Privacy policy
Effective November 8, 2026
- You can use Bossaroo without giving us your name or your email.
- We save your progress so you don't lose it.
- What you type in a roleplay is sent to an AI to write the replies and your feedback. We don't keep it.
- We don't sell your data, show ads, or track you across other apps.
- You can delete your account, and everything saved with it, from Settings.
Who we are
Bossaroo is made by James Lawson, in Canada. If you have a question about your data, email privacy@bossaroo.com.
What we collect, and why
An anonymous account. The first time you open Bossaroo, it makes an account for you with a random ID. It has no name or email. We use it to save your progress, and to give everyone a fair daily share of AI practice.
Your progress. Which lessons you've finished, your checkpoint results, your Daily Challenge answers, the days you played (for your streak), and the skill tree you're on. It's saved on your phone and in our database, so it survives a reinstall.
Your email, only if you sign in. We use it to send you a one-time sign-in code, and to bring your progress to a new phone. We don't send marketing emails.
Daily Challenge picks. To show what share of managers picked each answer, each pick is saved with a random ID made by the app on your phone. That ID isn't linked to your account, your email or your name.
How much AI you used. For each account, we count how many AI replies and reviews it used each day, so we can keep to a daily limit. We store the counts only.
Your roleplay chats. When you practise in a roleplay or a checkpoint, what you type goes through our server to Anthropic's Claude, which writes the character's replies and your feedback. We don't store your chats. The app keeps the conversation on your phone only while it's open. Our server's records show how much each request cost, never what anyone wrote. Anthropic processes the chat under its commercial terms: it doesn't use it to train its models, and it deletes it within 30 days, unless a chat is flagged for breaking Anthropic's usage rules.
What stays on your phone. Your answers in the first few onboarding screens, your Manager Snapshot and your reminder time never leave your phone. Daily reminders are scheduled on your phone too: we don't send push notifications from a server.
Technical logs. The services we use keep standard records, such as IP addresses and the times of requests, to keep things secure and running.
What we don't do
- We don't sell your data or share it for advertising.
- We don't use analytics or tracking tools.
- We don't use your chats to train AI.
The services we use
These companies handle data for us, only to run Bossaroo:
| Service | What for | Where |
|---|---|---|
| Supabase | Accounts, the database, and our server | United States |
| Anthropic | The AI that plays the characters and gives feedback | United States |
| Resend | Sending sign-in codes | United States |
| Google Play | Downloading the app | Google's own policy applies |
If you're outside the United States, your data is sent there to be stored and processed.
How long we keep it
Your account, progress and AI counts stay until you delete your account. Daily Challenge picks aren't linked to you, so they stay, as part of the anonymous totals.
Deleting your data
In the app, go to Settings → Delete my account. That deletes your account, your progress and your AI counts from our database straight away, and clears them from your phone. You can also email us and we'll do it for you.
Uninstalling the app isn't the same as deleting your account. If you haven't signed in, your progress becomes impossible to reach, but it stays in our database. Delete your account first if you want it gone.
Your rights
You can ask us for a copy of your data, to correct it, or to delete it, by emailing privacy@bossaroo.com. We'll answer within 30 days. If you're not happy with how we handled it, you can complain to the Office of the Privacy Commissioner of Canada.
Children
Bossaroo is for people who manage others at work. It isn't meant for anyone under 18, and we don't knowingly collect data from children.
Keeping it safe
Everything between the app and our server is encrypted. In our database, each account can reach only its own progress. Our AI keys stay on our server and never ship in the app.
Changes to this policy
If we change it, we'll update the date at the top. If a change affects what we collect, we'll tell you in the app first.