Last changed 18 October 2026.
Boxpass keeps track of what is inside your storage boxes. This page says what that means for your data, in plain words. Questions or requests: lumber.nominal.1n@icloud.com.
Without an account
Everything stays on your phone: your boxes, items, places, labels, photos and their history. Nothing is sent anywhere. The app has no analytics, no ads and no tracking.
With an account
Boxpass keeps, on its server:
- Your account: your email address, your name, and your password, stored only as a secure hash.
- Your household: its name, who is in it and their roles, and invite codes while they are valid (48 hours).
When you turn Sync on, the household's boxes, items, places, labels, NFC tag pairings, photos and the history of changes (who changed what, and when) go to the server too, so everyone in the household sees them. While Sync is off, none of it leaves your phone. With Photos only on Wi-Fi, photos wait for Wi-Fi.
Everyone in your household can see the household's boxes, photos and history, and the names of its members. Nobody else can.
What it is used for
Only to run Boxpass for you: signing in, sending the emails you ask for (confirming your address, resetting your password), and keeping your household's phones in sync. It is never sold, shared for advertising, or used to profile you. The legal basis is providing the service you signed up for (GDPR Article 6(1)(b)).
Where it is
- The server runs at Hetzner Online, a German company, in a data centre in the EU.
- Photos and backups are stored with Cloudflare R2 in its EU jurisdiction, encrypted at rest.
- Emails from Boxpass are sent through Resend, which receives your address and the email's content to deliver it.
- This website is served by Cloudflare and loads its fonts from Google Fonts, which see your IP address when you visit.
How long it is kept
- Your account, until you delete it.
- The household's data, while the household exists. Something you delete is kept for 90 days as a marker, so the delete reaches every phone, and then removed for good.
- Nightly backups of the server's data, the newest 7.
- The server's request logs (time, IP address, what was asked), 5 days, to find and fix problems.
Your rights
- Delete your account in the app, under Household. Your account and your place in the household go at once. A household you own passes to its longest-standing member, or is deleted with everything in it when nobody else is in it. Backups age out within 7 days.
- Get a copy of your data in the app: Household, then Export my data. It makes a ZIP with everything on your phone, as a JSON file, and your photos.
- To change your data, or ask for anything else the GDPR gives you, write to the address above. You can also complain to your data protection authority.
Children
Boxpass is not meant for children under 16 to sign up on their own.
Changes
When this page changes, the date at the top changes with it. If a change matters for what happens to your data, it is announced here before it takes effect.