Privacy Policy

Bossy is run by Aneta Kahleová. This page explains, in plain English, what data we keep, why, and what you can do about it. Short version: we store what Bossy needs to boss you around, we don't sell it, and you can ask us to delete it.

What we store

• Account info: your name, email, a hashed password (we never see the real one) and your timezone.
• Your plan: goals, reasons, deadlines, milestones, time blocks, tasks and schedule preferences.
• Chat messages: what you send Bossy and what it replies, in the web app and on Telegram.
• Memory notes: short facts Bossy saves to remember what matters to you. You can see them in the app.
• Telegram (optional): your Telegram chat id, so Bossy can text you.
• Calendar link (optional): a private, random subscription URL for your plan. Anyone who has the link can see your scheduled task titles, so treat it like a password; you can reset it in Settings.
• Push notifications (optional): if you turn them on, your browser's push address (an anonymous endpoint and keys from your browser vendor) so Bossy can send check-ins to that device.
• Billing: your Stripe customer and subscription ids and status. Card details are handled by Stripe; we never see or store them.

Why we use it

Only to run Bossy for you: build your plan, send your morning and evening messages, answer your chats, sync your calendar and handle your subscription. We don't sell your data or use it for advertising.

Who else touches it

• AI providers: to write replies, check-ins and plans, your messages and plan details are sent to AI models from OpenAI (GPT) and Google (Gemini), routed through Vercel AI Gateway. We configure the gateway to only use providers that don't train on your prompts.
• Telegram: delivers the messages, if you connect it.
• Your browser's push service (Google, Apple or Mozilla, depending on your browser): delivers notifications, if you turn them on. Calendar apps you subscribe with (Google, Apple, Outlook) fetch your plan through your private link.
• Stripe: processes payments.
• Hosting and database providers: store the app and its data.

Each of them handles data under their own privacy policy.

Cookies

We use one essential cookie to keep you signed in. No ad trackers.

Your choices

• Disconnect Telegram or push notifications, or reset your calendar link, anytime in Settings.
• Download a copy of your data in Settings (or ask us for one).
• Delete your account and all its data yourself in Settings. Deleted memories are gone for good.
• Ask us to correct anything.
• If you're in the EU or UK, you also have your rights under the GDPR, including complaining to your local data protection authority.

How long we keep it

As long as your account exists. Deleting your account in Settings removes your data from the app right away; backups roll off within 30 days. We only keep what we must for legal or accounting reasons (like payment records).

Contact

Email ask@latentgirl.com for anything privacy-related.