Summary
- Proofbox collects no personal data and sends nothing to us or to anyone else. The app has no Internet permission, no account, no ads, no analytics.
- Everything you enter (items, stores, prices, dates, notes and receipt photos) is stored only in the app's private storage on your phone.
- The only permission the app asks for is to show notifications, so it can remind you about return deadlines and warranty ends. You can decline.
- Android may include the app's data in your own device backup (Google backup) if you have that turned on. That backup is yours and under your control, not ours.
- You can export, import or delete all data at any time inside the app. Uninstalling the app deletes everything on the device.
1. Who we are
Proofbox is published by MODERN TECHNOLOGY IT LLC (“we”, “us”). 4 vul. Oleny Telihy, Kyiv, 04112, Ukraine. You can reach us at proofbox@kubeharbor.space.
For the purposes of the EU General Data Protection Regulation (GDPR) and similar laws we would be the “controller” of any personal data we process. As explained below, the app is designed so that we do not process your personal data at all. The only personal data we may process is what you choose to send us by e-mail (see section 16).
2. Scope
This policy covers the Proofbox Android app (package com.proofbox.keeper) distributed through Google Play, and the website at proofbox.kubeharbor.space. It does not cover Google Play itself, the Android operating system, or other apps you use with Proofbox (for example your camera app or the file manager you pick when exporting). Those are governed by their own privacy policies.
3. What the app processes
Proofbox is an offline tool. All processing happens on your device, by the app, for you. We never receive any of it. For transparency, this is the data the app handles, why, on what basis and for how long.
| Category | What | Why | Legal basis | Retention |
|---|---|---|---|---|
| Purchase records | Item name, store, price and currency label, purchase date, return window (days), warranty length (months), notes, reminder toggles, creation date. | To show your list, group it by store, compute “return by” and “warranty until” dates and days left. | Not applicable to us: the data is processed only on your device by software you run. If a basis were needed it would be the performance of our agreement with you (GDPR Art. 6(1)(b)). | Until you delete the item, delete all data in Settings, or uninstall the app. |
| Receipt photos | Images you take with your camera app at the app's request, or pick from your gallery with the Android photo picker. Stored as downscaled JPEG files (max 1600 px) in the app's private folder. | To keep proof of purchase next to the item, show thumbnails and let you view or share the photo. | Same as above. | Same as above. Deleting an item deletes its photo file. |
| Reminder log | Which reminder (return or warranty) was shown for which item, on which day. | So the daily check does not notify you twice for the same deadline. | Same as above. | Same as above. |
| Settings | Appearance (system, light, dark), notification master toggle, default lead times, default return window and warranty length, first-launch flag. | To remember your preferences. | Same as above. | Until you delete all data or uninstall. |
| Export files | A ZIP containing proofbox-backup.json and your photos, created only when you tap Export and choose a location. |
So you can back up or move your data yourself. | Your choice (you initiate it). | The file is yours; it lives wherever you saved it until you delete it. |
The app does not read the content of your receipts, does not recognise text in photos and does not analyse your purchases. The “price” is a number you type; the currency symbol is only a label taken from your phone's locale.
4. What we do not collect
To be explicit, Proofbox:
- has no user accounts and no sign-in of any kind;
- has no Internet permission, so it cannot transmit data over the network, not even crash reports;
- contains no advertising and does not read the Android advertising ID;
- contains no analytics, crash-reporting or tracking SDK; the only libraries used are Android's own AndroidX components;
- does not access your location, contacts, calendar, microphone, call log or SMS;
- does not request camera or storage permissions: it asks your camera app to take a picture and the Android photo picker to hand over one image you choose, and it uses the Android file picker for export and import;
- does not use cookies or web views.
Our answer to Google Play's data-safety question “Does your app collect or share any of the required user data types?” is No.
5. Data stored on your device only
All data listed in section 3 is stored in Proofbox's private app storage (the Android “app sandbox”). Other apps on your phone cannot read it, and we cannot either. The database is a local SQLite file, photos are files in a receipts folder inside that private storage, and settings are a local preferences file.
Android backup
Proofbox allows Android's standard app backup (allowBackup is enabled). This means that if you have turned on backup in your Android settings, your device may include the app's data in the backup it keeps in your Google Account or with your device manufacturer's backup service, and may restore it when you set up a new phone. That backup is created by Android, belongs to you, is covered by Google's or your manufacturer's privacy policy, and is not accessible to us. You can exclude app data from backup or turn backup off in your phone's settings (typically Settings → Google → Backup or Settings → System → Backup).
