Privacy Policy for Timeboxx
Last updated: July 14, 2026
Timeboxx (“Timeboxx,” “we,” “us,” or “our”) is a mobile application owned and operated by Filter Consulting, LLC, a limited liability company based in Missouri, United States. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.
By downloading or using Timeboxx, you agree to the practices described here. If you do not agree, please do not use the app.
1. A quick summary
- Most of your actual schedule and task data lives in your own iCloud account (via Apple CloudKit) and on your device. We do not have access to that content.
- We collect a limited account identity (through Sign in with Apple) so we can associate your subscription and support requests with you.
- We use analytics, crash-reporting, and advertising-attribution services to understand how the app is used and how people find it.
- When you use the AI “Describe your day” feature, the text you enter is sent to a third-party AI provider to generate a schedule.
- We do not sell your personal information for money. Certain advertising-related data sharing may qualify as a “sale” or “sharing” under some U.S. state laws — see Section 9.
- Account information (Sign in with Apple). If you choose to enable iCloud sync or sign in, Apple provides us with a unique account identifier and, on your first sign-in only, the name and email address you choose to share. If you use Apple’s “Hide My Email,” we receive a private relay email address rather than your personal one.
- Feedback and support requests. If you submit feedback, a feature request, or a bug report — through the app or the contact form on our website — we collect the content you write, any name and email you provide, and basic context (such as app version and device OS version, or the device description you type into the web form).
- AI feature input. When you use the “Describe your day” feature, we process the text you type or dictate in order to generate a proposed schedule (see Section 4).
Your tasks, schedules, projects, and time records are stored on your device and synced through your personal iCloud account using Apple CloudKit. This content is governed by Apple’s privacy protections; we, the developer, do not have access to the contents of your CloudKit data.
If you connect your calendar, Timeboxx reads your events on a read-only basis to display them in your schedule. Calendar data stays on your device and in your iCloud; we do not transmit your calendar events to our servers, and we never write to your calendar.
d. App-blocking selections (Screen Time)
If you use the app-blocking feature, you select apps and categories through Apple’s Screen Time / Family Controls system. Apple represents these selections as opaque tokens that we cannot read — we never learn which specific apps you choose to block or allow. These selections remain on your device.
- Usage and product analytics — how you interact with features, session activity, and events, to improve the app.
- Crash and diagnostic data — technical information when the app crashes, to help us fix bugs. This comes through Apple’s built-in crash and diagnostics reporting (no third-party crash SDK), and only if you have enabled “Share With App Developers” in your iOS analytics settings.
- Device and identifier information — device model, OS version, app version, language/region, and identifiers such as the Apple advertising identifier (IDFA), collected only if you grant permission through Apple’s App Tracking Transparency prompt (see Section 6).
- Attribution data — limited information used to understand which marketing source or campaign led you to install the app.
When you subscribe, Apple processes your payment. We do not receive your credit card or payment details. We receive and store subscription status and transaction records from Apple (for example, whether you have an active subscription, when it renews, and refund or cancellation events) to manage your access and understand our business.
We use the information described above to:
- Provide, operate, and maintain the app and its features;
- Manage your subscription and premium access;
- Generate schedules through the AI feature;
- Respond to your feedback and support requests;
- Understand how the app is used and improve it;
- Measure the effectiveness of our marketing and understand how users find us;
- Detect, prevent, and address technical issues, fraud, or abuse;
- Comply with legal obligations.
4. The AI “Describe your day” feature
When you use the AI feature, the text you enter (and, together with it, limited context such as your project names and working hours needed to build a useful schedule) is sent through our secure server to a third-party AI provider, Anthropic, which processes it to return a suggested schedule.
- We send only what is needed to generate your schedule.
- Per our agreement with our AI provider, inputs submitted through their business API are not used to train their models.
- [REVIEW: confirm this statement against Anthropic’s then-current commercial terms before publishing, and update if their terms change.]
- Please avoid entering sensitive personal information into the AI feature that you would not want processed by a third-party service.
