PRIVACY POLICY

1. Introduction

This Privacy Policy explains how Wizlab ("we," "us," or "our") collects, uses, and protects information when you use Boxly (the "App"). We designed Boxly with privacy at its core — your inventory data stays on your device.

TL;DR: Your inventory data is stored locally on your device. We use privacy-friendly analytics. We do not sell your data.

2. Information We Collect

2.1 Data Stored On Your Device

Boxly stores the following data locally on your device using Apple's SwiftData framework:

• Product names, descriptions, SKUs, barcodes, prices, and stock quantities you enter
• Categories, tags, locations, and custom fields you create
• Stock adjustment history (stock in/out records with timestamps and notes)
• Product images captured or imported
• App settings, notification preferences, and display preferences

This data is stored entirely on your device. We do not have access to it and cannot retrieve it.

2.2 Optional Cloud Sync

If you enable Cloud Sync (Pro feature), your inventory data is synced through Supabase with encrypted data transfer. Cloud sync requires authentication and your data is associated with your account. You can disable cloud sync at any time in Settings.

2.3 Camera and Barcode Scanning

Boxly uses your device camera for barcode scanning (Pro feature). Camera access is used solely for real-time barcode detection. No images or video are stored, transmitted, or processed externally during barcode scanning. Camera permission is requested only when you first use the scanner.

2.4 Purchases and Subscriptions

In-app purchases and subscriptions are processed by Apple through StoreKit 2. We use RevenueCat to manage subscription entitlements. We receive anonymous purchase identifiers and entitlement status — we do not receive your payment card details, Apple ID, or billing credentials.

2.5 Analytics

We use TelemetryDeck for privacy-friendly, anonymized analytics. TelemetryDeck does not use cookies, does not track users across apps, and does not collect personally identifiable information. We use this data solely to understand aggregate app usage patterns and improve the App.

2.6 Diagnostics

We may review crash reports and diagnostic data made available by Apple through Xcode Cloud to improve app stability. These reports do not contain your inventory data.

3. How We Use Information

We use information solely to operate and improve the App:

• Display your products, stock levels, and inventory insights
• Send local notifications for low stock alerts
• Validate and restore your Pro subscription entitlements
• Sync inventory data across devices when cloud sync is enabled
• Fix crashes and improve app reliability
• Understand aggregate usage to prioritize features

4. Data Sharing

We do not sell, rent, or trade your personal information. We only share data with the following service providers as necessary to operate the App:

• Apple — StoreKit/App Store for purchase processing
• RevenueCat — Subscription entitlement management
• Supabase — Cloud sync infrastructure (when enabled by user)
• TelemetryDeck — Privacy-first anonymized analytics

5. Data Retention

Local app data remains on your device until you delete it or uninstall the App. If cloud sync is enabled, your data is stored on Supabase servers until you delete your account or disable sync. Purchase records are retained by Apple and RevenueCat according to their respective policies.

6. Data Security

We implement appropriate technical measures to protect your information:

• Local data is stored using Apple's SwiftData with device-level encryption
• Cloud sync uses encrypted data transfer (HTTPS/TLS)
• Optional App Lock with Face ID or Touch ID for additional device-level protection

7. Your Choices

• You can delete individual products or all data within the App at any time
• You can uninstall the App to remove all local data from your device
• You can enable or disable cloud sync in Settings
• You can manage notification and camera permissions in iOS Settings
• You can export your data via CSV before deleting
• You can request purchase refunds through Apple at reportaproblem.apple.com

8. Children's Privacy

Boxly is not directed at children under 13. The App does not knowingly collect personal information from children. If you believe a child has provided personal data to us, please contact us and we will address the issue promptly.

9. International Users

If you are located in the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, you may have additional rights regarding your personal data. Since we store data locally on your device and use privacy-friendly analytics, our data practices are designed to be compliant with GDPR and similar regulations by default.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date. Continued use of the App after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy, contact us:

• Email: [email protected]
• Website: https://wizlab.app