Privacy Policy

What we collect

Your inbox, today list, and finished history are stored only in a local SQLite database on your device and are never sent to a server. Anything you add by sharing from another app, or with Shortcuts, Siri, or Control Center, is handed to the app on your device only. There is no account, so we never ask for your name or email.

Box Pro status checks

Box Pro (subscriptions and the Lifetime purchase) is bought and restored through the Apple App Store, and RevenueCat checks your purchase status. When the app launches, it contacts RevenueCat to check whether you have Pro and which products are for sale, even if you have never made a purchase. For this, RevenueCat receives a random anonymous user ID created by the app, your purchase history (product, purchase date, and expiration date, if you made a purchase), the app version, your device and OS type, your store country, and the time of the request. Your name, email, and payment method are handled by Apple; neither we nor RevenueCat receive them. Your tasks are never included, and none of this is used for ads or tracking. Your IP address may reach RevenueCat's servers as part of these requests.

Opening links and fetching titles

When you tap a saved link to open it, the page opens in a browser view inside the app. When you tap Fetch title while editing an item that holds only a link, the app visits that address to read the page title. Only the item you tap is visited; if you never tap, the app contacts no website. As with opening the page in any web browser, that site receives your IP address and the address requested. The fetched title is stored only on your device, and nothing is sent to our servers.

Third parties

Box uses no advertising networks, analytics tools, or crash reporters, and no outside service receives your tasks. The one exception is the address of a link you open or tap Fetch title on, which is sent to that site. The purchase information above is handled by RevenueCat, Inc. under the RevenueCat Privacy Policy (revenuecat.com/privacy).

Notifications

If you turn on the daily reminder, iOS schedules it on your device. No remote push servers are involved.

Data export

Export your data as JSON or CSV anytime from Settings → Data → Export. You send the file wherever you choose through the iOS share sheet.

Data deletion

You can erase all task records on your device from Settings → Data → Delete, or by uninstalling the app. No copy of your tasks is kept on any server. The anonymous user ID and purchase history sent to RevenueCat are kept under the RevenueCat Privacy Policy to verify purchases, handle refunds, and keep accounting records. To ask for deletion, email dev@indieway.xyz with the order ID from your App Store receipt so the purchase can be found, and we will ask RevenueCat to delete it.

Children

Box is suitable for all ages and collects no personal information such as names or contact details from anyone, including children under 13.

Changes

If this policy changes, the update will appear here with a new date.

Contact

Questions? Reach out at dev@indieway.xyz. Tapping the email link in the app opens your mail app, and you decide whether to send.