Privacy Policy

Effective Date: October 3, 2026
Last Updated: October 3, 2026

This policy explains what Hour Box collects about you, why, who else handles it, how long it is kept, and the rights you have. It is a separate document from the Terms & Conditions.

1. What we collect

• Your account: your email address, and your name if you sign in with Google or Apple. Passwords are stored only as a salted hash by our authentication provider.
• Your planner: the tasks, lists, notes, settings and repeating schedules you create.
• Google Calendar, only if you connect it: an access and a refresh token, and the calendar events needed to keep tasks and events in sync. Hour Box only changes events it created.
• When you accepted the Terms and which version, for accounts created with email.
• Subscription records: which plan you have, its dates and status, and an identifier from the store or payment provider. We never see or store your card or UPI details.
• Technical logs (errors, requests, and subscription events) kept by our host. The subscription analytics we record contain no name, email or account id.

2. Why we use it

To run the planner, sync it across your devices, provide the features you subscribed to, process and restore purchases, keep the service secure and prevent fraud, and meet legal obligations. We don’t sell your personal data and we don’t use it for advertising.

3. Who handles it

• Supabase: database and sign-in.
• Vercel: hosting and logs.
• Google: sign-in, and Calendar if you connect it.
• Apple: Sign in with Apple, and App Store purchases.
• Google Play: Play purchases.
• Razorpay: payments for web subscriptions.

These providers process data on our behalf or under their own terms and privacy policies. We share personal data when needed to provide the service, when the law requires it, or with your consent.

4. Children

If you are under the age of digital consent where you live, you may use Hour Box only with the consent of a parent or legal guardian. For children under applicable Indian data-protection law, we apply the requirements that govern children’s personal data, including parental consent.

5. How long we keep it

Your data is kept while your account exists and is removed when you delete it, apart from records we must keep for legal, security, fraud-prevention, dispute-resolution, or financial and tax purposes, and short-lived backups and logs.

6. Your rights

Depending on where you live, you may have the right to:

• access the information we hold about you;
• request correction;
• request deletion;
• withdraw consent where processing is based on consent;
• request information about how your data is processed;
• data portability;
• object to or restrict certain processing; and
• complain to a data-protection authority.

The scope of these rights depends on applicable law. In India this includes the rights under the Digital Personal Data Protection framework; in the United Kingdom, UK data-protection law; in the United States, applicable federal and state privacy law. To use any of them, write to the privacy contact below.

7. Your choices in the app

• Disconnect Google Calendar any time from the sync menu; this deletes the stored tokens.
• Delete your planner data, Calendar connection and web subscription from the Premium screen (“Delete my Hour Box data”). To close your login as well, contact us.
• Cancel an App Store or Google Play subscription in that store’s subscription settings. Deleting the app or your data does not cancel it.

8. Security

Data is encrypted in transit, and access to each person’s data is restricted by per-user security rules in the database. No system is perfectly secure, so please keep your sign-in details safe.

9. Changes

If this policy changes in a way that matters, we’ll update the dates above and tell you in the app.

10. Contact

Hour Box
Legal Entity: [INSERT LEGAL ENTITY NAME]
Registered Address: [INSERT REGISTERED ADDRESS]
Privacy Contact: [INSERT PRIVACY EMAIL]
Support: [INSERT SUPPORT EMAIL]