Privacy policy

Effective date: August 25, 2026
App privacy: Part A applies to the Boosted Lighting app for iPhone and iPad (com.boostedls.BoostedLighting) and the update and support services the app uses.
Website and online store privacy: Part B applies to boostedlightingsolutions.com, including website shopping, orders, cookies, inquiries, and marketing.

Boosted Lighting Solutions, LLC (“Boosted Lighting,” “we,” “us”) operates the website and provides the Boosted Lighting app. This page contains separate privacy disclosures for those services. If you use both the app and website, both parts can apply.

Part A — Boosted Lighting App Privacy Policy

The app helps customers set up, control, diagnose, and update compatible Boosted Lighting hardware. Part A explains the information the app handles, when information leaves the device, why we use it, the service providers involved, how long information is kept, and the choices available to you.

1. Summary

• The app has no Boosted Lighting account or login, subscription, advertising, analytics, or in-app purchase.
• We do not sell personal information or use it for cross-company advertising or tracking. We disclose information to the service providers listed in §5 only to operate firmware, approval, email, and support functions.
• While the app is open, firmware checks can automatically send information about your Boosted Lighting equipment and the internet request’s IP address.
• Device-approval requests and support reports are sent only after you review a disclosure and take an affirmative send/request action. Those messages are processed through a support mailbox assisted by Anthropic’s AI service, as described in §§3.2–3.3.
• During light setup, the app sends the Wi-Fi network name and password you provide directly to your light over its temporary local network. Boosted Lighting does not receive that provisioning exchange.
• The app does not schedule or initiate background uploads and declares no background execution mode. A request that began while the app was active may finish while iOS is transitioning the app away from the foreground.

2. Information stored on your device

The app stores the following information in its private app container or the iOS Keychain. Some of it is later transmitted only through the specific flows described in §3.

The saved Wi-Fi password and network-name metadata use device-only, non-synchronizing Keychain storage and are not synced through iCloud Keychain. The app applies report redaction when it builds a support report, not while the activity log is stored locally.

3. Information that leaves your device

3.1 Firmware checks, downloads, and authorization

While the app is open, connecting to a controller can automatically check for compatible firmware. Firmware checks, downloads, and authorization requests send the following over HTTPS to our update service:

• the Boosted Lighting controller or light hardware address, product model, firmware version, build identifier, and hardware architecture;
• for secure-update controllers, the public half of a device-generated update key and short-lived challenge/proof values used to bind an update to that controller; and
• the request’s IP address and app/operating-system user-agent information, which the hosting service receives when handling the request.

We use this information to determine update eligibility, authorize and deliver firmware, protect the update service, investigate failures, and enforce rate limits. The request contains no Boosted Lighting account identifier because the app has no account. Hardware identifiers and IP addresses can nevertheless be personal data and are handled as described in §§5–7.

Eligible controllers can register their public update key automatically only after proving possession of the matching private key. That automatic path does not include a customer email address or customer-entered text. Other controllers use the manual approval flow below.

3.2 Device-approval requests

If a device requires manual approval, the app asks for your email address and shows a disclosure before sending. If you affirmatively request approval, the app sends your email address with the hardware address, product information, and applicable update-key details to our update service. The service processes the request, records limited operational events, and sends approval correspondence through our support email systems.

The support mailbox is assisted by an AI service provided by Anthropic. Anthropic can process the approval message to classify the request, prepare a response, and automatically approve qualifying cases. Other cases are held for human review. Before transmission, the app identifies the involvement and purpose of a third-party AI service and asks for your permission in a fresh Cancel / Agree & Send confirmation. Choosing Cancel does not send the request; only Agree & Send does. You may ask us to have a person review an automated outcome by contacting us using §11.

3.3 Support reports (Send Diagnostics)

A support report is sent only after you review the notice in the form, use the primary send action, and then choose Agree & Send in the fresh confirmation. Choosing Cancel does not send the report. Depending on availability, the report can contain:

• your email address, selected issue category, and free-text description;
• app version, iPhone/iPad model, iOS version, time zone, report timestamps, Bluetooth authorization/state, and current connection state;
• controller and light product, firmware, build, pairing, connection, uptime, memory, signal, battery, temperature, LED, zone, and diagnostic status;
• a report-scoped pseudonymous controller reference used to correlate parts of that report without exposing the raw controller identifier;
• app activity from the 15 minutes immediately before the time you mark the issue. Entries after the marked time and stale timestamp-free app entries are excluded; and
• if a controller is connected, its current controller/light diagnostic log buffer. This separate hardware-log pull is redacted but is not limited to the app’s 15-minute interval and can include older rolling-buffer entries.

Your description is transmitted exactly as you type it. Do not enter passwords, payment information, a home address, or other information that support does not need.

Before upload, the app replaces known hardware identifiers, IPv4 and IPv6 network addresses, and user-assigned controller/light labels in diagnostic content with aliases scoped to that report. The pseudonymous controller reference rotates between reports. Your email, description, and general hardware/health facts remain readable because support needs them. Additional server-side masking also uses aliases scoped to that report. Pseudonymization reduces exposure but does not make a report anonymous, and unrecognized formats or information you type can remain readable.

The report passes through Render and Resend and arrives in the Google Workspace support mailbox. The Anthropic service described in §3.2 can process the report and its attachment to classify the issue and assist with a response, but only after the permission described above.

