Privacy policy

Last updated: 22 October 2026

In short: everything you add to Boxes (boxes, things, photos, notes) stays on your device. Only if you leave iCloud sync on (it is on by default and you can switch it off in Settings) is it also copied to your private iCloud, which we cannot access. Dictation and splitting text into things happen on the device. The app sends only anonymous usage statistics and crash reports, without the names of boxes and things, places, notes or photos. There are no accounts or ads, and your data is not sold.

What data the app stores

Boxes stores locally, in your device's storage, only what you add yourself:

Dictation and on-device AI

When you dictate what goes in a box, iOS (Apple Speech) recognizes the speech on your device, and a local language model (Apple Intelligence) or a simple rule in the app splits the text into items. Recordings and text are not sent to any cloud or to the developer. The first time, the system may download a language model from Apple. The microphone is used only while you dictate.

Camera, QR codes and photos

The camera scans QR codes on labels and takes photos of things. The photo library is used when you pick a photo by hand. The QR code on a label holds only a random box identifier, not its contents. Access is used only at those moments.

Labels and printing

Labels are made on the device as a PDF file. You print them with AirPrint or share them through the system sheet, so you decide where they go.

Usage statistics and crash reports

To know which features work and which need fixing, the app uses Firebase Analytics and Firebase Crashlytics (Google). Only technical events are sent, such as “box created”, “3 things added by voice” or “label printed”, and crash reports with device and system version information. We do not send the names of boxes and things, places, notes, dictated text or photos. Firebase may assign the device an anonymous installation identifier. Google processes the data under its own privacy policy.

In-app purchase

Free: one project (archived ones included) and 10 boxes outside projects. A one-time in-app purchase removes the limits; there is no subscription. Payment is handled solely by Apple (the App Store): we neither see nor store the card, account or name of the person paying. Statistics only record that a purchase took place.

iCloud sync (free, can be switched off)

In Settings, under “Sync with iCloud”, you can switch sync on or off. When it is on, your boxes, things, categories and photos are copied to your private iCloud database (Apple CloudKit) and appear on other devices signed in to the same Apple Account. The developer cannot see this data: it lives in your iCloud account, and Apple processes it under its own rules. Without an iCloud account, or with sync off, nothing leaves the device.

Deleting data

Deleting a box deletes it together with its things and photos. Deleting a project deletes its boxes. Deleting the app removes all its data from the device. If iCloud sync is on, the data also stays in your iCloud until you delete it there (Settings → your name → iCloud → Manage Storage → Boxes).

Changes

If the scope of the data we collect changes, we will update this document and the date above.

Contact

Questions about privacy: [email protected].