Timebox (“we”, “the app”) is a personal productivity application for calendar, tasks, habits, time blocking, and optional AI scheduling help. This Privacy Policy explains what information we collect and how we use it.
By using Timebox, you agree to this policy. If you do not agree, please do not use the app.
1. Data we collect
Account
If you sign in, we use Google or Apple sign-in through Supabase Auth. We may receive your user ID and email address (if provided by the sign-in provider).
App content
Events, tasks, habits, habit completions, reminders, and related settings you create in the app. This data is stored locally on your device. If you use Timebox Pro and sign in, it may also sync to our cloud database (Supabase) so you can use Timebox on multiple devices.
Purchases & entitlement
Subscription purchases are processed by the Apple App Store or Google Play. We store Pro entitlement status on your device and may mirror Pro status to your account profile so entitlement can be restored after sign-in on a new device.
AI planning (Pro)
If you use AI features (for example “Plan my day” or “Find time with AI”), the app sends a bounded set of task and calendar context to our server (Supabase Edge Function), which may call a third-party large language model provider (currently Google Gemini) to generate schedule suggestions. We also store limited usage counters/logs (for example request counts and token estimates) to enforce fair-use limits.
AI suggestions are not applied until you review and accept them in the app.
Device permissions
- Notifications — local reminders for events and (for Pro) habits
- Calendar access — optional one-way import of device calendar events
We do not require continuous background location access.
2. How we use data
- Provide calendar, task, habit, reminder, widget, and sync features
- Verify and restore Timebox Pro entitlement
- Generate optional AI scheduling suggestions you request
- Enforce AI usage limits and monitor reliability / abuse
- Improve app stability and fix bugs
We do not sell your personal data.
We do not use your calendar or task content for advertising.
3. Third parties
- Supabase — authentication, cloud database, and Edge Functions (Privacy
- Apple / Google — sign-in and in-app purchases (subject to their policies)
- Google Gemini (Generative Language API) — optional AI planning responses when you use Pro AI features Privacy
Google AdMob and similar ad SDKs are not used in Timebox.
4. Data retention & deletion
- Local data can be removed by clearing app data or uninstalling the app.
- Cloud data is associated with your signed-in account.
- To request deletion of a Timebox account and cloud data, follow Delete your Timebox account or email popvn.studio@gmail.com. We complete deletion within 30 days, subject to the retention rules on that page.
5. Security
We use industry-standard providers and transport encryption (HTTPS) for cloud features. No method of transmission or storage is 100% secure; please protect access to your device and account.
6. Children’s privacy
Timebox is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children.
7. International processing
If you use cloud sync or AI features, your data may be processed in the regions where our service providers operate.
8. Contact
Questions or deletion requests: popvn.studio@gmail.com
Timebox is operated by Pop Studio.
9. Changes
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of Timebox after an update means you accept the revised policy.