Legal

Privacy Policy

Last updated: April 2026

Boxed is built on the belief that your memories are yours. We collect only what we need, we never sell your data, and we never will.

1. Who We Are

Boxed is an independent iOS application developed by a solo developer based in Dublin, Ireland. If you have any questions about this policy, you can reach us at getboxedapp@proton.me.

2. Information We Collect

We collect only the minimum information necessary to provide the service:

3. How We Use Your Information

4. Encryption & Security

All capsule content is encrypted using AES-256-GCM with keys derived via PBKDF2. This means your memories are unreadable by anyone including us except you and the person you share them with.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties. The only exception is essential service providers (such as cloud infrastructure) who are contractually bound to keep your data confidential and may not use it for any other purpose.

6. Waitlist Emails

If you signed up on our waitlist, your email is stored securely via Formspree and used only to notify you when the app launches. You will receive one email. You can request deletion of your email at any time by contacting us at getboxedapp@proton.me.

7. Your Rights

Under GDPR (as an Irish-based service), you have the right to:

To exercise any of these rights, email us at getboxedapp@proton.me.

8. Children's Privacy

Boxed is not intended for users under the age of 13. We do not knowingly collect data from children.

9. Changes to This Policy

If we make significant changes to this policy, we will update the date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or requests, contact us at getboxedapp@proton.me.