Privacy Policy

Last Updated: October 2026

Hello! Welcome to Box’d. Your privacy is important to us. We aren't in the business of selling your data; we're in the business of helping you find your stuff. This policy covers the Box’d app and this website, operated by icaruswings.

What we collect

  • Account Info: When you sign up via Clerk, we store your email address so you can access your boxes on any device.
  • Your Inventory: We store the names of your boxes, the items you list, and the photos you take so we can show them back to you when you search.
  • Guest Data: If you use the app as a guest, we store a guest identifier on your device and inventory in our cloud backend. Deleting the app does not itself request deletion of cloud data. Contact us if you need help deleting guest data.

Optional analytics and your choices

We ask before enabling website analytics. Use Cookie preferences in the footer to allow or turn off analytics at any time. Choosing No thanks does not stop you using the site. We save your choice in browser storage. If you allow analytics, PostHog also uses cookies and browser storage to remember a browser identifier and session information. Its analytics cookie expires after up to one year; local storage stays until cleared.

In the app, optional analytics is off until you enable Share usage data and recordings in Settings. This choice also controls PostHog screen recordings and the optional product events our backend sends for your operations. You can turn it off without losing app features. The updated app asks for a new choice; an older analytics setting does not enable it.

Usage events can include screens or public pages visited, buttons tapped, feature use, item counts, subscription purchase or restore outcomes, device or browser information, app version, and operation timing or failure categories. Website events can include campaign labels and the referring website. We remove arbitrary URL query strings and do not put box names, item lists, photos, audio, or raw search text in product events.

App events can include your account identifier, a separate guest analytics identifier, box identifiers, and random operation identifiers. This lets us connect related actions and errors. These records are not necessarily anonymous. Turning analytics off stops optional collection for new operations. Backend work already started follows the choice sent with its request. Turning analytics off does not automatically delete records already received.

Screen recordings

With the app analytics setting enabled, PostHog may record a sample of app sessions, including sessions where an error occurs, so we can understand interaction problems. Recordings can contain visible screen content. Text inputs and images are masked, and login, payment, box detail, and box editing screens are excluded. We do not enable session recording on the website or in Sentry in the updated app.

Reliability and error reporting

Basic crash and error reporting stays on independently of optional analytics. Sentry and our hosting providers receive technical information such as app version, environment, stack traces, error categories, and operation identifiers so we can investigate failures. App error reports may include an account or guest analytics identifier. Our telemetry filters remove credentials and limit user content; providers also receive standard network information when your device connects to them.

UptimeRobot checks public health endpoints to tell us when the website or backend is unavailable. These checks use service status and release information, not your inventory or account credentials. We also send synthetic test events to check that analytics delivery is working.

Third-Party Services

We use trusted third-party providers to make the app work and improve your experience. We do not sell your data to them.

  • PostHog: Optional product analytics and app session recordings. Our configured PostHog project is hosted in the United States. PostHog privacy policy.
  • Sentry: Crash and error diagnostics for the app, website, and backend. Sentry privacy policy.
  • Clerk, Convex, and Vercel: Account authentication, database and file storage, and website hosting. These providers may process service logs and technical request information.
  • UptimeRobot: Automated service availability checks.
  • RevenueCat: Used to securely process subscriptions. We never see or store your credit card details.
  • OpenAI: Used when you record voice notes (transcription), when we turn what you type or say into a structured list of items, and when we generate a short summary of a box from those items. Your data is not used to train their models.

Camera Usage

Box’d requires access to your device camera to scan QR codes and take photos of your boxes. This visual data is stored securely and is only accessible by you and people you allow through Partner Share. We do not use your camera for any other purpose.

Retention and deletion

We keep account and inventory data to provide the service. You can request account deletion in the app's Settings menu. This starts removal of your account, boxes, photos, and related sharing data. It is a background process, so removal is not immediate.

Analytics and diagnostic records are stored separately and follow each provider's configured retention settings. Account deletion does not automatically remove records already held by PostHog or Sentry. Contact support@getboxd.app to request access, correction, or deletion of those records, or details of the retention periods that apply. We may need to verify your identity. Backups and records needed for security, legal obligations, or resolving disputes may follow separate retention periods.

How we use and process data

We use account and inventory data to provide Box’d, optional usage data to understand and improve features, and diagnostic information to keep the service working. Providers may process information outside your country, including in the United States. We do not sell your personal information. Contact us about the providers and locations relevant to your data or to exercise the privacy rights available where you live.

We update this policy when our practices change. Older installed versions can behave differently until updated, including their analytics defaults and error-recording settings. You can turn off optional analytics in those versions and update the app for the controls described here.

Questions?

Email us at: support@getboxd.app