Privacy

What Boone holds, and what you can do about it.

Boone is a shared planning memory for one family. It keeps what your family tells it so that it can help you plan. This page says exactly what that means — what is stored, who else can see it, how long it lasts, and how to take it back.

Last updated 13 August 2026.

Where the conversation actually happens

Boone is not an app you install. It runs inside Claude or ChatGPT, which means the conversation belongs to them, not to us. When you talk to Boone, your assistant decides what to send us; we only ever see the individual requests it makes.

So your chat history, and whatever your assistant keeps or learns from it, is governed by Anthropic's or OpenAI's privacy policy and your settings with them — not by this page. We cannot see that transcript, and we cannot delete it for you.

This page covers the other half: the records Boone keeps on your family's behalf.

What Boone keeps

  • Your family's records. The things you ask Boone to track — errands, appointments, projects — and the durable facts you ask it to remember, such as a goal for the year or a constraint on Tuesdays.
  • Your own words, where they are the evidence. When Boone saves something, it stores the sentence you said it in. That is what lets you check later that it heard you correctly, and it is what makes a claim that "you told me to" checkable rather than merely asserted.
  • A record of every change. What Boone proposed, what was actually applied, and which account it came through.
  • Who is in your family. Each member's email address, an optional display name, and their role. Invitations you have sent, until they are accepted, withdrawn, or expire.
  • Feedback you choose to send us, in your own words — see below, because this is the one thing that deliberately leaves your family.

What Boone does not keep

  • Your chat transcript. We never receive it, only the specific requests your assistant makes.
  • Passwords. There are none — you sign in with a code sent to your email, or with Google or Apple.
  • Payment details. Boone is free right now and takes no payments.
  • Your family's conversation in our server logs. Logs record that a request happened and whether it worked, not what was said.
  • Anything from another family. One family's records are reachable only by that family's members.

Who else touches it

Boone is a small product and it does not build everything itself. These are the companies involved, and what each one actually sees.

Amazon Web Services Hosts the whole service and stores your family's records, in the United States (the us-east-1 region).
Stytch Handles signing in. Holds your email address and, if you use Google or Apple, the link to that account. Sees nothing your family tells Boone.
Resend Delivers the email Boone sends — today that is invitations only. Sees the recipient's address and the invitation message.
Cloudflare Serves this website. Sees requests for these public pages; no family records pass through it.
GitHub Receives feedback you send, and nothing else. See the next section.

We do not sell your family's information, we do not run advertising, and we do not use what your family tells Boone to train any AI model.

Feedback leaves your family, on purpose

If you ask Boone to send us feedback, it asks you to confirm, and then files your message as an issue on our GitHub tracker so we can act on it. That tracker is private — visible to Boone's team, not published on the open internet — but it is still outside your family and outside your control: we cannot unsend it, and deleting your family later does not remove it.

What goes with it: your message, exactly as you approved it, plus two anonymous identifiers for your family and your account. No name, no email address, nothing from your list, and no part of your conversation.

Boone always asks before doing this. It never happens on its own.

How long things are kept

Two different questions, so the table answers both: how long something keeps working, and how long we actually store it.

Where something below expires automatically, the time given is when it becomes due for deletion rather than the moment it disappears. The clean-up runs on its own schedule and can lag by a few days. A deletion you ask for is not like this — that happens immediately.

Your saved facts Until you delete one, or your family is deleted. Deleting is immediate and there is no waiting period.
Your list Until your family is deleted. Closing something out marks it done and keeps it — there is no way to delete a single item today, which is a real gap rather than a policy. Deleting the family removes all of it.
The record of a change Boone made 90 days.
A change to who is in your family Kept for as long as the family exists. Who joined, who left, and who changed somebody's role is the one record we do not expire — it is the history that makes the rest accountable.
An invitation you sent Usable for 14 days, and you can withdraw one sooner. The record that it was sent, and what became of it, is kept for as long as the family exists — it is part of the history above.
Something Boone is waiting for you to confirm Around 30 minutes, then it lapses and has to be proposed again. The lapsed record becomes due for automatic deletion about a day after that.
Backups 35 days. A deletion is immediate in the live service, and the backup window has to roll past before the last copy is gone.

What you can do

All of this is conversational — you ask Boone, in your own words, inside the assistant you already use.

  • See everything. Ask what Boone knows about your family, and it tells you.
  • Get a copy. Ask for everything it holds and it gives you the lot — your records, your roster, and the history of changes.
  • Correct it. Anything Boone has wrong, you can fix.
  • Delete one thing. Ask it to forget a saved fact and it is gone, along with the copies of it in Boone's own records. One known gap: if you told Boone two separate things in a single sentence, the words of the deleted one can survive inside the other. We are fixing it; until then, ask for a copy of everything if you want to check.
  • Delete the whole family. An owner can erase everything Boone holds about your family. There is no undo.
  • Leave. Any member who is not an owner can leave, without anyone's permission. An owner has to hand the family over first, or delete it if they are the only one left. An owner can also remove a member. Either way that ends access; it does not remove what they contributed, which stays with the family.

You do not need to ask us to do any of this, and there is nothing to fill in. If something does not work, tell us — the section below says how.

What "you confirmed this" actually means

There are two ways something lasting gets saved, and they leave different records.

You asked for it outright. Boone saves it and tells you, with no second question — asking would only be making you say the same thing twice. There is no separate "yes" because there was no separate question.

What gets recorded there is your assistant's account of what you said, stored alongside the change. We cannot check that it copied you accurately, and we do not claim to: what it buys is that a made-up instruction is written down where you can read it back, rather than being invisible. Ask Boone what it has saved and you are reading your assistant's claim, which is the point — if it does not sound like you, it wasn't.

Boone worked it out from something you said in passing. Then it asks first, and records that the answer was yes.

Being straight about what that second record proves: it proves the request came from your family's signed-in session and matched exactly what Boone offered to do. It does not prove which person was at the keyboard, or that the wording your assistant showed you was Boone's own — your assistant runs the conversation and can paraphrase. That is a real limit, and we would rather write it down than let the word "confirmed" carry more weight than it can.

Children

Boone is for adults planning a household, and accounts are for adults. A family will naturally mention children while planning — a swim lesson, a birthday, a school run — and that is ordinary family logistics, kept like anything else on this page and deletable in the same ways. We do not create accounts for children and do not knowingly collect information directly from them.

If this page changes

We will update the date at the top. If a change materially affects what happens to your family's information, we will say so through Boone rather than quietly editing the page and hoping you re-read it.

Getting in touch

The quickest route is Boone itself: ask it to send us feedback and your message lands on our tracker, where we will see it. For anything about privacy specifically — including a request we have not built a button for — email support@iamboone.app.

Boone is a Kinrich Labs project.