Privacy policy

Last updated: 24 August 2026

BoxitApp is a household inventory app for moving. It stores the data you put into it and as little else as possible. There are no ads, no cross-site tracking, and your data is never sold or shared for marketing.

What we collect, and why

• Email address. Used to sign you in (we email you a one-time code instead of storing a password) and to deliver invitations when someone shares an inventory with you. It is also how we identify your account.
• Your inventory. The items, rooms, boxes, notes, tags, and item photos you create. This is the product: it exists so you can see it on all your devices and share it with people you invite.
• Crash and diagnostic data. If the app crashes or something goes wrong, an error report is sent to Sentry (our error-monitoring provider) so we can fix it. Reports are tagged with your account's internal ID — never your email — and authentication tokens are scrubbed before sending.
• Basic technical logs. Short-lived server and client telemetry (request errors, sync failures) used only to keep the service working. These are deleted automatically after 30 days.

What we do not do

• No advertising, and no advertising identifiers.
• No tracking across other apps or websites.
• No selling, renting, or sharing of your data for marketing.
• No analytics profiles built about you.

Where your data lives

Your data is stored on our own server in Nuremberg, Germany (hosted by Hetzner), and cached locally on your devices so the app works offline. Two service providers process limited data on our behalf: OneSignal delivers the sign-in and invitation emails, and Sentry receives crash reports. Neither receives your inventory or photos.

Sharing inventories

If you invite someone to your inventory, they can see and edit its contents, including photos. If someone invites you, the inventory's owner can see what you add to it. Leaving an inventory removes your access; it does not delete the shared items you contributed, which stay with the inventory.

How long we keep it

Your account data is kept until you delete it. Sign-in codes expire after 10 minutes, sign-in sessions after 30 days of inactivity, and technical logs after 30 days.

Deleting your data

You can permanently delete your account and everything in it from inside the app: Settings → Delete Account, on iOS and on the web. Deletion is immediate and irreversible: it removes your account, your inventories, items, photos, memberships, and sign-in credentials. You can also email okanert@gmail.com from your account address and we will delete it for you.

Your rights

You can export everything you have put into BoxitApp at any time from Settings → Export (CSV or JSON). Under the GDPR you also have the right to access, correct, and erase your personal data, and to complain to a supervisory authority. For any of these, email okanert@gmail.com.

Changes and contact

If this policy changes in a way that matters, the date above will change and significant changes will be announced in the app. Questions: okanert@gmail.com.