中文Sign in

TagBox Privacy Policy

Last updated:

This is the privacy policy of the TagBox app (web and Android). Signing in to your runupbiz account is covered by the runupbiz Privacy Policy; where the two differ, this page decides for TagBox.

Who is responsible

runupbiz, a small studio run by a solo founder in Malaysia, runs TagBox and its servers. Contact: [email protected].

What TagBox keeps on your device

  • Your list: containers, their items, quantities, where each box sits (room, then furniture, then level), notes, up to 5 photos per item, the labels you print and their QR codes.
  • The list lives in the app storage on the device you use. TagBox works without an account, and while you have none nothing is sent anywhere.

Cloud backup, only when you turn it on

  • Cloud backup is off by default. It runs only when you are signed in to a runupbiz account and have turned it on in the app.
  • A backup is one snapshot of your whole list; up to 5 snapshots are kept for an account.
  • Before a snapshot leaves your device it is compressed and sealed with AES-256-GCM there, and it stays sealed on our server: the server stores the sealed bytes and never opens them.
  • Sign-in tells us which account a snapshot belongs to. Each upload and download records the time, the account and the device type, and the server log records the IP address, as on any website.

What we do not collect

  • No analytics, tracking or advertising code in the app.
  • We cannot read the contents of a backup: it is sealed on your device and unsealed only there.
  • We do not sell, rent or share your data with third parties.

Why we store it

Only to run backup and restore, so the same list can be opened on another device.

How long we keep it

  • While cloud backup is switched on for the account, the newest 5 snapshots are kept.
  • If cloud backup stops for an account, its snapshots can still be downloaded for 90 days and are then deleted.
  • A snapshot that no device uploads to or downloads from for 12 months is deleted automatically.
  • Our own daily database copies are kept for 14 days and then expire.

Deleting your data

In the app, Cloud and then Delete all cloud data removes every snapshot at once. Deleting a container removes it from the next backup. To close your runupbiz account, see Delete your account: the account itself is removed 30 days after the request is confirmed, and any TagBox snapshots still under it are removed by the 90-day and 12-month rules above.

Purchases

Purchases, if any, are handled by Google Play, and refunds follow Google Play’s policy.

Where data is kept and your rights

Data is stored on our own servers. You can ask to see, correct or delete your data at any time by emailing [email protected]. We aim to follow Malaysia’s Personal Data Protection Act 2010. This page is not a legal certification.

Changes

If this policy changes in a material way, the change is announced on this page and in the app.