Sharing
When you tap Share on an item, the app offers the receipt photo and a short text summary to the Android share sheet. What happens next depends entirely on the app you choose to share with. Proofbox never shares anything on its own.
6. Permissions the app asks for and why
| Permission | Why | Required? |
|---|---|---|
POST_NOTIFICATIONS (show notifications) | To show local reminders before a return deadline or the end of a warranty. Requested with an explanation ("Allow reminders?") when you switch on "Deadline reminders" in Settings → Notifications or a reminder toggle on a purchase. | No. If you decline, reminders are off and everything else works. |
That is the complete list. The app does not declare the Internet, camera, storage, location, contacts, exact-alarm or boot-completed permissions. Taking a photo uses an Android intent that opens your camera app; picking a photo uses the Android photo picker; saving and opening export files uses the Android file picker. None of these give Proofbox access beyond the single file you choose.
7. Third parties and processors
We use no processors and share no data, because we hold none. Two third parties are involved in how you get and run the app, independently of us:
- Google Play distributes the app and may process data about your download, device and the app's installation and crashes under Google's Privacy Policy. Google may give us aggregated statistics (for example install counts by country) that do not identify you.
- Android backup (Google or your device manufacturer), if you have it enabled, as described in section 5.
There are no advertising networks, analytics providers, hosting providers or other recipients.
8. Notifications
Reminders are generated on your device by the app itself, using Android's WorkManager to run a short check about once a day (and when you open the app). They appear in a channel called “Deadline reminders”. No notification service, push server or network is involved. You can switch reminders off per item, change the lead times, turn the master toggle off in Settings, or revoke the notification permission in Android settings at any time.
9. Children
Proofbox is not directed to children under 16 and we do not knowingly collect personal data from anyone, including children. Because the app collects nothing, a child using it would not send us any data either. If you believe a child has sent us personal data by e-mail, contact us and we will delete it.
10. Your rights
Under the GDPR you have the right to access, rectify, erase and receive a copy of your personal data, to restrict or object to its processing, and to lodge a complaint with a supervisory authority (in the EU, the data-protection authority of your country of residence). Where processing is based on consent you may withdraw it at any time.
Because your data never reaches us, you exercise these rights directly in the app, without asking anyone:
- Access and portability: Settings→Backup→Export creates a ZIP (
proofbox-backup.zip) with a machine-readable JSON file and your photos. - Rectification: open any item and tap Edit.
- Erasure: delete an item, use Settings→Your data→Delete all data, or uninstall the app. See Delete your data.
- Restriction and objection: turn off reminders, or simply stop using the app; no processing continues in the background other than the daily reminder check, which you can disable in Settings.
For anything you have sent us by e-mail, write to proofbox@kubeharbor.space and we will respond within one month as the GDPR requires.
11. Data deletion
Everything can be deleted on the device: Settings→Your data→Delete all data (confirmed in two steps) removes all items, photos, reminder log and settings; uninstalling the app removes the same. Neither leaves anything with us, because nothing was ever sent. If you use Android backup, a copy may remain in your own backup until Android replaces or removes it; you can manage that in your phone's backup settings. Full step-by-step instructions are on the Delete your data page.
12. International transfers
We transfer no data anywhere, so no international transfer by us takes place. If you enable Android backup, Google or your device manufacturer may store the backup outside your country under their own safeguards; see their privacy policies.
13. Security
Your data is protected by Android's app sandbox and by your device's own lock screen and encryption. Because the app has no network access, remote attacks on the app's data are not possible through the app. We recommend using a screen lock and keeping Android up to date. Export files you create are not encrypted by the app; keep them somewhere safe, as they contain your receipts.
14. This website
The website proofbox.kubeharbor.space is a static site. It sets no cookies, loads no third-party scripts, fonts or images, and contains no analytics. The hosting provider that serves the site may keep short-lived server logs (IP address, requested page, time, browser type) for security and to operate the service, as described in our Cookie Notice. We do not use those logs to identify or profile visitors.
15. Changes to this policy
If the app ever changes what it processes, we will update this policy before releasing that version, raise the version number at the top of this page, change the effective date and, for material changes, point it out in the app's update notes and on the About screen. Earlier versions are available on request.
16. Contact
MODERN TECHNOLOGY IT LLC
4 vul. Oleny Telihy, Kyiv, 04112, Ukraine
E-mail: proofbox@kubeharbor.space
If you e-mail us, we process your e-mail address and the content of your message to answer you (GDPR Art. 6(1)(b) and (f)). We keep support e-mails for up to 12 months after the conversation ends, then delete them. We do not add you to any mailing list.
This policy is written in English. Translations may be provided for convenience; the English version governs.