Legal
Privacy policy
Boxsight and your data: what stays on the phone, and what does not.
Last updated: 8 September 2026
In short. No image and no detection ever leaves the device. Three things do, and only these: the crash reports and usage statistics described below; — only when you start it — a support report you write and send yourself; and, if you want to read the reply, the email address you type. There is no password and nothing to sign up for, and that address can be deleted from the app or by writing to us (how to delete it).
1. Who processes the data
The controller is Ubiquitous S.r.l., Via Ariosto 25, 00185 Roma, Italia, P.IVA 17584931004. For anything about this policy, write to [email protected].
2. What stays on your device
Boxsight stores in the app's private storage, on your phone:
- the selected model and the detection thresholds (confidence, IoU, acceleration)
- any model you import yourself, in the app's private storage
- your theme preference
None of it is transmitted to us. Uninstalling the app takes it with it.
3. What goes over the network
Inference runs entirely on the device. Camera frames are analysed in memory and discarded: they are not transmitted, not stored, and never leave the phone. The only things that persist are the ones you save yourself — a photo in your gallery, or a detection log in a file you pick — and they stay where you put them.
Diagnostics: crashes and usage statistics
The app uses two Google services: Firebase Crashlytics and Firebase Analytics (Google Ireland Limited).
When the app crashes, Crashlytics receives a technical report we use to understand what broke: the stack trace, the device model, the Android version and the app version. Analytics receives anonymous events about how the app is used — which screens are opened, which features are tapped — along with an identifier Google assigns to the installation, not to you.
Neither receives video, audio, credentials, your camera addresses, or anything of what you film. Those do not leave the device, as described above.
Google's own privacy policy governs its processing. You can ask us to have the diagnostic data deleted by writing to [email protected].
4. Permissions, and why
- Camera — it is what the app analyses; without it there is nothing to detect
- Internet and network state — only to download the optional RF-DETR model from Google Play and for in-app purchases. Inference never uses the network
5. In-app purchases
The Boxsight Pro subscription is sold and managed by Google Play. Payment happens on your Google account: we never see a card number and we store no payment data. Google tells us only whether a subscription is active, without identifying you. Google's own privacy policy governs its processing.
6. Support: reports, and licences
From Info → Support the app can send a report — something that went wrong, or
something you would like — to apps-management, a service of ours at
apps-management.synapsi.ai. This is the one part of Boxsight that talks to a server
of ours, and none of it happens unless you start it.
What is sent when you send a report:
- the title and the description you typed
- the app version, the Android version, the device model and the language the app is set to — what makes a fault reproducible
- only if you turn the switch on: a block of diagnostics about the app and the device, redacted before you see it. It is shown on the screen before it goes, and you can read it and decide
- only if you pick one: a screenshot, chosen by you from your gallery
- only if you type one: an email address, so we can answer. Without it the report is sent anyway and cannot be replied to
- a number drawn at random for that one report, so that sending it again after a lost connection is a retry rather than a second report in the queue. It is thrown away with the screen and identifies nothing and nobody
What is never sent: no account, no password, and no identifier of any kind — not an advertising id, not an installation id. Nothing is collected in the background: what travels is what you typed or switched on.
Reading the answer, and asking for features. To read a reply, or to vote on what other people have asked for, the app asks for your email address and sends a six-digit code to it. That address is what proves it is you; there is no password and no account. The key the app keeps afterwards is stored in the app's private storage and identifies the address, nothing else.
Licences. If we have granted you Boxsight Pro by hand — a tester, a translator, somebody whose payment failed for a reason that was not theirs — the app asks the service, once per launch and only when you have signed in, whether that grant is still valid. Nothing is sent but the key described above.
How long your address is kept. It is stored so we can write back, and where it is only used for a comparison it is stored as a fingerprint rather than as an address. After five months in which nothing has happened — no report, no reply, no sign-in — we email you to say the address will be deleted in a month, and that opening the app is enough to keep it. A month later it goes. Nothing is ever deleted without that warning first: an address that passed six months while our mail was not working is warned then, and deleted a month after that.
How to have it deleted sooner. From the app: Info → Support → Your messages → Close my account, which asks once and then does it. Writing to [email protected] works too, and is the route that still works when you no longer have the app (both, in full). Either way the reports themselves stay, with the link to you removed: a fault is a fault once it is reported, and what is left cannot be traced back to anybody.
The service runs on our own machine in Milan (Google Cloud, europe-west8), behind Cloudflare. The verification and reply emails are sent through Mailjet (Sinch Email, France).
7. Your rights
The GDPR gives you access, rectification, erasure, restriction, portability and objection. For this app the practical answer is nearly always the same: the data is already only yours and already only on your device. For the diagnostic data, write to us and we will have it deleted. You can still write to [email protected], and you may lodge a complaint with your data protection authority.
8. Children
The app is not directed at children under 13 and does not knowingly collect data about them.
9. Changes
If this policy changes, the date at the top changes with it. Material changes are announced in the Google Play release notes too.