Privacy policy
Last updated: 25 October 2026
Bosh – Get Stuff Done is developed by Alexander Chown, based in the United Kingdom (“Bosh”, “we”, “us”). Alexander Chown is responsible for the personal information described in this policy. This policy explains how we use personal information in the Bosh app, including Bosh Boost. Contact us at getstuffdone@boshapp.com.
Information you give us
Your account. Bosh creates a guest account with a generated identifier so your saved information has an owner. A guest account is not the same as using the app anonymously from our servers. If you use Sign in with Apple, Apple provides an account identifier and may provide your name and email address, including an Apple private relay address if you choose Hide My Email. We use this information to sign you in and connect your Bosh data across devices.
Your profile. You can choose a display name and profile photo. If you upgrade from the original Bosh, your saved name, displayed photo and original “Bosher since” date can be imported. These profile details are stored locally. When you connect with Apple, they can sync privately with your Bosh account through Supabase. Your guest profile and new point awards stay local until you connect. Profile photos are not published in a public gallery or sent to RevenueCat. You can edit or remove the photo in Progress → Your Bosh. The app only uses a photo you select; it does not upload your photo library.
Your tasks and habits. We store the content you enter, such as task titles, notes, checklist items, dates, completion times, habit names, categories, schedules, targets, units and amounts you log. We also store task templates, weekly plans and the preferences needed for the features you use. This information can reveal personal details, including health information if you choose to enter it.
Progress. Bosh uses your recorded activity to show history, streaks, completion counts and productivity insights. Optional points and ranks combine preserved original balances with new, positive completion awards. The visibility preference and earned awards can sync with your account; hiding them does not delete your earned history. Health-only progress does not create synced point awards. If you upgrade from the original Bosh, we may import your existing local tasks, profile information, points and history. Imported photo attachments are retained locally where available; V2’s task sync does not upload those photo bytes.
Support. If you contact us, we receive your message, contact details and any information or diagnostics you choose to send. Please avoid sending passwords or unnecessary sensitive information.
This website. Framer hosts boshapp.com and processes connection information needed to serve and protect the website. If you send a support request through the website, we receive the information you submit and use it to respond. Links to the App Store and other external services take you to sites with their own privacy practices.
Apple Health
Connecting Apple Health is optional and available on supported devices. Bosh requests read access only when you choose a compatible habit source. Depending on that source, it can read water intake, walking or running distance, walking or workout duration, exercise time, workout count or mindful minutes. These records may originate from Apple Watch or other apps that save to Health.
Bosh uses this information to calculate progress towards the habit you linked. Health totals and the habit’s Health-source selection stay on that device. Bosh does not upload HealthKit samples, imported Health totals or automatically inferred Health completions to Supabase or RevenueCat. Bosh does not write to or delete records in Apple Health.
Amounts you enter manually in Bosh, targets and explicit habit check-offs are ordinary Bosh records and can sync with your account, including for a habit you have also linked to Health. They are separate from imported Health records.
We do not use Health data for advertising, marketing, data brokerage or selling information. You can change or revoke Bosh’s access in Apple’s Health or system privacy settings. Disconnecting a source does not remove the original records from Apple Health.
Where information is stored and who receives it
On your device. Bosh keeps local copies of your information so you can use your lists offline. Authentication credentials use the platform’s secure storage. Some settings, widget snapshots and the active Focus timer are shared with Bosh’s own extensions through Apple’s app-group storage.
Supabase. V2 uses Supabase for authentication, account-linked database storage and sync. Account information, your chosen profile name and photo, original joining date, tasks and notes/checklist items, habit settings and manually recorded progress, completion decisions, plans, task templates, points/history and relevant preferences can be sent to this service. This also applies to a guest account when it connects. V2’s main database does not use iCloud/CloudKit for sync. Copies from an older version or device backups may still exist under your Apple account and its settings.
