Your household inventory is private by default.

1. Scope

This policy applies to boxcue.app, app.boxcue.app, the installed BoxCue progressive web app, and BoxCue transactional emails. BoxCue is currently a private-beta household inventory service. This policy does not cover websites or services that BoxCue merely links to.

2. Information you provide

• Account information: email address, display name, profile photo, authentication and security events, and household membership.
• Household inventory: household and project names, containers, items, quantities, optional SKUs, notes, Places, addresses, Areas, positions, Transport details, status history, labels, and handling preferences.
• Photos: profile and inventory photos you intentionally upload. BoxCue processes supported images on your device before private upload.
• Invitations and support: invitee email addresses and information included in support communications.

Supabase provides authentication. BoxCue does not receive or store your plaintext password.

3. Information collected automatically

BoxCue and its infrastructure providers may process IP address, browser and device type, request time, requested route, error, security, and delivery metadata needed to operate and protect the service. BoxCue does not currently use advertising trackers or behavioral advertising.

The application stores session information, the active household and project context, device display preferences, service-worker files, and an optional private offline inventory snapshot. The offline copy is stored on that device and can be cleared in Settings. BoxCue QR camera frames and images selected only for QR decoding are processed locally and are not uploaded as inventory photos.

4. How BoxCue uses information

• Provide authentication, household collaboration, inventory, search, QR labels, photos, printing, projects, offline reading, and synchronization.
• Send account confirmation, recovery, email-change, invitation, and security messages.
• Protect accounts, enforce household permissions, diagnose failures, prevent abuse, and maintain the service.
• Comply with legal obligations and enforce the Terms of Service.

BoxCue does not use private inventory or photos to train an artificial-intelligence model. Any future AI-assisted inventory feature will require a separate review and clear disclosure before use.

5. Household sharing

People you invite to a household can access that household’s inventory according to their role. Household members may add, change, move, or remove shared information. Use invitations only with people you trust. An account may join several households, but BoxCue keeps each household’s data separate.

6. QR labels and public links

A BoxCue QR label contains a random opaque BoxCue URL. It does not encode item names, photos, email addresses, street addresses, user IDs, household IDs, or database IDs. A person who obtains a label URL still needs an authorized household account to see private contents. Printed labels may intentionally show mover-safe details such as a container code, destination Area, project name, color, or handling instruction.

7. Service providers and disclosure

BoxCue uses service providers to run the product, including Supabase for authentication, database, private file storage, and application functions; Vercel for hosting and delivery; Resend for transactional email; and Cloudflare for domain and inbound-email routing. They process information for BoxCue under their own service terms and security controls.

BoxCue may also disclose information when required by law, to protect people or the service, during a business reorganization or transfer, or with your direction. BoxCue does not sell personal information and does not share it for cross-context behavioral advertising.

8. Retention and deletion

Account and household information is retained while needed to provide BoxCue. You can edit many records in the application, permanently delete a household if you are its owner, and request permanent account deletion from Account Security. Shared-household safeguards may require transferring ownership before account deletion.

Deletion removes active application records and private objects governed by the deletion flow. Limited security, delivery, legal, or backup records may remain for only as long as reasonably necessary for those purposes. A device’s offline authorization expires after seven days without renewal; signing out and the Clear offline data action remove the private local copy sooner.

9. Security

BoxCue uses encrypted connections, private storage, authenticated access, database Row Level Security, short-lived photo links, and household-scoped permissions. No online service can guarantee absolute security. Protect your credentials, devices, invitation links, and printed labels, and report suspected unauthorized access promptly.

10. Your choices and rights

You can review and correct profile and inventory information, manage household access, disable optional offline photo previews, clear offline data, leave eligible households, and delete your account. Depending on where you live, you may have additional rights to access, correct, delete, or receive information and to appeal a request decision.

To make a privacy request or ask a question, email support@boxcue.app or use the Support page. BoxCue may need to verify your account and authority over the requested household before acting.

11. Children

BoxCue is a general-audience household organization service intended for adults. Accounts are not offered to children under 13, and BoxCue does not knowingly collect personal information from them. If you believe a child has provided personal information, email support@boxcue.app so it can be reviewed and removed.

12. International processing

BoxCue and its providers may process information in the United States and other locations where they operate. Privacy protections may differ from those in your home jurisdiction.

13. Changes to this policy

BoxCue may update this policy as the product, providers, or legal requirements change. The updated date will change, and material changes may also be presented in the application or by email when appropriate.