Box Beat (the "app") is developed and published by IASON SOFTWARE PTY LTD ("we", "us"). This policy explains what data the app handles, where it is stored, how long it is kept, and how you can remove it. It applies to the Box Beat Android app distributed through Google Play.
Box Beat's timer and training features work offline. Your timer presets, session history, statistics, settings and punch-calibration data are written to a local database on your device and are not transmitted to us. If you turn on workout recording, the videos also stay on your device and are never uploaded. The app shows occasional interstitial ads served by Google AdMob, which collects your device's advertising ID to do so. The only optional online feature is Google Sign-In: if you choose it, Google provides us with basic account identifiers so the app can recognise you. You can instead tap Continue offline and use the entire app without giving us any personal information. You can pay once to remove the ads. To check that purchase, the app sends a random app-generated identifier to our purchase service, RevenueCat, and, if you buy, the Google Play purchase record. Apart from that identifier and the advertising ID, nothing is collected either way.
If you choose Google Sign-In, we receive from Google your name, email address, Google account ID and profile picture URL, used solely to authenticate you and identify your profile inside the app. We do not receive your Google password, contacts, calendar, files or any other Google data. Sign-in is handled by Google Identity Services; Google's own handling of that sign-in is governed by the Google Privacy Policy.
Timer presets, session records (date, round and rest lengths, number of rounds, duration), derived statistics such as streaks and weekly totals, and app settings such as voice announcements on/off. This is written to the app's private storage on your phone.
Box Beat shows a full-screen interstitial ad, served by Google AdMob, after a completed workout, about once every 5 completed rounds. An ad never interrupts a running timer. Android's advertising ID is collected and shared with Google/AdMob to serve and measure these ads, regardless of whether you sign in or continue offline. If you buy Remove ads, the app stops showing ads. Google's handling of this data is governed by the Google Ads Privacy Policy. You can reset or limit this identifier at any time in Android Settings → Privacy → Ads.
Box Beat offers one optional in-app purchase, a one-time payment that removes the ads. Google Play takes the payment. We never see your card or payment details. We use RevenueCat, Inc. as our service provider to check the purchase. When the app starts, it asks RevenueCat whether ads have been removed. For this, RevenueCat receives a random identifier that the app generates, which is not linked to your name, email address or Google account, together with basic technical details such as the app version, the Android version, your locale and your IP address. If you buy Remove ads, RevenueCat also receives the Google Play purchase record: the product, the transaction ID, the purchase date, the price and currency, and its status (for example pending, completed or refunded). RevenueCat processes this data only on our behalf, under the RevenueCat Privacy Policy. Google's handling of the payment is governed by the Google Privacy Policy.
Workout recording is optional and off until you turn on Record workouts in Settings, accept the notice that explains it, and allow camera access. When it is on, Box Beat records each workout with the front camera while the timer runs. A REC sign shows on the timer and in the notification. The camera view shows on the screen only when you tap REC. Sound is off by default and is recorded only if you also turn on Record sound. Videos and their preview images are kept in the app's private storage, are excluded from device backup, and are never uploaded or sent to us or any third party. Box Beat does not analyse faces or bodies in your videos. If you tap Save to phone, a copy of that video goes to your phone's gallery (Movies/Box Beat). That copy is outside the app: other apps and your phone's own backup can see it, and the app's delete controls do not touch it. Please do not record other people without their permission.
If you turn on Record sound, the microphone records sound into your workout videos, as described above. Box Beat also records audio through your phone's microphone to count punches. Audio is analysed on the device in real time and is never uploaded or sent to us or any third party. Short clips of samples you choose to save are kept in the app's private storage so you can review them, are excluded from device backup, and are deleted when you delete the sample or uninstall the app; clips you do not save are discarded. The numbers this produces (punch count, match percentage, cadence) and your calibration profile also stay on the device. Punch counting is optional and stays off until you calibrate it.
No location data, no contacts, no access to your existing photos, videos or files, no health or biometric data, no face or body analysis, no behavioural analytics beyond standard AdMob ad delivery. We do not build profiles of you and we do not sell, rent or trade any data.
