Privacy Policy

TimeBox is a local-first private life journal. No account is required. We do not operate a cloud service that stores or relays your journal, and the App contains no advertising, behavioral analytics, or cross-app tracking. Your text, photos, audio, video, files, and archive structure are stored on your devices by default.

Content you create or import: text, titles, tags, notebooks, photos, audio, video, files, and metadata such as record dates.

Optional feature data: precise or approximate location, addresses, map regions, and weather; device names, local-network addresses, and archive data needed for direct device discovery and sync; product, purchase-status, and transaction identifiers returned by an app store; and local preferences such as language, theme, and privacy-lock settings. Journal content and settings are processed locally and are not received through our servers.

Camera and photos/media are used only when you capture, select, or import photos or video. The microphone is used only when you start an audio or video recording. Location is used only when you ask to attach a place, obtain an address or weather, or view the record map; the App does not continuously collect background location. Local-network/nearby-device access is used only to find and connect your devices on the same reachable Wi-Fi network. Biometrics are handled by the operating system for local unlock or export authorization; TimeBox cannot read or store biometric templates. File access is used only for user-initiated import, export, backup, restore, or opening a file.

TimeBox has no first-party cloud, but an optional request may send limited information to a provider: latitude/longitude and network request information to Open-Meteo for weather; map-area tile requests and network information to OpenStreetMap; coordinates to Apple, Google, or another operating-system geocoding provider for an address; and store/product/transaction information to Apple App Store or Google Play for purchases. A direct-distribution build generates a random device code locally and lets you copy a license request containing that code, platform, system and App versions, and local host name. Copying does not send it automatically; we receive it only if you deliberately submit it by email or another channel, then use it to issue/verify a license and provide support. Related correspondence is retained while the license remains valid or as needed for support and fraud prevention; you may request deletion, subject to legal duties and information necessary to maintain an issued license. Providers may process IP addresses, device/request information, and operational logs under their own policies. Direct Wi-Fi sync transfers selected archive data only between your devices, not through us.

Data is processed only to provide features you request: creating and managing an archive, search and rediscovery, maps and weather, direct device sync, backup/restore, export, security, and purchase entitlement. The legal basis is generally performance of the service you request, your affirmative choice or consent, legitimate security needs, and compliance with law. We do not sell data, build advertising profiles, or make automated decisions about you.

Journal databases, media, and settings remain on your device until you delete them, clear App data, or uninstall. Items in trash remain as the App indicates until permanently deleted. You control where backups and exports are stored and how long they remain. Optional protections include app lock, operating-system biometric checks, recent-screen shielding, password-encrypted backups, integrity checks before restore, and local-network-only sync. No security measure is absolute; protect your device, passwords, and exported files.

Delete records in the App, or remove local data by clearing App storage or uninstalling. Revoke camera, microphone, location, media, or local-network permission in system settings, or stop using the related optional feature. Because TimeBox has no account and receives no journal through our servers, there is no server account for us to delete and we generally cannot remotely access or erase your device, backup, or export. If you emailed us, you may request deletion of that correspondence at crazyandcoder@gmail.com, subject to legal retention duties.

We do not sell, rent, or share personal data for advertising. Other than Open-Meteo, OpenStreetMap, operating-system geocoding, Apple App Store, Google Play, and destinations you deliberately choose for export or sharing, we do not transmit your content to third parties. We require relevant providers to process information only for the corresponding function and to provide the same or equivalent protection under their published policies, contractual duties, and applicable law. We disclose information only when legally compelled and only if we actually possess it.

Provider infrastructure may be outside your country. Using weather, maps, address lookup, or store services may therefore involve international processing under the provider’s privacy terms and applicable law. You can avoid this transmission by not using the relevant optional feature.

TimeBox is a general-audience product and is not directed to children. We do not knowingly collect children’s personal information through our own servers. Anyone below the digital-consent age in their region should use the App with a parent or guardian and should not enable optional location features without guardian consent.

The TimeBox website has no account, comments, advertising, or behavioral analytics. Infrastructure providers such as Cloudflare may process IP address, browser details, and access logs as needed to deliver and secure the site, subject to their privacy terms.

We may update this policy when features, providers, or legal requirements change. The new revision date will appear here, and material changes will be communicated in an appropriate way.

Questions, rights requests, or complaints: crazyandcoder@gmail.com. Please use “TimeBox Privacy” in the subject line.