The short version. Anything you write inside the app stays on your device. If you join through your organisation and agree to reporting, your employer receives count-only summaries of the actions you complete, tagged with a random device identifier that is not linked to your name, email, or anything you have written. That is the whole model.
Who this policy applies to
This policy governs the Boardroom & Breathwork™ mobile application published by Aradhana Arya on the Apple App Store and Google Play. It applies to every user of the app, whether you signed up personally or entered through an organisation code.
What we collect from every user
On device only
The following stays entirely on your device. It never travels to a server. Removing the app deletes it. We do not maintain a backup copy.
- Your name, email address, and personal "why" statement
- Your leadership profile and pathway stage from the quiz
- Your S.O.F.T goal and identity practice answers
- Your morning intentions, evening let-go entries, gratitude entries, and any journal-style writing
- Your weekly review reflections
- Your circle-of-life ratings
- Your specific emotion check-in values
- Your notification preferences and app settings
Sent to our infrastructure
We use two managed services, Supabase (Australia region) and RevenueCat, to run the parts of the app that require a server. The only data these services see is:
- A random device identifier, generated on your device the first time you open the app. This is a random string. It is not linked to your Apple ID, your email, your name, your IP address, or any other identifier of you as a person.
- Your subscription status, handled through the Apple App Store and RevenueCat. Apple provides an anonymised transaction receipt. We do not receive your Apple ID or payment card details.
What we share with your organisation
This section only applies if you have (a) joined via an organisation code and (b) opted in to engagement reporting on the setup screen. Both are required. If either is missing, nothing in this section is shared.
Your organisation's designated administrator can view a dashboard of aggregated daily counts of the following actions across all members of that organisation. Individual identities are never surfaced. Only counts, only per day, tagged with a random device identifier that cannot be reversed to a person:
- Morning rituals you complete
- Evening rituals you complete
- Weekly reviews you complete
- Profile quiz completions
- Soft-landing tool uses (breathing, grounding, or your reset list). Count only, never which tool or what came up for you.
- RSVPs to group sessions
- Milestone days reached in your journey: day 7, day 14, day 21, day 30, day 45, day 75
- Transitions between pathway stages
- Journey restarts
- The industry tag associated with your organisation, for reporting purposes only
Structural, not policy. The pipeline that carries counts to your organisation has no code path for content data. Anything you have written physically cannot be uploaded through it. This is a design decision baked into the app, not a promise we ask you to trust.
What is never shared with your organisation
The following remain on your device at all times, regardless of any settings, and cannot be uploaded:
- Anything you have written inside the app: intentions, quiz answers, identity practice responses, S.O.F.T goal, evening let-go, gratitude entries, weekly review reflections, or any journal-style content
- The specific value chosen for any emotion check-in (only the count of check-ins is available)
- Your leadership profile or archetype
- Any specific answer you have given on any screen
- Your account details, email address, phone number, or name
How long we keep data
On-device data stays as long as the app is installed. Uninstalling the app deletes it. There is no backup.
Engagement counts on the Supabase side are retained for the duration of your organisation's active pilot plus 90 days. After that, they are deleted. Aggregate reports produced during the pilot may be retained by the organisation for its own records; we do not control that.
Subscription records held by Apple and RevenueCat are retained per those companies' own retention policies, which we do not control. See their privacy policies for detail.
Your rights
You can, at any time:
- Withdraw your consent to engagement reporting from within the app. New counts stop being uploaded immediately.
- Remove the organisation code from your profile, which deactivates the reporting connection.
- Delete the app, which removes every piece of on-device data.
- Request deletion of any engagement counts already uploaded under your device identifier by emailing us. Because the identifier is not linked to your name, we may need to ask you to identify which device (which usually means the date you first opened the app, so we can find the right rows).
If you are a resident of the European Economic Area, the United Kingdom, or California and would like to exercise rights available under GDPR, UK GDPR, or CCPA, contact us using the details below.
Third parties we use
- Apple for App Store distribution and subscriptions
- Supabase (Sydney region) for the organisation reporting database
- RevenueCat for subscription state management
- Expo for over-the-air JavaScript updates to the app
We do not use advertising networks, analytics platforms that track individuals, or any social media tracking pixels.
Children
Boardroom & Breathwork™ is intended for adults working in leadership roles. It is not designed for children under 16 and we do not knowingly collect data from anyone under that age. If we become aware that a child has provided data, we will delete it.
Changes to this policy
If we change this policy in a way that meaningfully affects what we collect or how we share it, we will update the effective date at the top and notify current users in-app before the change takes effect. Minor edits (typos, wording) do not require notification.
Contact
For any question about this policy, or to exercise any of your rights above:
Aradhana Arya
aarya@aradhanaarya.com
aradhanaarya.com