Privacy Policy

1. Server-Side Data & Generative AI

1.1 Google Authentication & Account Deletion

Data Collected: Email address and Google User ID.
Purpose: Authenticating your "Smart Link" dashboard.
User Control: In compliance with Google Play's Account Deletion Policy, users can instantly delete their account and all associated server data via Settings > Account > Delete Account. This permanently purges your data from our records.

1.2 Notification & Service Data

To provide our core features, including Message Reminders and the "Poke" engagement tool, WhatBox utilizes server-side notifications.

Data Collection: We collect and store a unique device identifier (Push Token) on our secure servers.
Transit Security: All data is encrypted via TLS 1.3.
Purpose: This token is used exclusively to trigger and deliver notifications to your device at the requested time. It is necessary for the functional operation of manual reminders and social pokes.
Retention: These tokens are stored securely and are not used for user tracking, profiling, or third-party advertising.
User Control: You can opt-out of notifications at any time through your device settings. Upon account deletion or a formal request via www.whatbox.io/delete-account, all associated tokens are permanently purged from our database.

1.3 Your Data Rights & Deletion

We believe in full user agency over personal data. WhatBox provides two easy ways to delete your account and all associated data (including stored notification tokens):

• In-App Deletion: You can permanently delete your account directly within the app by navigating to Settings > Account > Account Delete. This action instantly triggers the removal of your data from our active servers.
• Web-Based Request: In compliance with Google Play policies, you may also request account and data deletion through our official web portal at www.whatbox.io/page/delete-account.

1.4 AI-Generated Content (Stickers)

Generative AI Disclosure: Sticker packs are generated using advanced AI models (e.g., Gemini, ChatGPT).
User Safety: We provide a prominent "Report" feature for every sticker pack. Reported content is reviewed and removed within 24 hours if it violates safety standards. No user photos are uploaded; stickers are pre-generated.

1.5 Secret Message (Emoji Decoder - Text Transformation Utility)

WhatBox provides a fun, creative way to share messages using emoji-based transformation. This feature is intended for entertainment and lightweight privacy within your personal conversations:

• Local-Only Processing: The conversion of text into emoji strings (and the reverse decoding process) occurs entirely on your device. WhatBox does not collect, transmit, or store the original text or the resulting emoji code on our servers.
• Non-Cryptographic Nature: This feature is a text-substitution utility for general use and fun. It is not a high-security encryption tool and should not be used for sensitive financial, legal, or medical data.
• No Access to Clipboard: WhatBox only processes text that you manually paste into the app's decoder. We do not monitor your system clipboard or read your WhatsApp messages automatically.
• User Responsibility: Users are solely responsible for the content they choose to convert and share. WhatBox does not moderate the private text converted by users as it is never sent to our systems.

1.6 Sticker Reporting & Feedback

To ensure a safe community and prevent system abuse, users must sign in with a Google Account to report AI-generated stickers. We collect your email address solely to verify the report and to provide you with status updates regarding the administrative action taken on the reported content. This data is not used for marketing or shared with third parties.

1.7 Status Saver (Scoped Storage Clause)

WhatBox provides a local utility to view and save temporary status media. To function, the app utilizes the Android MediaStore API (Scoped Storage) to access only the specific media directories used by WhatsApp. WhatBox does not have access to your private photos, nor does it upload your viewed statuses to our servers. All saved media is stored locally on your device's storage and is managed entirely by you.

1.8 Direct Message (No-Contact Messaging Clause)

Our "Direct Message" feature acts as a technical shortcut using the official WhatsApp Public API (wa.me). This feature allows users to initiate a chat without saving a phone number to their local address book. WhatBox does not send messages on your behalf; it simply opens the official WhatsApp interface. We do not collect or store the phone numbers you enter into this dialer.

1.9 Quote Templates (UGC & Moderation Clause)

Quote Templates are provided for creative expression. While WhatBox provides the design tools, the text entered is "User-Generated Content." By using this feature, you agree not to create or share content that is hateful, illegal, or violates third-party copyrights. WhatBox does not host these quotes on its servers; they are processed locally. We just provide tool for design purpose.

1.10 Safe-Cleaner (Data Deletion Clause)

The Cleaner feature identifies redundant, duplicated, or "junk" files within your WhatsApp media folders (such as old voice notes or cached images). WhatBox only provides a visual summary of these files. No data is deleted without your explicit manual confirmation. WhatBox does not scan your personal system files outside of the designated WhatsApp media directory.

2. Local Processing (Zero-Server Architecture)

2.1 Media Utilities (Video & Text Status Cutter)

• On-Device Editing: Trimming, audio merging, and text-to-image conversions occur locally. We do not have a cloud component for your media.
• Storage Access: We utilize the Android Photo Picker and Storage Access Framework (SAF). We only access the specific files you explicitly select. We do not request broad "Manage All Files" permissions.

2.2 Input Tools (Stylish Text & Secret Message)

• No Input Monitoring: WhatBox does not install a custom keyboard. Transformations occur only on text typed directly into our App.
• Clipboard: We interact with the clipboard only upon a user-initiated "Copy" or "Paste" command.

3. Data Collection & Advertising

3.1 Personal Information (Phone Numbers)

WhatBox handles phone numbers in the following specific contexts:

• Direct Message Feature: When you use the Direct Message tool, you manually enter a phone number to initiate a WhatsApp chat. This number is processed to generate an official WhatsApp API link (wa.me).
• Data Collection Disclosure: While we do not store these numbers on our permanent servers, they are considered "Collected" and "Transmitted" to facilitate the technical hand-off to the WhatsApp application.
• Purpose: This data is used strictly for App Functionality and is not used for marketing, tracking, or user profiling.

3.2 Advertising & Device Identifiers

To keep WhatBox free, we utilize third-party advertising partners (Google AdMob and Facebook Audience Network).

• Data Collected: These services may collect your Google Advertising ID, IP address, and device hardware specifications.
• Purpose: This data is used for Advertising & Marketing (serving relevant ads), Analytics (measuring ad performance), and Fraud Prevention (detecting invalid clicks or bot activity).
• User Control: You can reset or opt-out of personalized ads at any time via your Android Device Settings (Settings > Google > Ads).

3.3 Standard Permissions

• Camera: Strictly used for scanning QR codes locally.
• Storage: Used via Scoped Storage to save and manage media you explicitly choose to download.

4. Legal Disclaimers & Conduct

• Ownership: Users retain 100% intellectual property rights to content they process.
• Prohibited Content: Users may not create content promoting hate speech, violence, or illegal acts.
• Independent Status: WhatBox is an independent tool. It is NOT affiliated with, authorized, maintained, sponsored, or endorsed by WhatsApp or Meta Platforms, Inc.

5. Contact & Data Deletion Requests