Privacy policy
Updated on 20/10/2026
1. Commitment to privacy
ExpireBox is an application for storing and organising notes, links, images and documents, as well as managing their expiry dates.
The application has been designed to keep information under the user's control. Content is stored on the device first and, when the corresponding iCloud services are available, may be synchronised with other devices belonging to the same user.
The developer never receives a copy of the library, does not exploit its content or use it for advertising, commercial purposes, profiling or training artificial intelligence models.
This statement describes the technical processing necessary to provide these features and the circumstances in which the user may decide to communicate information outside the application.
Privacy enquiries and support requests may be sent to support@expirebox.app
2. Use without registration or identification
Using ExpireBox does not require identifying yourself to the developer, creating an application account, registering or providing a name, email address, telephone number or password.
The application does not have its own user account system.
The Apple account configured on the device, if any, is used through system services to enable synchronisation with iCloud. This does not constitute registration with ExpireBox or provide the developer with that account's credentials.
An active iCloud account is not required to store and manage content locally.
3. Information managed by the application
ExpireBox processes the content that the user voluntarily enters, selects or imports. This may include:
- Note text and titles.
- Internet addresses and their domains.
- Images and PDF documents.
- Expiry dates and reminder preferences.
- Favorites and other data needed to organize items.
The application also generates or retains technical information associated with this content: internal identifiers, creation and modification dates, item status, date moved to the trash, content version, original file name, format, size, dimensions, number of pages and digital fingerprints for checking or comparing files.
Item identifiers are used to manage the library and its synchronisation; they are not advertising identifiers.
Imported files may contain personal information and metadata from the original file. Importing must not be interpreted as an anonymization process or as a guarantee that all such metadata will be removed.
4. Purposes of processing within the application
Information is used to perform the functions requested by the user: storing, viewing, searching, organising, modifying, previewing, exporting and deleting content; managing its expiry; scheduling reminders; displaying widgets and maintaining consistency across devices.
Preferences and technical data necessary for operation and for displaying diagnostic information are also retained.
These operations are performed on the device and, where appropriate, through private synchronisation with iCloud. They do not entail the developer receiving or examining the library's content.
5. Local storage
Information added to ExpireBox is saved in the application's local storage first. This allows local features to be used without depending on a permanent Internet connection.
The application uses the storage and isolation mechanisms provided by the operating system. It uses databases, attachments, preferences and temporary files needed to import, view or export content.
ExpireBox extensions and widgets may access a local container shared among the application's own authorised components. This mechanism allows, for example, a file to be received from the Share menu or upcoming expiries to be displayed in a widget. This does not constitute publication of the content or transmission to the developer.
Local data may also be included in device backups, depending on the settings and backup services used by the user.
6. Private synchronization through iCloud
When the device has an active iCloud account and the service is available and permitted for ExpireBox, the application uses CloudKit, an Apple service, to synchronize information.
Synchronization is performed through a private database associated with the user's account. It may include saved content, its attachments, the metadata needed to manage it, certain preferences and auxiliary records that allow modifications and deletions to be coordinated.
The purpose is to make information available on compatible devices belonging to the same user that use that account. ExpireBox does not publish the library in a public database or offer shared access to it between different accounts.
The developer does not have access to the content of that private database through CloudKit's administration tools.
Synchronisation requires communications with the infrastructure used by Apple to provide iCloud. Its availability and timing depend, among other factors, on the connection, account status, available space and operating system decisions. Changes may therefore take time to appear on other devices.
If iCloud is unavailable, local features can continue to be used. Pending changes may be synchronised later if the service becomes available again.
The user can manage iCloud use through their account and operating system settings. Disabling synchronisation does not necessarily mean deleting information already stored in iCloud.
Processing carried out by Apple is governed by its own terms and Privacy Policy: https://www.apple.com/legal/privacy/
7. No collection for the developer
ExpireBox does not include its own or third-party mechanisms intended to collect the library's content or transmit it to the developer's servers.
Nor does it include its own or third-party advertising, cross-app tracking or behavioural analytics services that send usage information to external providers.
The developer does not sell, rent, market or use the user's content to generate revenue, create profiles, target advertising, conduct research into their activity or for any other purpose.
These statements refer to ExpireBox's features. Necessary communications with iCloud, loading external content, sharing actions initiated by the user and voluntary support requests are expressly described in this statement.
8. Links, previews and external downloads
Saving a web address and loading the content at that address are different operations.
ExpireBox includes the “Protect link privacy” option, which prevents web previews from loading in application views that use this protection.
If the user disables this protection, previews may connect to the corresponding site and to external resources included in the page. Likewise, when a link is opened, the chosen browser or application will establish the connections necessary to display it.
Import features from other applications may also download images hosted at remote addresses.
These connections allow the destination server to receive information inherent in an Internet request, such as the IP address, the requested address and certain technical connection data. Loaded sites may use cookies or other technologies depending on how they operate and the restrictions of the web environment.
Preview protection does not constitute a general block on all ExpireBox network connections.
The developer does not receive the user's library as a result. Processing carried out by external sites and providers is governed by their own policies.
