Privacy Policy

Who this applies to

This policy covers the BoxSmartly iPhone and iPad app and the boxsmartly.com website. It covers both what the app does on your device and how the website is measured with cookies and analytics. By using BoxSmartly, you agree to the practices described here.

No account, no sign-up

BoxSmartly doesn't require an account, email, name, or phone number to use. You can start packing immediately. We never ask you to create a login.

What stays on your device

Everything you put into BoxSmartly — your boxes, items, rooms, tags, checklist tasks, box photos, and QR labels — is stored locally on your iPhone or iPad. It is not uploaded to any server we control.

iCloud backup (optional, Pro)

If you turn on iCloud backup, your inventory is synced to your own private iCloud account using Apple's iCloud/CloudKit. It's stored in your personal iCloud space under your Apple ID — we have no access to it and cannot read it. Apple's handling of that data is governed by Apple's Privacy Policy. You can turn backup off, or delete your iCloud data, from within the app's Settings.

Camera, photo library & microphone

• Camera: used only to scan QR labels. Scanning happens on-device in real time; we don't record, store, or upload photos of your camera feed.
• Camera or photo library (Add from Photo): used only when you choose to add items from a photo of a packed box. The photo is analyzed on-device — never uploaded — and held only in memory during that one action. BoxSmartly does not save the photo.
• Microphone: used only for optional voice entry, which is transcribed on-device by Apple's speech recognition. Your voice is not recorded or stored by BoxSmartly.

You'll be asked for permission before any of these are used, and you can revoke access anytime in iOS Settings.

In-app analytics (aggregate only, no personal data)

Inside the iPhone and iPad app, we use Google Firebase Analytics to understand how the app is used in aggregate — for example, how often a feature is opened or a box is created — so we can improve it. These events carry only counts, on/off flags, durations, feature names, and anonymous IDs. Website analytics are covered separately in the next section.

We do not use Apple's App Tracking Transparency because we do not run advertising in the app, and we do not use this data for advertising.

Cookies & website analytics

The boxsmartly.com website uses Google Analytics 4 to understand how pages are used — which sections people read, which links they click — so the site can be improved. This is aggregate usage data, not linked to an identity.

No analytics runs until you agree. Cookies are only set after you accept on the banner shown at the bottom of the site. You can change your choice at any time via Cookie settings in the footer.

What is collected once you accept: pages viewed, which sections were on screen and for how long, links and buttons clicked, scroll depth, approximate country, browser and device type, and where the visit came from (referrer or UTM tags).

What is never collected on the website: names, email addresses, or any account details — the site has no accounts — and nothing you type into the app.

No advertising, no ad tracking, no cross-site tracking. We do not sell or share analytics data for advertising.

Note on session-id: this cookie is set by the hosting platform we use to serve boxsmartly.com and is injected before our own code runs, so the consent banner does not currently gate it. It contains a short-lived session identifier used to count visits, not to build a profile of you.

Crash reporting

We use Firebase Crashlytics to receive anonymous crash and diagnostic reports so we can fix bugs. These reports contain technical information about a crash, not your inventory or personal data.

Purchases

The one-time Pro upgrade is processed by Apple through the App Store; we never see or store your payment details. We use RevenueCat to manage purchase status, identified by an anonymous app-user ID — not by your name or email.

Third-party services

BoxSmartly relies on these services, each governed by its own privacy policy:

• Apple (App Store purchases, iCloud backup) — Apple Privacy Policy
• Google Firebase (Analytics, Crashlytics) — Firebase Privacy
• RevenueCat (purchase management) — RevenueCat Privacy Policy

Data retention & deletion

Because your inventory lives on your device, deleting the app removes it. If you use iCloud backup, you can delete that data from the app's Settings ("Delete iCloud Data") or from your Apple ID settings. Aggregate analytics and crash data are retained by our providers per their standard retention windows.

Children's privacy

BoxSmartly is not directed at children under 13 and does not knowingly collect personal information from them.

Your rights

Depending on where you live (for example, under GDPR or CCPA/CPRA), you may have rights over your personal data. Because BoxSmartly stores your inventory on your own device and collects no personal identifiers, most requests can be resolved by you directly on your device. For anything else, contact us at hello@boxsmartly.com.

Changes to this policy

We may update this policy as the app evolves. We'll revise the "Last updated" date above and, for significant changes, note it in the app or on this page.

Contact

Questions about privacy? Email hello@boxsmartly.com.