Privacy policy
Effective November 5, 2026
The short version
- Boosti is a goal game for adults. It needs your goals and your check-ins to work.
- Your friends see only what you choose, tree by tree and circle by circle.
- The AI character starts only after you allow it. Your conversation and goals then go to Anthropic to write the replies.
- There are no ads and no advertising trackers, and your data is not for sale.
- You can clear your conversation and delete your account inside the app.
Who runs Boosti
Boosti is run by Dor Farjun, an individual based in Israel, who is responsible for your data. In this policy that's "we". Questions go to support@boosti.win.
What we collect
A guest identifier. If you save your account: your email, a hashed password and a display name.
An optional photo, your time zone and your language. Your confirmation that you are 18 or older.
Goals, targets, dates, tasks, your check-ins, points, diamonds, coins, your streak, and how you arranged your island.
Your messages to your character, its replies, and the facts it saves about you, if you leave memory on.
Your circles, invites, what each circle may see, who watered what, and who you blocked.
Reports you send or receive, photo review status and any sharing restriction on your account.
Hashed session tokens, a device push token if you turn notifications on, a record of which features you used and when, and server logs. We use your IP address to limit sign-in attempts, and we store it only as a short-lived hash.
Your sign-in token and unsent drafts. Drafts are cleared when you send them, clear the conversation or sign out.
You decide what you type. Goals and chats can reveal sensitive things, such as your health. Share only what you're comfortable with. Boosti is a game, not medical care or an emergency service.
How we use it
To run the game, show your circles what you chose to share, send the reminders you turned on, reply to you through the AI character, reset your password, keep accounts secure, review reports and photos, answer support requests, and see which features work.
We don't use your data for advertising, and we don't sell it.
The AI character
The character runs on Claude, from Anthropic. Nothing goes to Anthropic until you allow it in the app.
What is sent: your messages, recent conversation, goals and tasks, saved memories, your language, your character's name, and activity such as how many days you've tended. What is not sent: your photo, your email and your password.
What it does: it writes replies, plans your goals, suggests next steps, gives each check-in its points and reads your pace. Those results only affect the game. Replies can be wrong.
What Anthropic keeps: under its commercial terms, Anthropic does not train its models on this data by default, and deletes it within 30 days. It can keep data longer when the law requires it or to enforce its usage policy. If its systems flag a chat, the chat can be kept for up to 2 years and safety scores for up to 7 years. Anthropic's retention details.
You can turn AI off at any time in Privacy & AI. That stops new requests. It can't recall what was already sent.
Who can see your data
Your circles. People in a circle see your display name, your approved photo, your place in that circle's league, and each tree at the level you set: everything (title, date and state), the tree only, or nothing. New trees start at nothing. Your tasks and chats are never shared with friends.
The public. Boosti has no public profiles and no public feed.
Us. We review reported content and new profile photos. A new photo stays visible only to you until it's approved. Reports can contain private text, so they are read only to handle the report.
Service providers. These companies process data so Boosti can work:
Hosting, database, logs and delivery of this website.
The AI character, after you allow it.
Push notifications, if you turn them on. Notification text stays generic and avoids your goal titles.
Password reset emails.
The law. We may disclose data if the law requires it, or to protect someone's safety.
Some of these companies process data outside your country, including in the United States.
How long we keep it
Until you delete it or delete your account. Inactive accounts are not deleted automatically.
Until you clear it. Clearing removes your messages, saved memories, pending goals and stored check-in text. Your goals and game progress stay.
30 days. Password reset links are short-lived and work once.
Until the account of the person who reported, or the person reported, is deleted.
Deleted data leaves the active database right away. It can stay in the database provider's recovery history for up to 30 days, and then it's gone.
Your choices and rights
In the app: set who sees each tree, turn AI off, stop saving memories, forget a fact, clear your conversation, block someone, turn notifications on or off, and delete your account.
By email: you can ask for a copy of your data, ask us to correct it, or ask us to delete it. Write to support@boosti.win. We reply within 30 days.
Depending on where you live, the law may give you more rights, including the right to complain to your data protection authority. In Israel, that's the Privacy Protection Authority.
In the EU and UK: we rely on your agreement with us to run the game, your consent for AI and notifications, and our legitimate interest in safety and abuse prevention. You can withdraw consent at any time.
Age
Boosti is only for adults 18 and over. If you believe someone younger has an account, tell us and we'll delete it.
Security
Data travels over HTTPS. Passwords and session tokens are stored hashed. On phones, your sign-in token is kept in the device's secure storage. No system is perfectly secure, so we can't promise that nothing will ever go wrong.
This website
boosti.win uses no cookies and no analytics. Cloudflare delivers the site and processes technical data, such as your IP address, to do that.
Changes
If this policy changes, we'll update the date at the top. If a change matters, we'll tell you in the app first.