BoxMate Privacy Policy

Last updated: 2026-05-03

This Privacy Policy describes how BoxMate ("we", "us", "the app") collects, uses, and shares information about you when you use our mobile application.

1. Information We Collect

Information you provide

• Account info: email address, display name (optional), and password (hashed by our authentication provider, Supabase). If you use guest mode, no account info is collected; an anonymous identifier is generated locally.
• Inventory content: the names, tags, notes, locations, and box labels you create. This content is stored on our servers so it can sync across your devices and members of your household.
• Household members: email addresses of people you invite to share your household.

Information collected automatically

• Authentication tokens: stored securely on your device by our authentication provider.
• Usage events (only if analytics are enabled): screen views, feature usage. We do not collect contact lists, location, or device identifiers used for advertising.
• Crash reports (only if error reporting is enabled): error stack traces, app version, device model, OS version. These do not include the contents of your inventory.

Information we do not collect

• Photos (the app does not currently support photo upload)
• Precise location
• Contacts list
• Browsing history outside of BoxMate
• Advertising identifiers — we do not show ads in any tier

2. How We Use Information

• To provide the core inventory features (sync, search, sharing).
• To authenticate you and protect your account.
• To process subscription payments (handled by Apple App Store and Google Play; we do not store payment card details).
• To respond to support requests.

3. How We Share Information

• With household members you invite: when you add someone to your household, they can read every box, item, and location in your household.
• With our service providers: Supabase (database, authentication, file storage). These providers are bound by data-processing agreements and may not use your data for their own purposes.
• With law enforcement: only when legally required.
• We do not sell your data. We do not share data with advertisers.

4. Data Retention

• Account data is kept while your account is active.
• If you delete your account, we delete your inventory data within 30 days, except where retention is required by law.
• You can request export or deletion at any time by emailing mniel04@gmail.com.

5. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and data
• Export your data (the app provides PDF export to paid users; CSV export of your full account is available on request)
• Opt out of analytics and crash reporting (Settings → Privacy)

6. Children

BoxMate is not directed at children under 13. We do not knowingly collect data from children under 13.

7. Changes

We may update this policy. We will notify users of material changes via in-app notice or email.

8. Contact

For privacy questions: mniel04@gmail.com.