Privacy Policy

Bozz · Last updated 22 June 2026

Bozz is a personal dashboard desktop app. This policy explains what data Bozz handles and how. We aim to collect as little as possible and to keep your data in your control.

What we store

• Account: your email address and an encrypted password, used to sign you in (handled by Supabase authentication).
• Your content: the tasks, topics, notes, calendar feeds, habits, budget entries, and settings you create. These sync to a Supabase database so they are available across your devices.
• Connected integrations: if you connect Gmail, Google Calendar, Notion, or Spotify, the resulting access tokens are stored locally on your device in the app's data file. Email and calendar content is fetched only to display it to you and is not stored on our servers.

What we do not do

• We do not sell or rent your data.
• We do not run third-party advertising or analytics trackers.
• OAuth client secrets and API keys live only in server-side environment variables — never in the app you download.

Third-party services

• Supabase — authentication and data sync.
• Vercel — hosts small serverless functions that exchange OAuth codes for tokens, so provider secrets stay off your device.
• The providers you choose to connect (Google, Notion, Spotify, etc.) per their own privacy policies.

Your choices

• Disconnect any integration at any time from Settings → Connected apps; its token is removed from your keychain.
• Sign out to clear local data on a device.
• To delete your account and synced data, contact us at the address below.

Contact

Questions or deletion requests: augbozzetto@gmail.com.

Bozz is open-source software licensed under the GNU AGPL-3.0. Source: github.com/augboz/bozz.