Privacy Policy
Last updated: March 14, 2026

Developer: Huseyin Emre Coskun
Contact: wherebox.app@gmail.com

WhereBox is designed with an offline-first and privacy-first architecture. All inventory data remains on your device and is not transmitted to the developer.

1. Overview
WhereBox is a home inventory management application developed by Huseyin Emre Coskun. This Privacy Policy explains what information may be processed when you use the application and how your data is protected.

2. Local Data Storage
All inventory data you create (rooms, items, containers, photos, tags, bags, and reminders) is stored locally on your iOS device.

Because all inventory data is stored locally on the user's device, the developer does not have the technical ability to access, view, collect, or retrieve this information.

3. Encryption and Security
Local data is protected using AES-256-CBC encryption with HMAC-SHA256 authentication. Encryption keys are stored in the iOS Keychain where available hardware security protections apply.

4. Photos
Photos attached to items are stored locally inside the application's sandbox directory. These photos are never uploaded to servers operated by the developer.

5. Backups
Optional backup files created by the application can be exported by the user. Backup files may be encrypted with a password chosen by the user. The developer does not receive copies of backup files.

6. Permissions
The App may request access to the following device features:

• Camera – to allow users to take photos of items
• Photo Library – to attach existing photos to items
• Notifications – to provide reminder notifications

All photos and related data remain stored locally on the device and are never transmitted to external servers.

7. Analytics
The application may use Firebase Analytics to collect anonymous usage information such as screen views, feature usage patterns, and session metrics. 
This data is anonymous and does not include inventory content, item names, photos, or other user‑generated data.

Analytics data is retained according to the retention policies of the respective service providers, including Firebase.

8. Crash Reporting
Firebase Crashlytics may collect crash diagnostics including device model, operating system version, and anonymous application state indicators in order to improve reliability.

9. Subscription Processing
WhereBox uses Adapty and Apple’s App Store infrastructure to manage subscriptions. Payment information is handled exclusively by Apple. The developer does not have access to billing details.

Adapty may generate an anonymous profile identifier in order to manage subscription status and purchases, as described in Adapty’s privacy policy.

10. Third-Party Services
The application may use the following third-party services:

• Firebase Analytics – anonymous usage analytics
• Firebase Crashlytics – crash diagnostics
• Adapty – subscription management

These services may collect anonymous device identifiers for functionality, analytics, and subscription management purposes. Each service operates under its own privacy policy.

11. What We Do Not Collect
The application does not collect personal identifiers such as names, email addresses, phone numbers, precise location data, contacts, or advertising identifiers.

Inventory content, photos, and other user-generated data are never transmitted to the developer.

The developer does not sell, rent, trade, or monetize personal data with third parties.

12. Children's Privacy
WhereBox is not intended for children under the age of 13.

13. Data Deletion
You may delete all application data by using the "Clear All Data" option inside the application or by removing the application from your device. Most application data stored locally on the device will be removed when the app is deleted.

14. International Users
Anonymous analytics information may be processed by third-party services such as Google Firebase according to their own privacy policies.

Users in Turkey are also protected under Law No. 6698 on the Protection of Personal Data (KVKK).

15. Your Rights
Because WhereBox operates locally on the user's device, most data management actions can be performed directly within the application, including deleting or exporting data.

16. Changes to This Policy
This Privacy Policy may be updated periodically. The "Last updated" date will reflect the most recent revision.

17. Contact
If you have questions regarding this Privacy Policy please contact:

wherebox.app@gmail.com