Privacy Policy
Last updated: 6 September 2026
1. Introduction
Bored AI Ltd, trading as "Bored Mining" ("we", "us", or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Bored Mining mobile application ("App"), our websites, our online order pages (including time-limited webinar offer pages such as webinar.bored-mining.com), our customer onboarding portal and our associated services.
By using our App, websites or order pages, you agree to the collection and use of information in accordance with this policy.
2. Data We Collect
We may collect the following categories of information:
- Account Information: Name, email address, phone number, and payment details when you register for an account.
- Device Information: Device type, operating system, unique device identifiers, and mobile network information.
- Usage Analytics: App usage patterns, feature interactions, session duration, and crash reports to improve our services.
- Mining Data: Hashrate, earnings, miner configuration, and operational data associated with your mining equipment.
- Online Orders & Webinar Offers: When you order through one of our online order pages, we collect your first name, last name and e-mail address, the products and quantities you selected, the offer you ordered through, your chosen display language, and a timestamp together with a shortened (truncated) IP address for abuse prevention. We do not collect a phone number on these pages and we do not use third-party CAPTCHA services.
- Onboarding & Contract Data: Identity verification (KYC) information and documents, the signed hosting agreement and risk disclaimer, invoices and payment status, and messages you exchange with us in the support chat of the customer portal.
- Communications: Records of correspondence when you contact our support team.
3. How We Use Your Data
We use collected information for the following purposes:
- Service Delivery: To provide, operate, and maintain the App and our mining hosting services.
- Order Processing: To create your customer account, send your welcome and onboarding e-mails, prepare the hosting agreement and invoice, and support you with your order (legal basis: performance of a contract or steps prior to entering into a contract).
- Live Allocation Display: On webinar offer pages, other visitors of the same page may see anonymised, aggregated order information in real time (order number, quantity, product and time). Your name and e-mail address are never displayed publicly.
- Customer Support: To respond to your inquiries and resolve issues.
- Improvements: To analyze usage patterns and improve the App experience.
- Notifications: To send push notifications about miner health, earnings, and service updates.
- Security: To detect, prevent, and address technical issues, abuse of our order pages and fraudulent activity (legal basis: our legitimate interests).
- Legal Compliance: To comply with applicable laws and regulations.
4. Data Sharing
We do not sell your personal data. We may share data with:
- Service Providers (Processors): Third-party vendors who assist in operating our services and who are bound by data processing agreements and confidentiality obligations. Currently these are in particular: Vercel Inc. (USA) — hosting of our website, order pages and customer portal, and encrypted document storage; Neon Inc. (USA) — database hosting; Twilio SendGrid (USA) — delivery of transactional e-mails such as welcome, contract and invoice e-mails; Stripe — card payment processing, if you choose to pay by card; and the app-store operators (Apple, Google) for App distribution.
- Your Sales Contact: Your order details are visible to the Bored Mining sales representative or sales coordinator responsible for your account so that they can support you.
- Legal Requirements: When required by law, regulation, or legal process.
- Business Transfers: In connection with a merger, acquisition, or sale of assets.
International Transfers: We are established in the United Arab Emirates, and the service providers named above operate servers in the United States. If you are located in the EEA, the UK or Switzerland, your personal data is therefore transferred outside your jurisdiction. For such transfers we rely on the EU Standard Contractual Clauses (and, where applicable, the UK Addendum) concluded with these providers, together with encryption in transit and at rest.
5. Data Retention
We retain your personal data for a period of 2 years from the date of your last interaction with our services, unless a longer retention period is required by law. After this period, your data will be securely deleted or anonymized. Contract, invoice and identity-verification records are kept for as long as UAE commercial and anti-money-laundering regulations require (generally 5 years after the end of the business relationship). Order data that is displayed anonymously on webinar offer pages is removed from the public page when the offer closes.
6. Data Security
We implement industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security assessments. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
7. Your Rights (GDPR)
Where the GDPR applies, we process your personal data on the basis of contract performance (Art. 6(1)(b) GDPR), our legal obligations (Art. 6(1)(c)), our legitimate interests such as abuse prevention and service improvement (Art. 6(1)(f)), and your consent where you have given it (Art. 6(1)(a)).
If you are located in the European Economic Area (EEA) or a jurisdiction with similar data protection laws, you have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate personal data.
- Erasure: Request deletion of your personal data ("right to be forgotten").
- Portability: Request transfer of your data to another service provider in a structured, machine-readable format.
- Restriction: Request restriction of processing in certain circumstances.
- Objection: Object to processing based on legitimate interests.
- Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
- Complaint: Lodge a complaint with the data protection supervisory authority of your country of residence.
To exercise any of these rights, contact us at ai@bored-mining.com. We will respond within 30 days.
8. Cookies and Tracking
Our App may use analytics tools that collect anonymous usage data. Our website, order pages and customer portal use only strictly necessary cookies and browser storage (for example to keep you signed in, remember your chosen language or hold a temporary seat reservation on a webinar offer page). We do not use advertising trackers or third-party analytics cookies on our order pages.
9. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the App and updating the "Last updated" date.
11. Language
This Privacy Policy and our order pages are provided in English. A German version may be offered for convenience; it is produced with AI-assisted translation and we do not guarantee its accuracy. In case of any discrepancy, the English version prevails.
12. Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of the United Arab Emirates.
13. Contact Us
If you have questions about this Privacy Policy, please contact us:
- Email: ai@bored-mining.com
- Address: Bored AI Ltd, Office A, Innovation City Business Centre, RAK BANK ROC Office, Ground Floor, Al Rifaa, Sheikh Mohammed Bin Zayed Road, Ras Al Khaimah, United Arab Emirates