Privacy Policy

Introduction

Box 5 ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application Box 5 (the "App"). By using Box 5, you agree to the collection and use of information in accordance with this policy.

Information We Collect

User-Provided Information: Name and basic profile information you provide during onboarding, learning preferences and daily goals, and user-generated flashcard content (text and images).

User-Generated Content: We store the content you create within the App, including flashcard decks and cards (text and images), study progress and statistics, and learning history.

AI Feature Content: When you use the AI Card Generation feature, the content you provide — such as text you type, audio recordings, images, or PDF files — is transmitted to our secure API for processing. This content is used solely to generate flashcards and is not retained on our servers after processing is complete.

Automatically Collected Information: We use PostHog to automatically collect anonymized usage data, including device type and operating system version, app usage statistics, feature interactions, and performance data to help us improve the App.

Purchase and Subscription Data: When you subscribe to Box 5 Pro, subscription and entitlement status is managed by RevenueCat. We receive anonymized purchase data to verify your subscription status. We do not store your payment information.

How We Use Your Information

We use the collected information to provide and maintain the App, store your flashcards and study progress locally on your device, track your learning progress using the Leitner spaced repetition system, process AI card generation requests, manage your subscription status, improve and optimize the App, and respond to your support requests.

Data Storage

Local Storage: All your flashcard data is stored locally on your device using SQLite database. This includes your flashcards, decks, study progress, statistics, and learning history. Your personal study data never leaves your device unless you explicitly export it or use AI features.

Temporary Cloud Processing: When you use the AI Card Generation feature, files you upload (audio, images, PDFs) are temporarily stored in Amazon Web Services (AWS) S3 and automatically deleted after processing is complete (typically within minutes). Text input is transmitted directly to our API and is not stored.

No Persistent Cloud Storage: Box 5 does not require an account and does not persistently store your flashcard data on remote servers. All your study-related data remains on your device.

Analytics Data: Anonymized usage statistics are processed by PostHog to help us understand how the App is used and to improve its performance.

AI Features and Data Processing

Box 5 Pro includes an AI Card Generation feature that creates flashcards from content you provide. Here is how your data is handled:

• Text input is sent to OpenAI's API to generate flashcard content. Text is not stored after the request is complete.
• Audio recordings are uploaded to AWS S3, transcribed by Deepgram's API, and the resulting transcript is sent to OpenAI to generate flashcards. The audio file is deleted from AWS S3 after processing.
• Images are temporarily stored in AWS S3 and sent to OpenAI's vision API for analysis and flashcard generation, then deleted.
• PDF documents are temporarily stored in AWS S3, processed to extract text, and that text is sent to OpenAI to generate flashcards, then deleted.

Do not submit content that is confidential, sensitive, or that you are not permitted to share with third-party AI services.

Purchases and Subscriptions

Box 5 Pro is available as a weekly, monthly, or yearly subscription. Purchases are processed by the Apple App Store or Google Play Store.

We use RevenueCat to manage subscription and entitlement status. RevenueCat receives anonymized purchase data to verify your subscription. See RevenueCat's Privacy Policy at revenuecat.com/privacy.

We do not store your payment card or billing details. All payment processing is handled by Apple or Google.

Third-Party Services

We use the following third-party services:

• Expo — app development platform (expo.dev/privacy)
• PostHog — product analytics and application monitoring (posthog.com/privacy)
• OpenAI — AI-powered flashcard generation from text and images (openai.com/privacy)
• Deepgram — audio transcription for AI card generation (deepgram.com/privacy)
• RevenueCat — subscription and in-app purchase management (revenuecat.com/privacy)
• Amazon Web Services (AWS) — secure API backend and temporary file storage (aws.amazon.com/privacy)

Data Sharing

We do not sell, trade, or rent your personal information to third parties. Your flashcard data is stored locally on your device and is not shared. Content you submit for AI processing is sent only to the necessary third-party AI providers (OpenAI, Deepgram) to fulfil your request. We share anonymized usage analytics with PostHog to help us maintain and improve the App.

Data Retention

All your flashcard data is stored locally on your device and remains there until you delete the app or clear app data. Content submitted for AI processing is deleted from our servers and AWS S3 immediately after processing is complete. We do not retain AI-processed content beyond what is needed to fulfil the request. Anonymized analytics data is retained by PostHog per their data retention policies.

Your Rights

You have the right to:

• Access your personal data (all stored locally on your device)
• Export your flashcard data through the app's export feature
• Delete your data by clearing app data or uninstalling the app

For questions about your data, contact us at boxfiveapp@gmail.com.

Children's Privacy

Box 5 is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Security

We implement appropriate security measures to protect your information, including:

• Local data storage with device-level encryption
• Encrypted data transmission (HTTPS/TLS) for all API communications
• Regular security updates
• Temporary-only cloud storage for AI processing

Since your flashcard data is stored locally on your device, it benefits from your device's built-in security features.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy in the App and updating the "Last Updated" date. Your continued use of the App after changes constitutes acceptance of the updated policy.