Privacy Policy

Last updated: January 2025

1. Introduction

PriBox ("we", "us", or "the app") values your privacy. This Privacy Policy explains how we process and protect your information. PriBox is designed to operate completely offline; your data does not leave your device.

2. Data Collection and Use

2.1 No Data Collection

PriBox follows a strict "no data collection" principle. We do not collect, store, transmit, or share any personal data, including but not limited to:

  • Passwords and account information
  • Photos, videos, and files
  • Contacts and related data
  • Usage analytics or statistics
  • Device identifiers
  • Location information

2.2 On-Device Storage

Your data is stored locally on your device using iOS secure storage technologies:

  • Documents Directory: Photo albums and file data are stored in the app sandbox Documents directory.
  • Keychain: The master key, salts, and encrypted data keys are stored in iOS Keychain.
  • SwiftData: Contact records are stored using SwiftData.

The app sandbox is secure by design. Data in the Documents directory is protected by iOS sandboxing; separate encryption of those files is not required beyond the app’s standard protections. Key management is only used for the master password and app authentication flows.

3. Security

3.1 Encryption

PriBox uses industry-standard encryption:

  • AES-256-GCM authenticated encryption for sensitive data
  • PBKDF2 for key derivation with random salt
  • Integrity checks to ensure data has not been tampered with

3.2 Protective Measures

  • Completely offline operation; no network dependency
  • Auto-lock to prevent unauthorized access
  • Optional biometric authentication (Face ID/Touch ID)
  • Disguise entry options to protect privacy in sensitive scenarios

4. Third-Party Services

4.1 No Third-Party Sharing

We do not share your data with third parties. Specifically, we do not:

  • Sell data to advertisers or marketers
  • Share information with social media platforms
  • Send data to external servers
  • Use third-party analytics or advertising SDKs

4.2 System Integrations

PriBox integrates only with iOS system services, and only with your permission:

  • Contacts: Read/write contacts when authorized
  • Photos: Access photo library for imports when authorized
  • Files: Access files you choose to import/export
  • Biometrics: Use system APIs for authentication

5. Backup and Restore

5.1 Local Backup

You may create local backups at your discretion:

  • Backups are stored only on your device
  • Backup archives use ZIP compression without additional encryption
  • You control creation, storage, and deletion of backups

5.2 Restore

Restore operations are local:

  • Restores use backup files you provide
  • The process runs entirely on-device
  • We cannot access or recover your data

6. Children’s Privacy

PriBox does not intentionally collect personal information from children under 13. If you are under 13, do not use the app. Parents and guardians should ensure children understand this policy.

7. Permissions

7.1 Camera

Used for QR scanning or taking photos; requested only when you initiate these actions.

7.2 Photos

Used to import photos into secure albums; requested only when you choose to import.

7.3 Contacts

Used to synchronize with the system contacts; accessed only with your authorization.

7.4 Files

Used to import/export files; accessed only when you perform these actions.

8. Data Deletion

8.1 App Uninstall

When you uninstall PriBox:

  • All app data is permanently removed
  • Deleted data cannot be recovered
  • Export important data before uninstalling

8.2 Clear All Data

You can clear all data within the app:

  • Use “Clear All Data” from the Settings menu
  • This action is irreversible
  • Create a backup first if needed

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via:

  • In-app notifications
  • Website announcements
  • Email notices (if applicable)

Continuing to use the app after updates constitutes acceptance of the revised policy.

10. Contact Us

If you have questions or suggestions about this Privacy Policy, contact us:

  • Email: priBox@toaigc.com
  • Support: priBox@toaigc.com
  • Website: https://pribox.toaigc.com/support

11. Legal Notice

This Privacy Policy is governed by applicable laws and regulations in your jurisdiction. Disputes should be resolved amicably; if unresolved, you may seek relief with a competent court.