Privacy policy

Data controller

Antworks AB, company registration number 559592-5446, Grävlingsstigen 39, 139 41 Värmdö, Sweden, is the data controller for the processing in AntBox. Send questions about your data to support@antboxapp.com.

Data we process

Account: an id from the sign-in provider (Apple, Google or Microsoft) for each sign-in you have linked, when it was linked, your name and email address as the provider shares them, your display name and your choice of theme and language. If you sign in with Apple, the address may be a relay address from Apple, and we keep a key from Apple that is needed to revoke the sign-in when you delete your account.

Content: places, boxes and things with names, quantities, keywords, notes and photos, when the photo was taken, text your phone read in the photo (at most 500 characters), and the AI’s suggested name and keywords with the model that made them.

Household: who is a member and their role, invitations, and an activity log of who changed what and when.

Devices and security: the signed-in devices with the device name (for example browser and system) and when they were last used, and sign-in events (when, with which provider and whether it succeeded). Sign-in events store no IP address. The platform's technical logs may contain IP addresses. This data lets you sign out a device and lets us detect abuse and troubleshoot.

Payments: the household's tier and the subscription status, payments with amount and currency, who in the household bought, and the customer id at Stripe. Stripe, the App Store and Google Play send us events about the purchase; we keep the event as it arrived, and it may contain the buyer's name, email address and country. Card details are handled by Stripe and the stores and never reach us.

Why, and on what legal basis

To provide the service under the terms (contract): account, content, households, search, image recognition and payments.

To protect the service and you (legitimate interest): signed-in devices, sign-in events, technical logs and backups.

To comply with the law (legal obligation): accounting records when you pay.

We do not use your data for advertising and we do not sell it.

Photos and name suggestions

The app scales the photo down on your device to at most 1,600 pixels before it is uploaded, so the original never leaves the device. The scaled-down photo is uploaded directly to storage in Microsoft Azure in the EU. The server rotates it, removes metadata such as location and camera model (EXIF) and keeps two variants: a thumbnail of 256 pixels and a display image of 1024 pixels. The uploaded file is removed once the variants are done, or when the photo could not be read. An upload that is never attached to a thing is removed after 2 days.

To suggest names and keywords, the display image (1024 pixels) and an instruction are sent to our AI provider Staik, which sends the suggestions back. The instruction says which language the suggestions should be in, the household's language; nothing else about you or the household is sent. Staik processes the photos in [the country where Staik processes the photos] under our data processing agreement.

This happens only if you have allowed name suggestions. The app asks before your first photo, and you change your choice at any time under Account › Name suggestions. Without your yes no picture is sent to Staik: the photo is still stored with us, and you name the item yourself. The choice applies to the photos you take, on all your devices, and the server reads it before a picture is sent, so a no also applies to photos that are waiting.

Photo addresses are valid for at most 15 minutes and are only handed out to members of the household.

Preferably do not photograph people or documents with sensitive information. What you photograph is visible to everyone in the household.

Who receives the data

Members of your household see the household's content, the activity log and each other's display names, but never each other's email addresses.

Providers that process data on our behalf: Microsoft Azure (hosting, database, storage, backups and logs, in the EU) and Staik (image recognition).

Apple, Google and Microsoft when you sign in. Stripe when you pay on the web, and Apple (App Store) and Google (Google Play) when you buy in an app. They also process the data under their own terms. Some of them may process data outside the EU, and then do so under an EU Commission decision or standard contractual clauses.

We disclose data to authorities only when the law requires it.

How long data is kept

Account and content: as long as you have an account and the household exists. What you delete stays in the trash for 30 days and is then deleted for good.

Photos: when a thing, a household or an account is deleted, or when you replace a photo, the photos are removed from storage by a maintenance job that runs every hour. After that they can be restored in storage for 7 days, as protection against operational mistakes, before they are gone for good.

Backups: the database is backed up automatically, and the backups are kept for 14 days. Deleted data remains in the backups until they are that old. The backups are only used to restore the service after a failure.

Activity log: 12 months. Sign-in events: 365 days. A signed-out device session: 30 days after it ended. The platform's technical logs: 30 days.

Payments: the event from Stripe or the store is emptied of its content 30 days after it was processed. Subscriptions and payments are kept as long as accounting law requires, and remain even if the account is deleted.

Export: the link to the archive is valid for 24 hours, and the archive is removed after 2 days. An invitation is valid for 7 days.

When you leave a household or delete your account

If you leave a household, what you added stays there, with the photos, and the remaining members see it as before.

If you delete your account, households where you are the only member are deleted with all content and photos. If you own a household that others are members of, you first need to hand it over or delete it. In households owned by others, what you added stays with the household, and your name is removed from their activity log. All your sign-ins and devices are removed, and an Apple sign-in is revoked at Apple. Deletion cannot be undone; what is in the backups disappears when the backups become too old.

Only you can cancel a subscription in the App Store or Google Play, in the store. After the deletion the app tells you which ones continue until you do.

The Delete account page (antboxapp.com/delete-account) describes how to delete the account in the app, on the web and, if you can't sign in, by email to support@antboxapp.com.

Your rights

You have the right to know what data we hold about you, to correct it, to get a copy and to have it deleted. You do most of this yourself in the app: change your name under Account and Profile and the content directly where it is, see and sign out devices under Account and Devices, export your account and the households' content with photos as a zip file under Account and Export data, and delete the account under Account and Delete account.

If you want something the export does not contain, or want to object to processing based on legitimate interest, write to support@antboxapp.com.

If you think we process your data incorrectly, you can complain to the Swedish Authority for Privacy Protection (IMY).

Cookies and storage on your device

The web uses a single cookie, and it is necessary: it keeps you signed in, cannot be read by the page's scripts and is valid for 400 days from last use, at most 1095 days. We use no cookies for analytics or advertising.

The browser's storage keeps your choice of theme and language, a random id for the browser (so it is recognised among your devices), which household you last chose, your recent searches (at most five per household) and how far you have got in Get started. The chosen household and the recent searches are removed when you sign out.

Photos that have not been uploaded yet are kept in the browser's database (IndexedDB) on the device, marked with your account, until they are uploaded. If you sign out, the app asks first and then deletes your photos. If someone else signs in to the same browser, your photos are never uploaded in their name, and they are removed only if that person says yes.

While you sign in, a random code for the sign-in attempt is kept in the tab (sessionStorage), and when you link a new sign-in, also the proof from the first one. It is removed when the provider's answer is read, or when you leave the page without finishing.

The apps keep the sign-in in the phone's protected key storage, photos that have not been uploaded, and a copy of the household's content for searching offline. They are removed when you sign out.

Minimum age

AntBox is for people aged 16 or over, and we do not knowingly collect data about anyone younger. If we learn that an account belongs to someone younger, we delete it.

Changes

If we change the policy in a way that affects you, we will tell you in the app.