Privacy Policy

1. Summary

• RouteBoss does not operate any server or backend. There is no RouteBoss account, and we do not receive your traffic, DNS queries, or network configuration.
• Your configuration (endpoints, routing rules, DNS policy, profiles) is stored locally on your device.
• Secrets, including WireGuard private keys, are stored in the iOS/iPadOS Keychain, never in plain text, and never transmitted to us.
• Activity history (a local log of routing and configuration events) is stored on-device, is configurable, and can be disabled entirely or set to not retain history.
• We do not perform content inspection of your network traffic.
• We do not use your data to train any AI model. RouteBoss uses no AI in its packet routing or configuration path.

2. Information RouteBoss Stores Locally

RouteBoss stores the following on your device only, unless you explicitly export or share it yourself:

• Configuration data: WireGuard endpoints, endpoint groups, routing rules, DNS policy, on-demand triggers, Quick Rules, and Expert Routing rules you create.
• Secrets: WireGuard private keys and related credentials, stored in the Apple Keychain using the protections Keychain provides. The app database stores only opaque references to these secrets, never the secrets themselves.
• Activity log: A local record of routing, configuration, and automation events, used to show you what RouteBoss did and why (e.g., the "Why" trace shown in the Activity tab). This log:
  • Is stored only on your device.
  • Has a configurable retention period.
  • Can be disabled entirely in Settings, in which case no activity is recorded.
  • Never contains your browsing destinations, DNS query contents, packet contents, TLS metadata, or Keychain secret values — only safe, fixed descriptions of actions RouteBoss took (e.g., "Enabled Endpoint," "Restored Connectivity").
• Diagnostics you generate: If you use RouteBoss's Support Report or diagnostics export features, that report is generated on your device and is only sent anywhere if you choose to share it yourself (for example, by emailing it to support).

3. Information We Do Not Collect

We do not operate a server, so we do not receive, log, or have access to:

• Your network traffic or its contents.
• Your DNS queries or lookup history.
• The WireGuard endpoints, IP addresses, or hostnames you configure.
• Your private keys or other secrets.
• Analytics about how you use the App, unless Apple's own platform-level services (below) are separately enabled by you.

4. Apple Platform Services

RouteBoss runs on Apple's platform and may interact with Apple frameworks (NetworkExtension, CryptoKit, Keychain, etc.) that are governed by Apple's own privacy practices, not ours. If you have enabled App Analytics, Crash Reporting, or similar diagnostics sharing with Apple at the operating-system level, that data is collected and handled by Apple under Apple's own privacy policy, not by us, and we do not receive it.

If a future version of RouteBoss integrates a third-party crash-reporting or analytics SDK, this policy will be updated before that version ships, and the change will be reflected in the App Store's Privacy Nutrition Label.

5. Third-Party DNS Resolvers and Endpoints

If you choose a DNS resolver (such as Cloudflare, Quad9, or Google Public DNS) or a WireGuard endpoint, your DNS queries or network traffic will be sent to that third party according to your configuration. That third party's own privacy policy governs how it handles your queries and traffic — RouteBoss has no visibility into or control over that handling. Review the privacy policy of any DNS resolver or endpoint operator you choose to use.

6. Data Sharing

We do not sell, rent, or share your information with third parties, because we do not collect it in the first place. There is no RouteBoss server to share data from.

7. Data Retention and Deletion

Because all RouteBoss data lives on your device, you control retention directly:

• Disable or clear Activity history at any time in Settings.
• Delete individual endpoints, groups, profiles, or rules at any time.
• Uninstalling RouteBoss removes its local database and app-group storage from your device. Keychain items are removed by iOS according to standard app-uninstall Keychain behavior for this app's access group.

8. Children's Privacy

RouteBoss is not directed at children and we do not knowingly collect information from children, consistent with the fact that we do not operate a server or collect information from any user. If you believe a child has provided us information (for example, through a support email), contact us using the information below and we will address it.

9. Your Rights

Because RouteBoss does not collect or store your data on any server we control, there is no RouteBoss-held dataset to access, correct, or delete on request — that data already lives, and stays, on your device, under your control. If you contact us directly (e.g., for support), we will handle any personal information you send us (such as your email address) only for the purpose of responding to you, and will delete it upon request once the matter is resolved.

If you are located in a jurisdiction with specific statutory privacy rights (such as the EU/UK GDPR or the California CCPA/CPRA), those rights — including access, correction, deletion, and portability — apply to the limited support-email data described above. Since RouteBoss collects no server-side personal data, there is nothing further to request access to or deletion of beyond that correspondence. To exercise these rights, contact us using the information below.

10. Changes to This Policy

We may update this Privacy Policy as RouteBoss changes. Material changes will be reflected by an updated "Last updated" date above, and, for changes that affect what data the App accesses, in the App Store's Privacy Nutrition Label.

11. Contact

Questions about this Privacy Policy can be sent to: ping@cliqurs.com