Privacy Policy

Who we are

Bosco is operated by Bosco Health (ABN 97 188 711 415), based in Queensland, Australia. You can reach us at support@mybosco.com.au.

About this policy

This policy covers two products operated by Bosco Health: the Bosco patient app (available on iPhone and Android) and the Bosco Health clinician dashboard (available at app.mybosco.com.au). Where practices differ between the two products, this is noted clearly below.

Bosco Patient App

Your care plan data

Everything you enter into Bosco: care tasks and clinician notes, is stored locally on your device only. Bosco Health have no access to this data. It is never transmitted to our servers or any third party, except where you choose to use the document scanning feature, accept a care plan from your clinician, or generate a progress snapshot to share with your clinician during an appointment (see below).

Document scanning

When you photograph or submit a document or text to Bosco, it is sent to Anthropic's Claude API to be read and interpreted so the care tasks can be extracted. This content is processed for that purpose only and is not retained or stored by Anthropic. By using the scanning feature, you consent to your document being sent to Anthropic for this purpose.

Accepting a care plan from your clinician

If your clinician sends you a care plan through the Bosco Health dashboard, you will be presented with a consent form before you can receive it. This consent form explains that by accepting the care plan, you agree to share the date the care avatar last completed a task with the clinician who sent it. This allows your clinician to see whether Bosco is being used between appointments.

If you do not consent, you will not receive the care plan through this method. You can still use Bosco independently by entering your care plan manually or through document scanning.

When you consent and accept a care plan, the following information is stored on our servers and is visible to the clinician who sent you the care plan and to Bosco Health:

• The nickname your clinician assigned to identify your care avatar
• The date and time the care avatar last completed a task
• The date and time you accepted the care plan (which serves as the record of your consent)

This information is not shared with any party other than the clinician who sent you the care plan.

Patient progress snapshot

If you choose to share the care avatar's progress with your clinician during an appointment, you can generate a 6-digit code from within the Bosco app. You provide this code to your clinician, who enters it into the Bosco Health dashboard to view a snapshot of the care avatar's task completion, mood check-ins, and the reasons logged alongside them (journal entries not included) over the last 30 days. This code expires after 15 minutes. Generating a snapshot is entirely your choice and is always initiated by you, not your clinician.

Anonymous usage data

Bosco collects anonymous usage data, such as task completion patterns and feature usage, to help us understand how the app is being used and improve the experience over time. This data contains no personally identifying information and cannot be linked back to you in any way. There is no user account, and no name, email address, or identity of any kind is collected or stored.

This data is collected on a regular basis. Aggregated, anonymised insights may be used internally or shared with relevant parties to evaluate and demonstrate the app's effectiveness. No data that could identify an individual is ever shared.

Third-party services (patient app)

Bosco uses the following third-party services:

• Anthropic Claude API — used to read and interpret care plan documents submitted by users; content is not retained by Anthropic
• Supabase — used to store care plan send records, consent records, last active data, and anonymous analytics events (servers located in Sydney, Australia)
• PostHog — used for anonymised usage analytics to help us understand and improve the app

Bosco Health Clinician Dashboard

Account information

To use the Bosco Health dashboard, clinicians create an account using their name, email address, and associated practice name or organisation. This information is stored securely on our servers and is used to manage access, personalise the dashboard experience, and communicate with account holders.

Care plan send records

When a clinician sends a care plan to a patient, a send record is created containing the nickname the clinician assigned to the patient and the care plan content. Care plan content used for a one-time send is deleted from our servers once received by the patient's device. Saved templates remain stored for as long as the clinician maintains an active account.

Patient activity data

Once a patient has consented to share their activity, clinicians on the Personal Pro plan can see the date the care avatar last completed a task and access a 30-day progress snapshot when the patient generates a code during an appointment. This data is stored in our database and is accessible to the clinician who sent the care plan and to Bosco Health. It is not shared with any other party.

Anonymous usage data (dashboard)

Bosco Health collects anonymised usage data from the clinician dashboard, such as which features are used and how frequently, to help us understand how clinicians use the dashboard and improve the experience over time. This data does not identify individual clinicians or their patients and is not shared with any third party.

Billing information

Billing for paid dashboard plans is handled by Stripe. Bosco Health does not store credit card or payment details directly. Stripe's privacy policy governs the handling of payment information.

Third-party services (dashboard)

• Supabase — secure cloud database for account data, templates, care plan send records, patient activity data, and anonymous analytics events (servers located in Sydney, Australia)
• Stripe — payment processing for paid plans
• Anthropic Claude API — used to parse care plan documents uploaded by clinicians

Data retention

Patient app data lives on the patient's device and stays there. Bosco app users can delete it at any time by removing the app. Anonymised analytics data is retained for internal analysis purposes and cannot be linked back to any individual.

Dashboard account data is retained for as long as the account is active. Patient activity data associated with a clinician's send record is retained while that send record exists. You can request deletion of your account and associated data at any time by contacting us at support@mybosco.com.au.

Your rights

Under the Australian Privacy Act 1988 and the Australian Privacy Principles, you have the right to access or request deletion of any personal information we hold. Given that no personally identifying information is collected, the data we hold is limited to anonymised analytics. For any questions or requests, contact us at support@mybosco.com.au.

Children

Bosco is not directed at children under 13. We do not knowingly collect information from children under 13.

Changes to this policy

We may update this policy from time to time, particularly as new features are introduced. We will notify you of significant changes through the app or by email. Continued use of Bosco after changes means you accept the updated policy.

Contact us

Questions about your privacy? Email us at support@mybosco.com.au.