Overview
Boulevard signs staff out in two situations:
On a schedule — everyone is signed out of the Dashboard each night, and out of the Professional App each Sunday night. This happens whether you're using it or not.
After a period of inactivity — if a device sits untouched, Boulevard signs that person out. Your admin controls how long that takes.
The first one is new. If your team is suddenly logging in more often than they used to, that's why.
Why Boulevard does this
An account that stays signed in forever is an account anyone can walk up to and use. Requiring a fresh login puts a limit on that — so a device left open at the front desk, or a password that's quietly been stolen, can't be used indefinitely without anyone noticing.
Beauty and wellness businesses are a genuinely attractive target: client records, payment details, and payout information all sit in one place. Signing in once each morning is a small cost for closing that window.
The two kinds of logout
These get mixed up constantly, so it's worth separating them clearly:
| Session maximum | Inactivity timeout |
What triggers it | The clock. It happens on schedule. | Nobody touching the device for a set period. |
Default setting | Midnight for Dashboard Sunday nights for Pro App | 7 days of inactivity |
Happens even if you're actively working? | Yes | No |
Can your admin turn it off? | No | No |
Can your admin change it? | No | Yes, within limits |
Where | Manage Business > Security | Manage Business > Security |
Both are active at the same time. Whichever comes first is the one that signs you out.
Session maximums: the schedule
Every Boulevard business has a maximum session length. When it's reached, all staff sign in again — regardless of whether they were in the middle of something.
| When everyone is signed out | So you sign in… |
Dashboard (web) | Every night at midnight, local time | Each morning |
Professional App | Every Sunday night at midnight, local time | Monday morning, then once a week |
Duo App | Never — no automatic logout | — |
This isn't something that can be switched off. It applies to every Boulevard business. Your admin can make it happen more often if you'd like, but not less.
Logout due to inactivity
Separately, Boulevard signs a person out if their device sits untouched for a set period. This is the setting that's been available for a while, and your admin controls the length.
It's the one that protects you during the day — a treatment room computer left open while you're with a client, or a front desk iPad nobody's watching.
You can set different lengths for web and mobile.
"Why was I signed out?"
Quick way to tell which one happened:
You came in this morning and had to sign in → session maximum. Expected, every day.
It's Monday and the Professional App wants a login → session maximum. Expected, every week.
You stepped away, came back, and were signed out mid-shift → inactivity timeout. Your admin can lengthen this, within limits.
You were actively working and got signed out anyway → most likely the session maximum landing at midnight, if you work overnight. Otherwise, contact Support — that's worth a look.
Being signed out isn't an error and it isn't a sign anything's wrong with your account. You don't need to report it. Sign back in and carry on.
For admins: adjusting inactivity settings
You'll need the Manage employee login permission.
Open Manage Business (gear icon)
Go to the Security tab
Adjust Dashboard inactivity timeout — to change how long an untouched device stays signed in
These apply to all of your locations. There's no per-location or per-staff version.
Shared front desk devices
If your front desk shares one computer or iPad, the daily login will be more noticeable — and that's partly the point. A device that's permanently signed in as one person is exactly the risk these limits exist to close.
A few things that make it easier:
Give every staff member their own login. Shared credentials mean you can't tell who did what, and your audit log becomes far less useful when something needs investigating.
Fold the morning login into opening procedures, alongside unlocking the door and starting the register.
Set a realistic inactivity timeout for the front desk. Too short and staff fight it all day; too long and an unattended screen sits open. Match it to how your front desk actually works.
Consider requiring two-step verification, especially for anyone with Admin or Manager access.
HIPAA-covered businesses
If you store client health information, Boulevard recommends setting the inactivity timeout to 15 minutes or less.
The session maximum applies to you automatically and doesn't replace this — the two work together. The session maximum caps how long a login can live overall; the inactivity timeout protects a device that's been walked away from. Both matter for PHI.
For more, see Protected Health Information (PHI) Security Requirements.
Common questions
Can we turn the daily logout off?
No. It's a platform-wide security standard, not a per-business setting. You can not remove it.
Can we make it less frequent than nightly?
No — nightly on the Dashboard is the longest available.
Can we exempt one person, like an owner or a manager?
No. It applies to all staff. High-access accounts are the ones attackers want most, so exemptions would undercut the point.
Does everyone get signed out at exactly midnight?
Midnight in your business's local time. If you're open past midnight, expect the interruption and plan for it.
Do we have to set anything up?
No. Session maximums are already in effect.
Why did we get signed out of the Dashboard but not the Duo app?
Duo doesn't have an automatic logout. Only the Dashboard and Professional App are on a schedule.
Staff are complaining. What do we tell them?
That it's once each morning, it's not optional, and it exists so a stolen password or an unattended screen can't be used indefinitely. It's the same reason a card terminal asks for a PIN every time instead of remembering it.