3.4 Local Wi-Fi setup

To configure a supported light, your phone joins the light’s temporary setup network and sends the home Wi-Fi network name and password you provide directly to that light. The light supports this local provisioning exchange over HTTP, not HTTPS. Boosted Lighting does not receive this exchange, and the app does not automatically add the password to diagnostics. A password would still be included if you typed it yourself into the support-description field, so do not do that.

3.5 Information the app does not collect

The app does not request or transmit your precise or coarse location, contacts, photos, calendar, health information, payment information, browsing history, search history, advertising identifier, or identifier-for-vendor. It requests no location permission and uses no advertising or cross-app tracking service.

Apple’s App Privacy label lists Device ID. That declaration conservatively covers identifiers used by the firmware/support service, including Boosted Lighting accessory hardware addresses and retained request identifiers such as IP addresses. It does not mean that the app obtains your iPhone advertising identifier or identifier-for-vendor.

4. Permissions

On a home network, the app browses for the supported light service. Legacy recovery can also probe the fixed 192.168.4.2–99 range used by the hardware’s temporary network. The app does not upload an inventory of other devices on your local network.

5. Service providers

We do not sell information. The following providers process information to operate the functions described in this policy:

We configure these services for the listed business purposes and do not use app information for our own advertising or cross-app tracking. Each provider’s terms, privacy notice, security controls, and configured retention also apply.

We require every third party that receives information from the app to protect that information to the same or an equivalent standard as this policy requires, including the protections Apple requires of apps and their service providers, and to use it only for the purposes described here.

We may disclose information when required by law or when reasonably necessary to protect customers, our services, or the security and integrity of products.

6. Retention

Service-provider backups and security records may persist for additional limited periods under their terms and configured retention. We keep information only as long as needed for the purposes above, security, dispute resolution, and legal obligations.

7. Choices, deletion, and privacy rights

• You can choose Cancel in a support or approval confirmation; the app will not send that request unless you choose Agree & Send.
• You can turn off Remember password on this iPhone during setup and use the app’s saved-network removal control to delete stored Wi-Fi credentials and network-name metadata. The app reports when iOS Keychain cannot remove every item, rather than claiming that an unproved deletion succeeded.
• You can unpair a controller to remove its app records. A hardware factory reset controls what the controller itself retains.
• You can revoke Bluetooth and Local Network access in iOS Settings, although the related hardware functions will stop working.
• Deleting the app removes its app-container data. Because iOS can retain Keychain items across app deletion, remove saved network information in the app before deleting it if you want that information removed immediately.

To request access, correction, deletion, portability, or review of an automated approval outcome, contact us. We may verify the request using the email address and equipment reference associated with the record. We will respond within the period required by applicable law.

We can remove support and approval correspondence subject to legal and security retention requirements. Removing a current device-authorization record can stop that hardware from receiving firmware. Private repository history or protected backups may retain earlier records where deletion is not technically possible or is not legally required; we will explain any limitation that applies to a request.

Depending on your location, applicable law may give you rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to complain to a data-protection authority. Where a legal basis is required, we process information as applicable to provide requested services or perform a contract, based on legitimate interests in support and product security, with consent where the app asks for it, or to comply with law.

8. Children

The app is a hardware utility and is not directed to children. We do not knowingly solicit personal information from children. If you believe a child sent information through the app, contact us using §11.

9. Security

Traffic between the app and Boosted Lighting’s internet service uses HTTPS. Saved Wi-Fi credentials use device-only, non-synchronizing iOS Keychain protection. Firmware downloads are authorized for the requesting accessory; current secure-update hardware also receives an encrypted, device-bound package. Authorized firmware for legacy hardware is delivered to the phone over HTTPS but may not itself be encrypted.

Local setup and firmware delivery to a light can use HTTP because that hardware does not support HTTPS for those local endpoints. Complete setup only in an environment you trust. No technical or organizational measure eliminates all risk.

10. Policy changes

We may update this policy as the app, providers, or law changes. We will update the effective date and provide any additional notice or consent required by applicable law before materially different processing takes effect.

11. Contact

Boosted Lighting Solutions, LLC
Email: Contact Us
Website: boostedlightingsolutions.com

Part B — Website and Online Store Privacy

Part B applies when you visit or interact with our website and online store. It supplements Part A and does not replace the app disclosures when information is collected through the app.

B1. Information we collect

We collect personal details you provide through the website, including your name, email address, mailing address, and phone number. Payment details are processed through third-party payment providers. We also collect technical data such as IP address, browser type, operating system, and usage data.

B2. How we use website information

We use website information to process transactions, respond to inquiries, send marketing communications with your consent, and improve the functionality, usability, and security of the site.

B3. Website sharing

We do not sell or rent personal information. We may share website information with service providers that support our business, such as payment processors, hosting providers, and email systems. We may also disclose information in response to lawful requests by authorities.

B4. Cookies

Our website uses cookies to improve your experience. You can control or disable cookies through your browser settings, although some site features may not work properly.

B5. Website data security

No method of transmission or storage is completely secure. We use safeguards designed to protect website information, but we cannot guarantee absolute security.

B6. Website rights and choices

You may request access to, correction of, or deletion of website information, subject to applicable exceptions. You can unsubscribe from marketing at any time using the link in our emails.

B7. Website privacy contact

For questions or requests concerning website privacy, contact us.