Boxx & Boxx Manager

Privacy Policy

This privacy policy describes how the Boxx mobile app (for players) and Boxx Manager mobile app (for turf owners) collect, use, and share information. By using either app you agree to the practices described below.

1. Who we are #who

Boxx is operated by an independent developer. For questions or requests about your data, contact jivani.jevin25@gmail.com.

2. Information we collect #data

We only collect what's needed to run the booking and turf-management experience:

• Account info (via Google Sign-In): your email address, full name, and profile photo URL. This comes from Google when you sign in; we never see your Google password.
• Profile additions you provide: phone number (optional), updates to your display name.
• Booking activity: turfs you've viewed or favorited, slots you've booked, cancellation history, reviews you've posted. For turf owners, the equivalent bookings + pitch configuration + revenue records for turfs you manage.
• Device telemetry (anonymous): app open, screen views, button presses, and crash diagnostics via Mixpanel. We do not collect advertising IDs, precise location (beyond the city you select), or contact lists.

3. How we use it #use

• To authenticate you and keep your session secure.
• To show you turfs near you, confirm bookings, and notify you of changes.
• To help turf owners verify check-ins and manage their venues.
• To diagnose crashes and improve the apps. No personal data is sold or rented.

4. Where it's stored #storage

Your data is stored on Supabase (managed Postgres, ap-northeast-1 region). All transit is encrypted with TLS. Database access is restricted with Row-Level Security so each account only sees its own data.

5. Third parties we share with #third-parties

We do not run advertising networks, sell data, or share with data brokers.

6. Data retention #retention

Your account and booking history are retained for as long as your account is active. When you delete your account (see your rights below), we delete your profile and personal identifiers within 30 days. Aggregate, de-identified analytics may be retained indefinitely.

7. Your rights #rights

• Access: request a copy of the data we hold about you.
• Correction: update name / phone in-app from the Profile tab.
• Deletion: email jivani.jevin25@gmail.com from the address on your account asking for deletion. We complete it within 30 days.
• Withdraw consent: sign out at any time from the Profile tab; that revokes the active session.

8. Children #children

Boxx and Boxx Manager are intended for users 18 and older. We do not knowingly collect data from anyone under 18.

9. Changes to this policy #changes

We may update this policy as the apps evolve. Material changes will be flagged in-app on next sign-in. The "Last updated" timestamp at the top of this page always reflects the current version.