EFFECTIVE AUGUST 5, 2026

Privacy Policy

How Your Boss collects, uses, protects and gives you control over information connected to the app.

Your Boss is a productivity service for managing tasks, routines, schedules and reminders. We do not sell personal information or use task contents for targeted advertising.

1. Scope and controller

This policy applies to the Your Boss iOS app, its account and synchronization services, and this website. The Your Boss developer identified on the App Store product page is responsible for the processing described here.

2. Information we process

Information you provide

  • Account information such as your name, email address, verification status and sign-in provider identifiers.
  • Your content, including tasks, subtasks, notes, categories, schedule windows, reminders, preferences and completion history.
  • Messages and information you provide when requesting support.
  • Optional Telegram connection information when you choose to connect Telegram.

Information generated by use

  • Security and device-session information needed to authenticate devices, rotate sessions, prevent abuse and protect accounts.
  • Basic request data such as IP-derived security records, timestamps, app version and client type.
  • Subscription status and App Store transaction identifiers. Apple processes payment details; Your Boss does not receive your full card or bank information.

Information on your device

The iOS app keeps an offline copy of account data so core features can work without a connection. Custom boss photos and notification schedules are managed locally on your device.

3. How and why we use information

  • Provide task management, offline access, synchronization, reminders, widgets and the features you choose to use.
  • Create and secure accounts, verify email addresses, support account recovery and remember active devices.
  • Validate subscription access and restore purchases.
  • Respond to support, privacy and account-deletion requests.
  • Detect abuse, investigate errors, enforce limits and protect the service.
  • Meet applicable legal, tax and regulatory duties.

Where applicable, processing is based on performing our agreement with you, your consent for optional features, our legitimate interest in operating a secure service, and compliance with legal obligations.

4. Service providers and transfers

We use providers that process limited information to operate the service:

  • Railway and PostgreSQL for hosting and data persistence.
  • Resend for verification, recovery and service emails.
  • Apple and Google for optional sign-in.
  • Apple for App Store subscriptions, billing and purchase validation.
  • Telegram only when you choose to connect it.

Providers may process information in countries other than yours. We use their contractual and technical protections as applicable and only share information needed to provide the relevant function. We may also disclose information when legally required or to protect users, rights and service security.

5. Retention

Account content is retained while your account is active. Security records, expired sessions and recovery records are retained only as reasonably needed for fraud prevention, troubleshooting, legal obligations and backup cycles. When an account-deletion request is completed, active account data is removed or de-identified, subject to limited legal and backup retention.

6. Your choices and rights

  • Edit or delete tasks, subtasks, categories, schedules and other content in the app.
  • Disable notifications, sleep messages and morning messages.
  • Disconnect Telegram and revoke active device sessions.
  • Manage or cancel subscriptions from Apple Account settings.
  • Request access, correction, export or deletion of account information through the instructions on our Support page.

Depending on your location, you may also have rights to object, restrict processing, withdraw consent or complain to a local data-protection authority. We may need to verify your identity before completing a request.

7. Security

We use HTTPS in transit, scrypt password hashing, short-lived access tokens, rotating refresh tokens stored as hashes, authorization checks, request validation and persistent rate limits. Administrative access is limited to operating the service. No internet service can guarantee absolute security, so protect your device and credentials and contact support if you suspect unauthorized access.

8. Children

Your Boss is not directed to children under 13, and we do not knowingly collect their personal information. Higher minimum ages may apply where required by local law.

9. Changes to this policy

We may update this policy as the product, providers or legal requirements change. The effective date at the top identifies the latest version. Material changes will be communicated through the app, website or another appropriate channel.

10. Contact

For privacy questions, access requests or deletion requests, follow the contact instructions on the Your Boss Support page. The current developer contact is also published with the Your Boss App Store product listing.