What leaves your device, and what doesn’t
TimeBox is a time-blocking and daily planning app made by one person. This policy is written the way I’d explain it to a friend: plainly, and without claiming anything I can’t back up.
Stays on your device (and in your own iCloud, if sync is on)
- Your daily plans, tasks and time blocks
- Your Brain Dump notes
- Your display name, if you set one
- Your preferences — theme, language, when your day starts and ends, default block length
Leaves your device
- Purchase information, if the app is installed — handled by Apple and recorded by RevenueCat. This includes a device/app identifier and, when you’re signed into iCloud, an anonymous identifier derived from your iCloud account.
- Sync messages between your own Apple devices, through Apple’s iCloud and push infrastructure, so a change on your iPhone shows up on your iPad.
Never reaches me
- Anything you write. I have no server. I never receive, see, or store your plans, tasks or notes — there is no technical path by which they could reach me.
Who’s behind TimeBox
TimeBox is made by Adam, an independent solo developer based in Poland.
For anything privacy-related, email markockidev@icloud.com.
Your plans, tasks and notes
Everything you write in TimeBox — daily plans, tasks, time blocks, Brain Dump notes — is saved as files on your own device.
None of it is bought, inferred, or collected from anywhere else. It’s just what you typed.
I don’t run a server, and TimeBox doesn’t send your content anywhere I can reach. Deleting a task, a plan or a note inside the app removes it, and nothing expires or gets cleaned up on its own.
I have no way to see what you write in TimeBox.
iCloud sync
If iCloud sync is switched on, your plans and notes are mirrored to your own private iCloud account using Apple’s CloudKit.
A few things worth being precise about:
- The data goes into your personal iCloud storage, in a private database tied to your Apple account. It does not go to any server belonging to me.
- I cannot read it. I have no access to your iCloud, no admin console, and no copy of your content.
- Your content is stored in encrypted fields. Some non-content details — such as which calendar date a plan belongs to and when it last changed — are stored unencrypted so the app can look plans up. Those reveal which days you planned something, never what was in them.
- Apple’s handling of iCloud is governed by Apple’s Privacy Policy.
Turning sync off
Sync is on by default, and there’s an off switch in Settings → iCloud inside TimeBox.
If you turn it off, TimeBox keeps working exactly as before, entirely on your device. You just won’t see changes carried across to your other devices. Turning sync off stops further syncing — it does not delete what’s already in your iCloud.
Notifications
TimeBox uses local notifications — they’re scheduled on your device, by the app, and their content never travels anywhere:
- Reminders for tasks and time blocks you’ve scheduled
- An end-of-day reminder
- A weekly reminder that the tip jar exists
Separately, TimeBox asks for notification permission so that Apple’s push infrastructure can tell the app when something changed on another of your devices, which is how iCloud sync stays current. That’s the only reason push is used.
I will never send you a marketing push notification. I have no way to send you a notification at all.
One practical note: a reminder for a scheduled block includes the task’s title, so text you wrote may appear on your lock screen. You can hide it in iOS Settings → Notifications → TimeBox → Show Previews, or turn notifications off entirely — TimeBox works fine without them.
Tips and in-app purchases
TimeBox is free. There’s an optional tip jar with three one-off purchases.
Tipping unlocks nothing. No feature is gated, hidden, limited, or improved by tipping. It’s a thank-you, nothing more.
How payment works
- Purchases are processed by Apple. I never see your card details, billing address, or anything of that kind.
- Purchases are handled through RevenueCat, a third-party service that records purchases and gives me sales analytics. RevenueCat receives purchase information and a device/app identifier.
- This applies to everyone who uses the app, not only people who tip — RevenueCat is initialised when the app starts so it can check whether a tip already exists.
The identifier used for restoring tips
So that a tip is recognised when you get a new device or reinstall the app, TimeBox sends RevenueCat an anonymous identifier derived from your iCloud account — Apple’s opaque CloudKit user record ID. To be clear about what that is:
- It is not your Apple ID
- It is not your email address, name, or phone number
- It cannot be reversed into any of those
If you aren’t signed into iCloud, an anonymous identifier is used instead, and everything still works.
RevenueCat’s own handling of this data is covered by their privacy policy.
What TimeBox does not do
- No analytics or tracking SDKs — no usage statistics, no behavioural profiling, no crash-reporting SDK
- No advertising, and no advertising identifier (IDFA)
- No cross-app or cross-site tracking, ever
- No accounts — no sign-up, no password, no login
- No email collection, and no mailing list
- No selling or sharing of personal data — not to advertisers, brokers, or anyone else
- No access to your location, contacts, photos, camera, microphone, calendar, or health data
Links out of the app
TimeBox links to a feedback board, this policy, and my website. Opening one hands the address to your browser; TimeBox sends nothing along with it. Like any website, those sites will see your IP address and browser, and they’re governed by their own privacy policies.
Deleting your data
Your plans and notes are kept until you delete them. Nothing expires on its own.
- Delete individual items — do it inside the app, any time.
- Delete everything on your device — delete the app. All plans, notes and settings go with it.
- Delete the iCloud copy — deleting the app does not remove what’s in your iCloud. Remove it in iOS Settings → [your name] → iCloud → Manage Account Storage → TimeBox. It’s your iCloud account, so this is entirely under your control.
- Purchase records — purchase history sits with Apple and RevenueCat and is tied to your purchase, not to your plans or notes. If you’d like the RevenueCat record associated with your identifier deleted, email me and I’ll take care of it.
If you’d like help with any of this, email markockidev@icloud.com.
Children’s privacy
TimeBox is not directed at children under 13, and I don’t knowingly collect personal information from them. The app has no advertising, no tracking, and no social features. Purchases are optional and covered by Apple’s own parental controls.
If you believe a child under 13 has provided personal information through the app, please email me and I’ll help sort it out.
Your rights (GDPR / UK GDPR)
If you’re in the EU, the UK, or somewhere with similar data protection law, you have the right to access your data, ask for it to be deleted, have it corrected, and object to how it’s processed.
In TimeBox’s case these are unusually simple to exercise, because your content is already entirely in your possession — on your device and in your own iCloud. I hold no copy of it and cannot retrieve, read, or delete it for you. The steps above put all of it under your direct control.
The one thing that isn’t in your hands is the purchase record held by Apple and RevenueCat. My basis for that processing is the legitimate interest of running a paid feature and knowing whether a tip has already been made. Email me and I’ll help with any request about it — including deletion.
You also have the right to complain to your local data protection authority.
Changes to this policy
If this policy changes in a way that matters, the updated version will be posted here with a new effective date, and significant changes will be noted in the app’s release notes.
Contact
Adam — markockidev@icloud.com