Apple and RevenueCat. Apple processes App Store payments. RevenueCat helps Bosh check, restore and manage Boost access and understand subscription activity through its purchase dashboard and reports. RevenueCat receives a Bosh account identifier, purchase and subscription information, and technical information used by its purchase service. Bosh does not send your task titles, notes, checklist content or Health records to RevenueCat. We do not receive your full payment-card details. See Apple’s privacy policy and RevenueCat’s privacy policy.
Widgets, Siri and Live Activities. If you enable these features, selected task or habit content, progress, or a Focus task title and timer can appear on your Home Screen, Lock Screen, Dynamic Island, Mac desktop or Apple’s Siri/Shortcuts interfaces. People who can see those surfaces may see that content. Apple processes Siri requests under its own settings and policies. You can remove widgets, end Live Activities and change notification previews or Siri access in system settings.
Reminders and technical operation. Bosh schedules local reminders and timer notifications with your permission. The app does not currently send a notification-device token to a Bosh push server. Our service providers receive connection information, such as IP addresses and request logs, when the app connects. Apple may make crash reports or TestFlight feedback available to us under your Apple settings and testing choices. Bosh does not include a separate advertising or behavioural-analytics SDK.
We share information with service providers to operate Bosh, with authorities where legally required, or where necessary to protect the service and people’s rights. We do not sell personal information or share it for cross-app advertising tracking.
Why we use information
We use information to provide and sync your lists, authenticate accounts, show your recorded progress, deliver optional features, verify subscriptions, respond to support requests, keep the service secure and meet legal obligations.
Where UK or European data-protection law applies, our legal bases are performing our agreement with you for the app and subscription features; our legitimate interests in operating a secure, reliable service and responding to support; and complying with applicable legal obligations. Optional Health access relies on your permission and, where applicable, explicit consent for health information. You can withdraw that permission without affecting the lawfulness of earlier processing. We do not use your information to make automated decisions with legal or similarly significant effects.
Retention, security and international processing
We retain account content while it is needed to provide your account and the features you use. Some deletions are first recorded as deletion markers so changes can reach other devices. Support, security and transaction records may need to be retained for their relevant support, security, accounting or legal purpose, rather than for the lifetime of your lists.
We use access controls and encrypted network connections. Our providers may process information in countries outside your own. Applicable contractual and legal safeguards govern those transfers. No system can guarantee absolute security. Provider backups and operational logs follow their own retention and expiry schedules; account deletion is not an immediate erasure of every backup copy.
Your choices and account deletion
You can edit your content, change notification and Health permissions, sign out, and request access to, correction of, a copy of, or deletion of your personal information. Depending on your location and the legal basis, you may also have rights to portability, restriction or objection. Email getstuffdone@boshapp.com to exercise these rights. We may need to verify that a request relates to your account.
You can request account deletion in Bosh’s Settings. The flow may ask you to confirm your identity with Apple. Once the server confirms deletion, Bosh removes the account and its associated active Supabase records and owned storage files, revokes the linked Sign in with Apple grant where applicable, and clears the matching local Bosh data and extension caches on that device. A minimal deletion-confirmation receipt is retained to make interrupted requests safely retryable; it contains a hash of a random receipt token and a timestamp, not your task content or Apple credentials.
Other devices, older installations, screenshots or device backups can retain copies. Reconnect your other devices and sign out or remove their local copies as needed. Deleting Bosh does not delete the original records in Apple Health or independently held Apple/RevenueCat transaction records, and it does not automatically cancel an App Store subscription. Manage or cancel that subscription through Apple’s subscription settings.
If you are in the UK, you can complain to the Information Commissioner’s Office. Elsewhere, you may contact your local data-protection authority.
Children and changes
Bosh is not directed at children under 13. If you believe a child has provided personal information inappropriately, contact us so we can investigate and take appropriate action.
We may update this policy as Bosh changes. We will update the date above and communicate material changes through the app or another appropriate channel.