← Back to The Board

Privacy Policy

Effective date: June 29, 2025

This Privacy Policy explains what information The Board collects, how it is used, and the choices you have. The Board is a personal decision-support tool that uses AI mentor personas to help users think through questions.

Information we collect

When you create an account or sign in with Google, we collect:

• Name - to display in the app and address you in sessions
• Email address - to identify your account
• Google account ID - a unique identifier provided by Google when you use Google Sign-In, used only to link your Google account to your Board account

If you register with email and password instead, we collect your name, email address, and a securely hashed password (we never store your password in plain text).

Information you provide

The Board also stores content you create while using the app:

• Questions and decisions you submit to the board
• Commitments and next steps generated during sessions
• Ratings and notes you provide on mentor responses
• Books or documents you upload for mentor generation (processed content only; no raw file is retained after processing)

All of this content is stored locally on the server running the app and is associated with your account.

How we use your information

• To authenticate you and maintain your session
• To display your name in the app interface
• To store and retrieve your personal board data (commitments, sessions, mentor rules)
• To improve the quality of mentor responses over time based on your feedback

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Google Sign-In

If you choose to sign in with Google, The Board uses Google OAuth 2.0 to authenticate you. We request the following scopes:

• openid - to confirm your Google identity
• email - to retrieve your email address
• profile - to retrieve your display name

The Board does not access your Google Drive, Gmail, contacts, calendar, or any other Google service. We only use the information returned at sign-in to create or link your account.

Your use of Google Sign-In is also governed by Google's Privacy Policy.

Data storage and security

Your account data is stored in a SQLite database on the server. Session data is stored in a signed, encrypted cookie. Passwords are hashed using industry-standard bcrypt via Werkzeug before storage. We do not store plain-text passwords.

While we take reasonable precautions, no system is completely secure. The Board is designed as a personal tool and is not intended for storing sensitive business or personal secrets.

Data retention

Your data is retained for as long as your account exists. You can contact us to request deletion of your account and all associated data at any time.

Third-party services

The Board uses the following third-party services:

• Google OAuth - for sign-in authentication (Privacy Policy)
• OpenRouter - to route requests to AI language models. Your questions are sent to OpenRouter's API to generate mentor responses. See OpenRouter's Privacy Policy.

No other personal data is shared with third parties.

Your rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your account and data

To exercise any of these rights, contact us at the address below.

Children's privacy

The Board is not directed at children under 13. We do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this Privacy Policy from time to time. Continued use of The Board after changes are posted constitutes acceptance of the updated policy.

---