Privacy Policy

Yambox (“Yambox”, “we”) is an app for saving links from TikTok, Instagram, X, YouTube and other apps into boxes. This policy explains what we collect when you use the Yambox iPhone app, its share extension and this website, why, who helps us process it, and how to delete it.

The short version

• We collect your sign-in details and the links you choose to save — that's what Yambox needs to work.
• Your boxes are private. There's no public profile and nothing you save is shown to anyone else.
• No ads, no ad tracking, no analytics SDKs, and we don't sell or rent your data.
• You can delete your account and everything in it from the app at any time.

What we collect

Account information

You sign in with Apple or Google through Firebase Authentication, a Google service. We receive and store a unique account ID, your email address, and — if your provider shares it — a link to your profile picture. If you use Sign in with Apple and choose “Hide My Email”, we only see Apple's relay address.

What you save

The links you save, the box each one is in, the names and emoji you give your boxes, any notes you add, and when each item was saved or changed.

Link previews

To show a preview card, our server looks up the link you saved and stores its title, author name and a resized copy of its preview image. We keep our own copy because the images platforms provide expire.

Technical information

Like any web service, our hosting provider records basic request information — such as IP address, time, and the page or API address requested — in server logs used for security and troubleshooting. This website doesn't use cookies or analytics.

What we don't collect

Yambox doesn't access your contacts, photos, location, microphone or camera, and doesn't use advertising identifiers. The share extension only receives what you explicitly share to it — the link for the post or page you're on — and only when you pick Yambox in the share sheet.

How we use it

• To sign you in and keep your boxes in sync across sessions and devices.
• To save links into the boxes you choose, spot duplicates, and build preview cards.
• To keep the service secure, prevent abuse, and fix problems.
• To reply when you contact us.

We don't use your data for advertising, and we don't build profiles of you.

Who processes it

We use a small number of service providers, each only for running Yambox:

• Google Firebase Authentication — handles Apple and Google sign-in and holds your sign-in record.
• Railway — hosts our servers, database and file storage (in the United States).
• The sites you save from — to build a preview we request the saved link from its source (for example TikTok, YouTube, Instagram or the website itself). For X posts we use FxTwitter, a public service that returns a post's text and image. These requests contain the link, not your name, email or account.

We don't sell or rent personal information, and we don't share it with advertisers or data brokers. We may disclose information if required by law, or to protect the safety of our users or the service.

On your iPhone

The app stores your sign-in session in the iOS Keychain, in a group shared only with the Yambox share extension, so the extension can save links on your behalf.

How long we keep it, and deleting it

We keep your account and saved items for as long as you use Yambox. You can delete individual links and boxes at any time. To delete everything, open Settings → Delete account in the app and confirm by signing in with Apple or Google once more. Your Yambox account, boxes, links, notes and stored preview images are deleted from our database and storage straight away, your sign-in record is deleted from Firebase Authentication, and if you used Sign in with Apple, Yambox's access to your Apple ID is revoked (it disappears from the apps using Sign in with Apple in your Apple ID settings). Copies may remain for a limited time in routine logs or backups before they're overwritten.

You can also ask us to access, correct or delete your information by emailing ymoondhra@gmail.com. Depending on where you live, you may have additional rights under local law; we'll honour them.

Security

Data is sent over encrypted connections (HTTPS). Preview images are kept in private storage and are only reachable through short-lived signed links. No method of storage or transmission is perfectly secure, but we work to protect your information.

Children

Yambox isn't directed to children under 13, and we don't knowingly collect their information. If you believe a child has created an account, contact us and we'll delete it.

Changes to this policy

If we change this policy we'll update the date at the top, and for significant changes we'll let you know in the app or on this site.

Contact

Questions or requests: ymoondhra@gmail.com.