9. Importing, exporting and sharing actions
The user decides what content to add to ExpireBox through the application's item creation features, paste features, share extensions or automations they configure.
When file providers or external services are used to obtain content, those providers may be involved in downloading it under their own terms.
The user may also export items or send them to other applications using sharing features. In these cases, the selected content is communicated to the destination chosen by the user.
Exported or shared copies are subject to management by the recipient or the corresponding service. Deleting them from ExpireBox does not automatically delete those external copies or the original file from which an import was made.
10. Notifications, widgets and automations
ExpireBox may schedule local notifications about item expiry when the user enables this feature and grants the necessary permissions.
Alerts may include the item's title. Their visibility on the lock screen, in the notification centre or on other surfaces depends on the device's settings.
Widgets may display expiry dates, favourites and titles. The application offers a preference to control the inclusion of titles in information intended for widgets.
If the user uses Shortcuts, Siri or other system features compatible with ExpireBox, the data needed to execute the action will be processed in the context of that feature and the configured automation. Processing by Apple's own services is subject to Apple's terms.
11. Retention, expiry and deletion
Content is retained for as long as it remains in the library or the trash in accordance with the user's decisions and preferences.
When ExpireBox processes an item's expiry, it is moved to the trash. The application allows its retention period there to be configured. The user may also use the available immediate deletion options.
The passing of a date does not guarantee immediate deletion of the content on all devices. Maintenance tasks require opportunities to run, and the propagation of a deletion depends on synchronisation.
Technical records associated with deletion operations, such as identifiers, dates and versions, may be retained separately from the deleted content. Temporary files or backups subject to the system's cleanup and retention mechanisms may also exist.
Deletion carried out from ExpireBox does not constitute a guarantee of forensic erasure from all media, backups or external services.
Uninstalling the application does not guarantee deletion of copies existing in iCloud, on other devices or in backups. These must be managed through the corresponding options in each system or service.
12. Technical diagnostics
ExpireBox locally retains technical events relating to application operations and synchronisation, such as dates, operation types, results, item counts, durations and error codes.
These events serve to display operational status and help resolve issues. The application does not automatically send them to the developer.
The user may voluntarily generate and share a diagnostic report. The report provided for by the application contains technical information and counts, without including, by design, the body of notes or attachments.
Any distribution of technical information that the operating system or Apple may carry out in accordance with their own diagnostic options is governed by those options and Apple's applicable policies.
13. Ownership and private nature of information
Information managed by ExpireBox is private and remains under the user's control.
Use of the application does not transfer ownership of the content to the developer or grant rights to exploit, disclose or reuse it. The rights belonging to the user and, where applicable, third-party owners of the incorporated materials are maintained.
The developer will not access or use the content for their own purposes. The application's technical involvement is limited to performing its functions and the user's instructions.
14. Support requests and communications
The developer will not contact the user to send advertising, promotions, surveys or commercial communications.
Individual communications will only take place when the user expressly requests support or makes an enquiry through the available channels, including privacy enquiries and the exercise of rights.
In that case, the developer may receive the data the user chooses to provide, such as their reply address, the text of the enquiry, information about the device or application version and any files or diagnostics they voluntarily attach.
This information will be used exclusively to address the request, carry out necessary follow-up and comply with applicable legal obligations. It will not be added to commercial mailing lists or used for purposes unrelated to the enquiry.
Providing Apple account passwords or handing over the entire library is never necessary to request assistance.
Support data will be retained during and after the handling of the request so it can be referred to in the event of future enquiries from the same user. This data will be deleted upon the user's express request, without prejudice to periods required by legal obligations.
15. Security
ExpireBox uses the isolation, permission and storage mechanisms provided by the operating system, as well as iCloud's security mechanisms for synchronisation.
Effective protection also depends on the device and Apple account settings, installed updates and the access other people may have to the device.
This statement does not presume that all data has end-to-end encryption or present the application as a vault with independent authentication. The specific guarantees of iCloud depend on the service, the type of data and the applicable settings.
16. Control of information and rights
The user can view, modify, export and delete content through the features available in ExpireBox, as well as manage permissions, notifications and iCloud use through the corresponding options.
As the developer does not maintain an accessible copy of the library, they cannot remotely view, recover or modify its private content.
With regard to data received by the developer when handling a support request, the user may exercise the rights of access, rectification, erasure, objection, restriction and portability where applicable under the relevant regulations. They may also withdraw consent where processing is based on it and lodge a complaint with the competent data protection authority.
Requests may be sent to privacy@expirebox.app. Handling them will not require creating an ExpireBox account, although the minimum information necessary to verify the legitimacy of the request may be requested.
Processing of support data will be based on the legal basis appropriate to the request, including provision of the requested service and, where applicable, compliance with legal obligations.
General Data Protection Regulation: https://eur-lex.europa.eu/eli/reg/2016/679/oj?locale=en
17. Changes to this Privacy Policy
This Privacy Policy may be updated to reflect changes in the features provided by the ExpireBox application, in the services used or in applicable requirements.
The current version will be available at Privacy policy page and will indicate its update date. Substantial changes will be communicated by appropriate means, such as the application itself or its information page, without requiring users' contact details to be collected.