Privacy Policy

None, for us. We operate no server that receives data from the app, and the app contains no analytics or advertising framework.

One service does receive data on our behalf: the provider that validates subscriptions, and only when the app checks or makes a purchase. What it receives is listed under Subscription below. It never includes your name, your email address or your payment details.

The app asks for a first name on first launch, and it is optional: you can continue without giving one. It is used only to compose the eyebrow shown above the affirmation and the title of the daily notification.

That name is written to the app’s local storage, shared with its widgets. It is never sent over a network, never attached to a request, and never inserted into the text of an affirmation. You can change or remove it in the app’s Settings.

The app’s entire state stays locally on your iPhone: your first name, the intentions you picked at onboarding, the life themes you turned on, your favourite affirmations, the pins and photos on your vision board, your visual style, your app icon, your language, the time of the daily notification and your streak.

Photos you add to the vision board are copied into the app’s private storage and never leave it: they are not uploaded, not analysed, not shared. Deleting a tile in the app deletes it for good.

This information is deleted when you delete the app. If you use iCloud or an encrypted local backup, that backup may include it; those backups are governed by Apple’s terms, not ours.

The app ships with its full corpus embedded and is entirely usable offline. It makes two kinds of network request: downloading a versioned corpus file published on this website, so corrections can reach you without an app update; and the subscription calls described under Subscription, which happen at launch and around a purchase or a restore.

The corpus request is anonymous. It is authenticated with App Attest, an Apple mechanism that proves the request comes from a genuine installation of the app: the proof rests on a cryptographic key generated inside your iPhone’s Secure Enclave. That key names no person, does not follow reinstalls, and carries no account, no advertising identifier and no cookie.

Like any HTTPS request, both kinds necessarily expose your IP address to the host receiving them, which may keep it briefly in standard server logs. We do not use those logs to identify or profile anyone, and we do not join them to anything else.

Girl Boss Plus is an auto-renewing subscription sold through Apple’s App Store. Apple handles the payment, the billing and the renewal; we never see or receive your payment details. Apple provides us with aggregated, anonymous sales reports.

To validate a purchase and to restore your access from one device to another, the app uses RevenueCat, a subscription service operated by RevenueCat, Inc. in the United States. It acts as our processor: it handles this data on our instructions, for that purpose and for no purpose of its own.

At each launch and at each purchase, the RevenueCat component embedded in the app sends to its servers: a random, anonymous identifier it generates for your installation, your App Store purchase receipt and transaction history, the app version, the iOS version, the device model and the locale. It never sends your name, your onboarding first name, your email address or your payment details. As with any HTTPS request, your IP address is exposed in transit.

This data is hosted in the United States. The identifier is random, generated on your device and joined to nothing else: it names a subscription, not a person. RevenueCat’s own privacy policy: https://www.revenuecat.com/privacy

The daily notification is scheduled locally by your iPhone, and its content is computed on the device from the embedded corpus. There is no push server: neither your first name nor the affirmation of the day passes through us.

The app is not directed at children, and it asks no one for personal information — children no more than anyone else.

This site is a set of static pages. It sets no cookie, embeds no analytics, loads no font, script or image from a third-party domain, and has no contact form. The hosting provider may keep standard access logs.

Because we hold no personal data about you, there is next to nothing for us to export, correct or erase: your first name, your favourites and your photos are on your phone, under your sole control. The one identifier that exists elsewhere is the random one generated for your installation by our subscription provider: it names no person, and we can have it erased on request, along with the purchase history attached to it. Erasing it does not cancel a subscription, which lives with Apple. Write to us and we will look into it.

If the app ever changes what it does with data, this page changes first, with a new date at the top. Substantive changes will also be described in the app’s release notes.

Questions about privacy: girlbossapp@captaindev.io