Privacy Policy

1. Who we are and how to reach us

Boostera Labs Ltd (company number 11921132) is the data controller responsible for your personal data when you use Suave. That means we decide what data is collected and how it is used.

For any privacy question or request — including access, deletion or export of your data — email privacy@suave.social. We aim to respond within a few business days and, in any case, within the timeframes required by law.

2. The data we collect

Account data: the email address you register with and a securely hashed version of your password. We never store your password in plain text.

Content you submit: the messages, scenarios, media and text you provide so the coach can respond, along with the AI-generated results we return to you and your practice history.

Credits and purchase records: your credit balance, the ledger of how credits are earned and spent, and — once payments are enabled — a record of the packs you have bought.

Technical and usage data: basic logs such as your IP address, browser type, timestamps and error diagnostics that we need to operate, secure and debug the service.

Communications: any messages you send us for support, so we can help you and keep a record of the request.

3. How we use your data

To provide the core coaching experience — running practice sessions, generating results and keeping your history available to you.

To manage your account, authenticate you securely and let you delete your account when you choose.

To operate the credit system and, once enabled, to process purchases of credit packs.

To keep the service secure, prevent abuse and fraud, diagnose problems and improve reliability.

To communicate with you about your account, respond to support requests, and send essential service notices.

To comply with our legal, accounting and regulatory obligations.

4. Legal bases for processing

We rely on 'performance of a contract' to provide the service you sign up for, including running sessions and managing credits.

We rely on our 'legitimate interests' to secure the service, prevent abuse, and improve the product — balanced against your rights.

We rely on your 'consent' for optional cookies and any optional communications; you can withdraw consent at any time.

We rely on 'legal obligation' where we must keep certain records, for example for accounting or to respond to lawful requests.

5. AI processing

To generate coaching results we may transmit the content you submit to third-party AI model providers that act as our processors. They process your content only to return a result to us and are bound by contractual confidentiality and data-protection terms.

We do not permit these providers to use your content to train their own models where we can control that setting, and we send only what is needed to produce your result. AI output is generated automatically and should be treated as guidance rather than professional advice.

6. Cookies and similar technologies

We use a small number of cookies and similar browser storage as described in our Cookie Policy. Necessary cookies keep you signed in and remember your cookie choice; optional analytics and marketing storage runs only if you opt in.

You can accept or decline non-essential cookies from the banner shown on your first visit, and change your choice at any time using the Manage Cookies link in the footer.

7. Sharing your data

We do not sell your personal data. We share it only with service providers that help us run the product — such as hosting, storage, and AI model providers — and only to the extent they need it to perform their service for us.

We may also disclose data where we are legally required to do so, to protect our rights or the safety of others, or as part of a business reorganisation, in which case we will tell you if the change affects how your data is handled.

8. International transfers

Some of our providers may process data outside the UK or the European Economic Area. Where that happens, we rely on appropriate safeguards — such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses — so your data keeps an equivalent level of protection.

9. How long we keep your data

We keep your account and practice history for as long as your account is open, so the service remains useful to you.

When you delete your account, we delete or irreversibly anonymise your personal data within 30 days, except for limited records we are required to retain for legal, tax or accounting reasons, or to resolve disputes, which we keep only for as long as necessary.

Backups are cycled on a rolling basis and any residual copies are overwritten in the ordinary course of operations.

10. How we protect your data

We use technical and organisational measures appropriate to the risk, including encryption in transit, hashed passwords, HTTP-only session cookies, access controls, and least-privilege access for our systems.

No online service can be completely secure, but we work to protect your data and will notify you and the relevant authority of any breach where the law requires it.

11. Your rights

You have the right to access the personal data we hold about you, to correct it if it is wrong, to have it deleted, to export it in a portable format, and to restrict or object to certain processing.

You can delete your account and its data at any time from Settings, or you can exercise any of these rights by emailing privacy@suave.social. We will not charge you for a reasonable request and will not discriminate against you for exercising your rights.

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk) or to your local EU supervisory authority. We would welcome the chance to resolve any concern first.

12. Children

Suave is intended for adults and is not directed at children. You must be at least 18 years old to create an account. We do not knowingly collect personal data from anyone under 18; if we learn that we have, we will delete it.

13. Changes to this policy

We may update this policy as the product evolves or the law changes. When we do, we will update the page and, where the change is significant, take reasonable steps to bring it to your attention. Continued use after an update means you accept the revised policy.

14. Contact

Questions about this policy, or want to exercise a right? Email privacy@suave.social and we will help.