Notifications (POST_NOTIFICATIONS) and foreground service. Box Beat runs the round timer as a foreground service so it keeps counting accurately while your screen is locked or you are in another app. Android requires a persistent notification for this. The notification shows only your current round and remaining time; it is never used for marketing. Declining notifications may prevent the timer from running reliably in the background.
Microphone (RECORD_AUDIO, FOREGROUND_SERVICE_MICROPHONE). Box Beat requests microphone access, and runs its timer's foreground service with a microphone service type, only to power the optional punch-counting feature described in §2. If you turn on Record sound, the same permission records sound into your workout videos. Declining this permission, or leaving punch counting off, leaves the rest of the app — timer, presets, history, trends — fully functional.
Camera (CAMERA, FOREGROUND_SERVICE_CAMERA). Box Beat asks for camera access only when you turn on workout recording, and runs its timer's foreground service with a camera service type only while a workout records, as described in §2. Declining this permission leaves recording off and the rest of the app fully functional.
Storage (WRITE_EXTERNAL_STORAGE), Android 8 and 9 only. On these older Android versions, Box Beat asks for this permission only when you tap Save to phone, so it can copy the video to your gallery. Android 10 and later need no permission for this. Box Beat never reads your gallery.
Account identifiers are used only to authenticate you and to display your profile. On-device training data is used only to run the timer and show you your own history and trends. When punch counting is on, microphone audio is processed transiently on the device to detect punches, as described in §2. Workout videos are used only so that you can watch, save or delete your own workouts. The advertising ID is used only by Google AdMob to serve and measure the app's interstitial ads. The RevenueCat identifier and the purchase record are used only to confirm, restore and, after a refund, withdraw the Remove ads purchase, and to give us sales totals. We do not use any of it for profiling or automated decision-making, and we do not use it to train machine-learning models.
To request deletion of an account, email boxbeat-support@iasonsoftware.com from the address you signed in with, with the subject "Delete my Box Beat account". You can also revoke Box Beat's access to your Google account at any time at myaccount.google.com/permissions.
We do not sell personal information. Data is disclosed to Google, in three roles: as our authentication provider (Google Identity Services / Google Play services), as our advertising provider (Google AdMob, which receives the advertising ID to serve and measure ads), and as the payment processor for the Remove ads purchase (Google Play). RevenueCat, Inc. receives the data described in §2 as our service provider, to check that purchase. We also disclose data where we are legally required to under Australian law. There are no other advertising networks, analytics vendors or data brokers involved in the app.
On-device data is held in the app's private storage area, which other apps cannot read on a non-rooted device. Sign-in happens over encrypted (TLS) connections using Google's official libraries; we never see or store your Google password. No system is perfectly secure, but because Box Beat holds so little data, the exposure if a device is lost is limited to that device's own training history, its punch-calibration profile, any sample clips saved on it, and any workout videos recorded on it. Protecting your phone with a screen lock is the most effective control available to you.
Box Beat is a general-audience fitness app and is not directed at children under 13. It contains one optional in-app purchase, a one-time payment through Google Play that removes the ads, and no social or messaging features; it does show Google AdMob interstitial ads, described in §2. We do not knowingly collect personal information from children under 13. If a parent or guardian believes their child has signed in with a Google account, contact us and we will delete the associated record. Younger boxers can use the app entirely offline, in which case no personal information is collected — only the advertising ID, used to serve ads.
We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You may ask us to access, correct or delete the personal information we hold about you, or ask how it is handled, by emailing boxbeat-support@iasonsoftware.com. We will respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992. Users in other jurisdictions (including the EEA and UK) may have equivalent rights of access, correction, erasure and portability, which we will honour on the same contact address.
Box Beat is operated from Australia. Because sign-in is handled by Google, account identifiers may be processed on Google's servers outside Australia. RevenueCat stores the purchase data described in §2 in data centres in the United States, and its own service providers may process it in other countries. No training data or workout video leaves your device.
If we change what data the app handles, we will update this page and its "Last updated" date. For any material change, such as adding analytics or crash reporting, we will notify you in the app before the change takes effect.
For privacy enquiries and deletion requests, contact IASON SOFTWARE PTY LTD:
boxbeat-support@iasonsoftware.com
We aim to reply within 5 business days.