Box Beat (the "app") is developed and published by Boxtime Software ("we", "us"). This policy explains what data the app handles, where it is stored, how long it is kept, and how you can remove it. It applies to the Box Beat Android app distributed through Google Play.
Box Beat's timer and training features work offline. Your timer presets, session history, statistics, settings and punch-calibration data are written to a local database on your device and are not transmitted to us. The app shows occasional interstitial ads served by Google AdMob, which collects your device's advertising ID to do so. The only optional online feature is Google Sign-In: if you choose it, Google provides us with basic account identifiers so the app can recognise you. You can instead tap Continue offline and use the entire app without giving us any personal information — the advertising ID is the only thing collected either way.
If you choose Google Sign-In, we receive from Google your name, email address, Google account ID and profile picture URL, used solely to authenticate you and identify your profile inside the app. We do not receive your Google password, contacts, calendar, files or any other Google data. Sign-in is handled by Google Identity Services; Google's own handling of that sign-in is governed by the Google Privacy Policy.
Timer presets, session records (date, round and rest lengths, number of rounds, duration), derived statistics such as streaks and weekly totals, and app settings such as voice announcements on/off. This is written to the app's private storage on your phone.
Box Beat shows interstitial ads roughly every second workout (capped once per day), served by Google AdMob. Android's advertising ID is collected and shared with Google/AdMob to serve and measure these ads, regardless of whether you sign in or continue offline. This is the only thing collected from users who continue offline. Google's handling of this data is governed by the Google Ads Privacy Policy. You can reset or limit this identifier at any time in Android Settings → Privacy → Ads.
Box Beat records audio through your phone's microphone to count punches. Audio is analysed on the device in real time and is never uploaded or sent to us or any third party. Short clips of samples you choose to save are kept in the app's private storage so you can review them, are excluded from device backup, and are deleted when you delete the sample or uninstall the app; clips you do not save are discarded. The numbers this produces (punch count, match percentage, cadence) and your calibration profile also stay on the device. Punch counting is optional and stays off until you calibrate it.
No location data, no contacts, no photos or files, no camera access, no health or biometric data, no behavioural analytics beyond standard AdMob ad delivery. We do not build profiles of you and we do not sell, rent or trade any data.
Notifications (POST_NOTIFICATIONS) and foreground service. Box Beat runs the round timer as a foreground service so it keeps counting accurately while your screen is locked or you are in another app. Android requires a persistent notification for this. The notification shows only your current round and remaining time; it is never used for marketing. Declining notifications may prevent the timer from running reliably in the background.
Microphone (RECORD_AUDIO, FOREGROUND_SERVICE_MICROPHONE). Box Beat requests microphone access, and runs its timer's foreground service with a microphone service type, only to power the optional punch-counting feature described in §2. Declining this permission, or leaving punch counting off, leaves the rest of the app — timer, presets, history, trends — fully functional.
Account identifiers are used only to authenticate you and to display your profile. On-device training data is used only to run the timer and show you your own history and trends. When punch counting is on, microphone audio is processed transiently on the device to detect punches, as described in §2. The advertising ID is used only by Google AdMob to serve and measure the app's interstitial ads. We do not use any of it for profiling or automated decision-making, and we do not use it to train machine-learning models.
To request deletion of an account, email boxtimesoftware@gmail.com from the address you signed in with, with the subject "Delete my Box Beat account". You can also revoke Box Beat's access to your Google account at any time at myaccount.google.com/permissions.
We do not sell personal information. Data is disclosed only to Google, in two roles: as our authentication provider (Google Identity Services / Google Play services), and as our advertising provider (Google AdMob, which receives the advertising ID to serve and measure ads) — or where we are legally required to disclose data under Australian law. There are no other advertising networks, analytics vendors or data brokers involved in the app.
On-device data is held in the app's private storage area, which other apps cannot read on a non-rooted device. Sign-in happens over encrypted (TLS) connections using Google's official libraries; we never see or store your Google password. No system is perfectly secure, but because Box Beat holds so little data, the exposure if a device is lost is limited to that device's own training history, its punch-calibration profile, and any sample clips saved on it. Protecting your phone with a screen lock is the most effective control available to you.
Box Beat is a general-audience fitness app and is not directed at children under 13. It contains no in-app purchases and no social or messaging features; it does show Google AdMob interstitial ads, described in §2. We do not knowingly collect personal information from children under 13. If a parent or guardian believes their child has signed in with a Google account, contact us and we will delete the associated record. Younger boxers can use the app entirely offline, in which case no personal information is collected — only the advertising ID, used to serve ads.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You may ask us to access, correct or delete the personal information we hold about you, or ask how it is handled, by emailing boxtimesoftware@gmail.com. We will respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992. Users in other jurisdictions (including the EEA and UK) may have equivalent rights of access, correction, erasure and portability, which we will honour on the same contact address.
Box Beat is operated from Australia. Because sign-in is handled by Google, account identifiers may be processed on Google's servers outside Australia. No training data leaves your device.
If we change what data the app handles, we will update this page and its "Last updated" date. For any material change, such as adding analytics or crash reporting, we will notify you in the app before the change takes effect.
For privacy enquiries and deletion requests, contact Boxtime Software:
boxtimesoftware@gmail.com
We aim to reply within 5 business days.