Privacy Policy

Last updated: April 2026  ·  Effective immediately

Boxly ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the Boxly mobile application.

By using Boxly, you agree to the collection and use of information in accordance with this policy.

01

Information We Collect

Account Information

When you sign in with Google or Apple, we receive your name, email address, and profile photo. We use this solely to identify your account.

Storage Data

Photos, item names, tags, and box information you add to the app. This data is stored securely in Firebase (Google Cloud) and is only accessible by you.

Usage & Subscription Data

AI scan usage count per month and subscription plan status, stored to enforce plan limits and reset monthly.

Referral & Payout Data

If you participate in our referral program, we collect referral activity. If you request a payout, we collect your PromptPay number or bank account details solely for the purpose of transferring your earnings. This data is never shared or used for any other purpose.

02

How We Use Your Information

We do not sell, rent, or share your personal information with third parties for marketing purposes.

03

Third-Party Services

Boxly uses the following third-party services, each with their own privacy policies:

Firebase (Google)

Authentication, database (Firestore), and file storage. Your data is stored in the asia-southeast1 region. Firebase Privacy Policy →

OpenAI

Item photos are sent to OpenAI's GPT-4o mini API for AI analysis. Images are processed and not stored by OpenAI beyond the request. OpenAI Privacy Policy →

RevenueCat

In-app purchase management and subscription tracking. RevenueCat Privacy Policy →

Google Sign-In & Apple Sign-In

Used for authentication only. We do not store your Google or Apple credentials.

04

Data Security

All data is encrypted in transit using HTTPS and at rest in Firebase. Access to your data is protected by Firebase Security Rules — only you can read and write your own data.

Bank account and PromptPay information provided for payout requests is stored securely and accessible only to Boxly administrators for the purpose of processing transfers.

05

Data Retention

Your data is retained as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

Payout records may be retained for up to 7 years for accounting and tax compliance purposes.

06

Your Rights

To exercise any of these rights, contact us at the email below.

07

Children's Privacy

Boxly is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

08

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the "Last updated" date at the top of this page. Continued use of Boxly after changes constitutes acceptance of the updated policy.

09

Contact Us

Questions about your privacy?

We're happy to help. Reach out anytime.

Email
chatri1042@gmail.com

App
Boxly — Home Storage Manager