Privacy Policy

Boxdup iOS App

Last updated: June 2026

1. Controller

The controller within the meaning of the GDPR is:

Karim Ibrahim
Fasanenweg 28
25826 Sankt Peter-Ording
Germany
E-mail: contact@boxdup.de

2. What data the app processes

Your memories (local only)

All content you save in Boxdup — photos, videos, texts, links, documents, voice notes — is stored exclusively on your iPhone. No upload to external servers takes place. We have no access to your content whatsoever.

Anonymous crash reports (Firebase Crashlytics)

Boxdup uses Firebase Crashlytics (Google LLC) to detect app crashes. Anonymous technical information is transmitted:

• Type and time of the crash
• iOS version and device type (anonymised)
• Stack trace (technical error code)

No personal data, no content from your memories, and no location data is transmitted. Crash reports help us identify technical issues and improve the app.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in fixing errors and improving the app). Provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Data transfer to the USA is based on EU Standard Contractual Clauses.

In-app purchases (Boxdup PRO)

Purchases within the app (Boxdup PRO) are processed entirely through Apple and the App Store. We do not receive any payment data such as credit card numbers. Apple processes payment data in accordance with Apple's Privacy Policy.

iPhone backup

If you create an iPhone backup via iCloud or iTunes/Finder, the locally stored Boxdup data will also be backed up. This backup is handled by Apple and is subject to Apple's privacy policy. Boxdup has no influence over and no access to this process.

3. What we do not do

• We do not read, analyse, or process your memories
• We do not transfer your content to third parties
• We do not use any advertising networks in the app
• We do not create a user profile about you
• We do not track your usage behaviour
• We do not sell any data

4. Data sharing

Your content is not shared with third parties. The following service providers process technical data on our behalf:

• Google LLC / Firebase Crashlytics — anonymous crash reports (see section 2)
• Apple Inc. — app distribution, in-app purchases, optional backup

5. Data deletion

You can delete all your data at any time by removing the app from your iPhone. This will permanently delete all locally stored memories.

Tip: Export your data first via Settings → "Export Data" if you wish to keep it.

6. Your rights

Under the GDPR, you have the following rights:

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Objection to processing (Art. 21 GDPR)
• Data portability (Art. 20 GDPR)

As Boxdup does not store any personal data on its own servers, most of your data is stored exclusively on your device — and therefore entirely under your control.

For questions or to exercise your rights, please contact: contact@boxdup.de

You also have the right to lodge a complaint with the competent data protection supervisory authority. In Schleswig-Holstein, this is the Independent Centre for Privacy Protection (ULD).

7. Changes to this policy

We reserve the right to update this privacy policy when necessary — for example, when new features require different data processing. The current version is always available at boxdup.app/en/privacy. The date of the last update is shown above.