Legal
Last updated: April 2026
Boxed is built on the belief that your memories are yours. We collect only what we need, we never sell your data, and we never will.
Boxed is an independent iOS application developed by a solo developer based in Dublin, Ireland. If you have any questions about this policy, you can reach us at getboxedapp@proton.me.
We collect only the minimum information necessary to provide the service:
All capsule content is encrypted using AES-256-GCM with keys derived via PBKDF2. This means your memories are unreadable by anyone including us except you and the person you share them with.
We do not sell, rent, or share your personal data with third parties. The only exception is essential service providers (such as cloud infrastructure) who are contractually bound to keep your data confidential and may not use it for any other purpose.
If you signed up on our waitlist, your email is stored securely via Formspree and used only to notify you when the app launches. You will receive one email. You can request deletion of your email at any time by contacting us at getboxedapp@proton.me.
Under GDPR (as an Irish-based service), you have the right to:
To exercise any of these rights, email us at getboxedapp@proton.me.
Boxed is not intended for users under the age of 13. We do not knowingly collect data from children.
If we make significant changes to this policy, we will update the date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.
For any privacy-related questions or requests, contact us at getboxedapp@proton.me.