We do not sell your personal information for money. We share information only as described here:
- Service providers (“subprocessors”) who help us operate the app, under contractual confidentiality and data-protection obligations. These currently include:
- Apple — app distribution, Sign in with Apple, CloudKit sync, payments, and Screen Time.
- Anthropic — AI processing for the Describe feature.
- Cloudflare — our server/proxy infrastructure and website hosting.
- Neon (a Databricks company) — our database, which stores account identity, subscription records, and feedback.
- Amplitude — product analytics.
- Appstack — mobile marketing measurement/attribution.
- Meta Platforms — advertising measurement. We do not include a Meta SDK in the app; limited conversion events may be shared server-side (via our attribution provider) to measure ad campaigns.
- Legal and safety — when required by law, subpoena, or legal process, or to protect the rights, safety, and property of Filter Consulting, LLC, our users, or others.
- Business transfers — in connection with a merger, acquisition, financing, or sale of assets, in which case we will notify you of any change in ownership or use of your personal information.
[REVIEW BEFORE PUBLISHING: This subprocessor list must exactly match the SDKs and services that actually ship in the submitted build, and must be consistent with your App Store “App Privacy” nutrition label. Remove any service you are not using at launch, and add any you add later.]
6. Tracking and advertising (App Tracking Transparency)
Some of our services (such as advertising-attribution tools) may use your device’s advertising identifier to measure ad performance. On Apple devices, we will ask for your permission through Apple’s App Tracking Transparency prompt before any such tracking occurs. If you decline, we will not track you across other companies’ apps and websites using that identifier. You can change this choice at any time in your device’s Settings under Privacy & Security → Tracking.
We also use Apple’s SKAdNetwork, a privacy-preserving system that measures ad campaign performance without identifying you individually.
7. Data retention
- Account identity and subscription records are retained for as long as your account is active and as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements.
- Analytics and attribution data are retained according to the settings and defaults of the relevant service provider.
- Feedback is retained as long as useful for product improvement.
- When you delete your account (see Section 10), we delete or de-identify the personal information we hold, except where retention is required by law.
8. Data storage, location, and security
The information we collect on our own servers is stored in the United States using Cloudflare and Neon infrastructure. We use reasonable technical and organizational measures to protect your information, including encryption in transit and access controls on our systems. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
If you access Timeboxx from outside the United States, understand that your information may be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your country.
9. Your privacy rights
Depending on where you live, you may have some or all of the following rights regarding your personal information:
- Access — request a copy of the personal information we hold about you.
- Correction — request that we correct inaccurate information.
- Deletion — request that we delete your personal information.
- Opt out of “sale” or “sharing” — certain advertising-related data sharing may qualify as a “sale” or “sharing” under laws such as the California Consumer Privacy Act (CCPA/CPRA). You can opt out by declining the App Tracking Transparency prompt and by contacting us.
- Non-discrimination — we will not discriminate against you for exercising your rights.
For users in the European Economic Area, United Kingdom, and similar jurisdictions: our legal bases for processing are performance of our contract with you (to provide the app), your consent (for tracking and certain analytics), and our legitimate interests (to improve and secure the app). You also have the right to lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us at support@timeboxx.co. We may need to verify your identity before responding.
[REVIEW: A lawyer should confirm which state/international privacy laws apply to you and whether you need dedicated CCPA/GDPR sections, a “Do Not Sell or Share My Personal Information” mechanism, and specific disclosures. This section is a general starting point.]
10. Deleting your account and data
You can request deletion of your account and associated personal information at any time by emailing us at support@timeboxx.co.
Note that content stored in your personal iCloud is controlled by you through your Apple account; deleting the app or your iCloud data is managed through Apple.
[REVIEW: Apple requires apps that support account creation to also offer in-app account deletion. Make sure the in-app deletion path described here actually exists before submission.]
11. Children’s privacy
Timeboxx is not directed to children, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at support@timeboxx.co and we will delete it.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of Timeboxx after changes take effect constitutes acceptance of the revised policy.
If you have questions or requests regarding this Privacy Policy or your personal information, contact:
Filter Consulting, LLC
Email: support@timeboxx.co
