Privacy Policy
Last updated: June 22, 2026
Boxely (“Boxely,” “we,” “us”) is an inventory tracking service operated by HMB Software. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to the Boxely website, web app, and our Android and iOS apps.
Information we collect
- Account information. When you create an account we collect your email address and name. Authentication is handled by our identity provider (Keycloak); if you sign in with Google, we receive your basic Google profile (name, email) to create or link your account. We never see your Google password.
- Inventory content. The data you add to organize your belongings — containers, items, locations, descriptions, quantities, QR label identifiers, and any photos you attach to items.
- Photos. Images you capture or upload for items are stored in our object storage and shown back to you in the app. The camera is used only for taking item photos and scanning QR labels; QR scanning happens on your device.
- Billing information. Paid plans are processed by Stripe. Payment card details are entered into and handled by Stripe — Boxely does not receive or store full card numbers. We retain your subscription tier and status.
- Push notification tokens.If you enable notifications, we store a device push token (via Firebase Cloud Messaging / Apple Push Notification service) so we can deliver notifications you’ve opted into.
- Technical and diagnostic data. We collect limited technical information needed to operate and secure the service, and crash/diagnostic reports (via Firebase Crashlytics on Android) to find and fix problems.
How we use your information
- Provide, maintain, and improve the Boxely service.
- Authenticate you and keep your account secure.
- Store and display the inventory content and photos you create.
- Process subscriptions and manage your plan.
- Send notifications you have enabled.
- Diagnose crashes and prevent abuse.
We do not sell your personal information, and we do not use your inventory content or photos for advertising.
How information is shared
We share information only with service providers that help us run Boxely:
- Keycloak — authentication and identity management.
- Stripe — subscription billing and payment processing.
- Google Firebase / Apple — push notifications and crash reporting.
- Cloud hosting and object storage — to host the service and store your data and photos.
We may also disclose information if required by law or to protect the rights, safety, and security of Boxely and its users.
Data retention and deletion
We keep your information for as long as your account is active. You can delete your containers, items, and photos at any time in the app. To delete your account and the data associated with it, contact us at support@boxelyapp.com and we will process the request.
Security
We use industry-standard measures to protect your information, including encrypted connections (HTTPS) and access controls. No method of transmission or storage is completely secure, but we work to protect your data.
Children's privacy
Boxely is not directed to children under 13, and we do not knowingly collect personal information from them.
Your choices
- Access and edit your inventory content directly in the app.
- Turn notifications on or off in your device and app settings.
- Manage or cancel your subscription from your account.
- Request account deletion by contacting us.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above.
Contact us
Questions about this policy or your data? Email support@boxelyapp.com.