Privacy Policy

Last Updated: October 21, 2025

1. Information We Collect

Account Information

When you create an account with Box Buddy, we collect:

• Email address: Used for account creation, authentication, and communication
• Password: Encrypted and stored securely through Firebase Authentication
• Display name (optional): If you choose to provide it

Box Inventory Data

The core functionality of Box Buddy involves creating and managing your moving box inventory. We store:

• Box information: Box names, room assignments, contents descriptions
• QR code associations: Links between QR codes and your boxes
• Photos: Optional images of box contents you choose to upload
• Notes and tags: Any additional information you add to boxes
• Timestamps: When boxes are created, modified, or deleted

Device and Usage Information

We automatically collect certain information about your device and how you use Box Buddy:

• Device information: Device type, operating system, unique device identifiers
• App usage data: Features used, frequency of use, session duration
• Error logs: Crash reports and diagnostic information to improve app stability

Payment Information

If you purchase Box Buddy Pro:

• Payment processing is handled by Apple (App Store) or Google (Play Store)
• We do not directly collect or store your credit card information
• We receive confirmation of your purchase status to enable Pro features

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the service: Store your box inventory, sync across devices, enable QR code scanning
• Improve the app: Understand how users interact with features, identify bugs, optimize performance
• Customer support: Respond to your questions, requests, and feedback
• Send notifications: Important account updates, feature announcements (you can opt out)
• Process payments: Manage subscriptions and Pro feature access
• Comply with legal obligations: Respond to legal requests or prevent fraud

3. Data Storage and Third-Party Services

Google Cloud Platform / Firebase

Box Buddy uses Google Cloud Platform services to store and manage your data:

• Firebase Authentication: Securely manages your account credentials
• Cloud Firestore: Stores your box inventory data
• Firebase Storage: Stores photos you upload
• Data location: Your data is stored on Google Cloud servers in the United States
• Security: Google encrypts data at rest and in transit using industry-standard protocols

By using Box Buddy, you acknowledge that your data will be processed and stored by Google Cloud Platform. For more information about how Google handles data, please review:

• Firebase Privacy Policy
• Google Cloud Privacy Notice

4. Offline Mode and Data Synchronization

Box Buddy includes offline functionality that allows you to access and modify your box inventory without an internet connection.

• When offline, your data is stored locally on your device
• Changes made offline are queued and automatically synchronized to our servers when you reconnect to the internet
• This ensures you can access your moving inventory even during your move when WiFi may not be available

5. Family Accounts

[Include this section if/when you add family accounts]

Box Buddy allows you to share your box inventory with family members through family accounts.

How Family Accounts Work

• One person (the admin) creates a family account and can invite up to 4 additional family members
• All family members can view and edit shared boxes
• Each person has their own login credentials

Data Sharing Within Families

When you join a family account, the following information is shared with all family members:

• Shared: Box inventory (names, contents, photos), QR codes, activity history
• NOT Shared: Login credentials, personal account settings, payment information

Your Responsibilities

• Only invite people you trust to your family account
• Understand that invited members can view and edit all boxes
• You are responsible for your family members' actions
• Ensure family members are at least 13 years old

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. You can request deletion of your account and data at any time through the app settings.

• Active Accounts: We retain your data indefinitely while your account is active
• Deleted Accounts: When you delete your account, we permanently delete all your data within 30 days
• Backups: Data may persist in backups for up to 90 days after deletion

7. Your Rights and Choices

Access and Update Your Information

You can access and update your box inventory and account information directly within the app at any time.

Export Your Data

You have the right to export all your data. You can export your box inventory to CSV format from the app settings.

Delete Your Data

You can request deletion of your account and all associated data through the app settings. This action is permanent and cannot be undone.

Marketing Communications

You can opt out of promotional emails by clicking the "unsubscribe" link at the bottom of any marketing email or by adjusting your notification settings in the app.

8. Children's Privacy

Box Buddy is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are under 13, do not use this app or provide any information. If we learn we have collected information from a child under 13, we will delete that information immediately.

If you believe we might have information from or about a child under 13, please contact us at support@ophelion.app.

9. International Users and Data Transfers

Box Buddy is operated from the United States. If you are located outside the United States, please be aware that information we collect will be transferred to and processed in the United States or other countries where our service providers operate.

By using Box Buddy, you consent to the transfer of your information to countries outside of your country of residence, which may have different data protection rules than your country.

European Users (GDPR Compliance)

If you are in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis: We process your data based on your consent and to fulfill our contract with you
• Data Controller: Ophelion Software is the data controller for your personal information
• Your Rights: Right to access, rectification, erasure, restriction, portability, and objection
• Withdraw Consent: You can withdraw consent at any time by deleting your account
• Complaint: You have the right to lodge a complaint with your local data protection authority

California Users (CCPA Compliance)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information we collect, use, and share
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell your personal information
• Non-Discrimination: We will not discriminate against you for exercising your rights

10. Data Security

We take reasonable measures to protect your information from unauthorized access, use, or disclosure:

• Data encrypted in transit using HTTPS/TLS
• Data encrypted at rest on Google Cloud servers
• Firebase Authentication security rules
• Firestore security rules limiting data access
• Regular security updates and monitoring

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

11. Third-Party Services and Analytics

Firebase Analytics

We use Firebase Analytics to understand how users interact with Box Buddy and improve the app experience.

• Information Collected: App usage patterns, feature interactions, screen views, performance metrics
• Purpose: Understand user behavior, measure feature adoption, optimize user experience
• Events Tracked: Box creation/updates, QR code usage, search activity, upgrade interactions
• Privacy: We do NOT collect the actual content of your boxes, search queries, or personal notes
• Opt-Out: You can disable analytics collection in app settings
• Privacy Policy: Google Analytics Privacy Policy

Firebase Crashlytics

We use Firebase Crashlytics to detect and fix crashes and errors.

• Information Collected: Crash reports, device state at time of crash, stack traces
• Purpose: Identify and fix bugs, improve app stability
• Privacy: Crash reports do not include your box inventory or personal content
• Opt-Out: Analytics opt-out also disables crash reporting
• Privacy Policy: Firebase Crashlytics Privacy

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by:

• Posting the updated policy in the app
• Updating the "Last Updated" date at the top of this policy
• Sending you an email notification (for significant changes)

Your continued use of Box Buddy after changes are posted constitutes your acceptance of the updated Privacy Policy.

13. Third-Party Links

Box Buddy may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

14. Contact Us

© 2025 Ophelion Software. All rights reserved.