kept and why. Asking costs nothing and we will not treat you differently for it.

If you think we have got this wrong you can complain to a data protection regulator. In the United Kingdom that is the Information Commissioner’s Office. In the European Union it is the authority in the country you live in. We would rather you told us first, but you do not have to.

A question about your data, a request to see it or delete it, or anything else on this page goes to remeurme@gmail.com. A person reads it.

Boujolie is not for children under 16, and we do not knowingly collect their data.

If this policy changes in a way that matters, we say so in the app before the change takes effect. The date at the top is the date of the words you are reading.