How Kurot LLC collects, uses, and protects your information in Boss Up — The App. Written for humans, not billed by the hour.
Last updated: July 7, 2026
This Privacy Policy explains how Kurot LLC ("we," "us," or "our") handles your information when you use Boss Up — The App (the "App"), a native mobile app for iOS and Android. Kurot LLC owns Boss Up — The App and is responsible for your data; the App is developed and distributed by Path & Pace LLC.
The App delivers the book Boss Up plus an interactive, gamified "employee onboarding" experience set in a fictional store called TonyMart — including reading, a community chat, stats, and saved highlights. An account is required to use the App.
For the purposes of data-protection law (including the GDPR), Kurot LLC is the "data controller" for the App. If you have any questions about this policy or your data, contact us at support@path-and-pace.com.
One clarification about roles. Boss Up — The App is owned by Kurot LLC and is developed and distributed by Path & Pace LLC. This policy covers only the App — it does not cover the separately-operated Boss Up book website (bossupthebook.com) or any purchases made there.
Here's the whole thing in plain English. The sections below add the detail.
We do not collect your camera, precise location, contacts, or microphone data. We do not use advertising IDs or third-party tracking SDKs.
We use your information only to run the App and its features:
This is the heart of how the App treats your privacy, so we want to be clear about it.
Legal basis (GDPR). For users in the EU and UK, the lawful basis for this cloud processing is your consent, which you give by switching on data sharing and can withdraw at any time. Withdrawing consent doesn't affect processing that already happened before you withdrew it.
The community chat — the "Break Room" — is a shared, cloud-based space that becomes available when you turn on data sharing.
We keep our list of third parties short. These providers process data on our behalf to make the App work — they're our "data processors" (GDPR) / "service providers" (CCPA), and they're not permitted to use your data for their own purposes.
We use Google Firebase for our core backend:
Google acts as a data processor / service provider for us. You can read Google's privacy policy at https://policies.google.com/privacy.
Apple is the platform and distributor channel for the App (the App Store) and handles push-notification delivery to Apple devices through the Apple Push Notification service (APNs).
What we don't do. The App uses no third-party advertising networks and no third-party analytics or tracking SDKs. We do not sell or rent your personal information.
Payments. The App currently has no in-app purchases and processes no payment data. (The physical book and e-book may be sold separately on the book website — that's outside this App and this policy.)
The App can send push notifications using Firebase Cloud Messaging. Notifications are optional.
The App only asks for a permission at the moment it's needed, and only for these two things:
The App does not request access to your camera, location, contacts, or microphone.
We keep cloud data for as long as your account exists. It's deleted or purged when you delete your account, or when you withdraw data-sharing consent (turning the setting off purges the synced copy from the server). We don't keep separate copies of our own — any residual data lives only in the routine backups kept by our infrastructure provider, Google Firebase, and is purged on Google's standard backup schedule. Device-local data stays on your device until you delete it or uninstall the App.
We use reasonable measures to protect your data: it's encrypted in transit, and backend access is restricted by security rules so users can only read and write their own data (plus the shared community chat). No method of transmission or storage is 100% secure, so we can't guarantee absolute security — but we work to protect your information.
We process data on Google Firebase infrastructure, which may store and process data in the United States. If you use the App from outside the U.S., your information may be transferred to, stored in, and processed in the U.S. and other countries where our providers operate. Where required, such transfers rely on appropriate safeguards (for example, standard contractual clauses). By using the App and opting into cloud features, you understand your data may be processed in these locations.
Delete your account right inside the App. Go to Settings → Delete account. This deletes your authentication record and associated profile data.
You can also email us at support@path-and-pace.com to request deletion, and we'll take care of it.
Other choices you have:
Depending on where you live, you have rights over your personal information. We honor these rights for all users where we can, and you can exercise any of them by emailing support@path-and-pace.com. We won't discriminate against you for exercising your rights.
| Right | What it means |
|---|---|
| Access | Ask for a copy of the personal information we hold about you. |
| Correction | Ask us to fix information that's inaccurate or incomplete. |
| Deletion | Ask us to delete your information (also available in-app via Settings → Delete account). |
| Portability | Ask for a copy of your data in a portable, machine-readable format. |
| Withdraw consent | Turn off data sharing at any time to stop cloud processing and purge synced data. |
You have the rights above, plus the right to object to or restrict certain processing, and the right to lodge a complaint with your local data protection authority. As explained in Section 5, our legal basis for cloud processing is your consent, which you can withdraw at any time.
You have the right to know what personal information we collect and how we use it, to access and delete it, to correct it, and to be free from discrimination for exercising these rights. We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising. We don't use your data for targeted advertising at all. To exercise your rights, email support@path-and-pace.com.
We may need to verify your identity before acting on a request, and we'll respond within the timeframe required by law.
The App is not directed to children under 13, and it age-gates at 13 (you confirm you're at least 13 to use it). We do not knowingly collect personal information from anyone under 13.
If you're a parent or guardian and you believe a child under 13 has provided us with personal information, please contact us at support@path-and-pace.com and we'll delete it.
We may update this Privacy Policy from time to time. When we do, we'll revise the "Last updated" date at the top and bottom of this page. If we make material changes, we'll provide a more prominent notice where appropriate (for example, in the App). Your continued use of the App after an update means you accept the revised policy.
Questions, requests, or concerns about your privacy? We're happy to help.