This policy describes BoxPilot, an educational iPhone application for learning to define price ranges, plan simulated risk and inspect synthetic execution. BoxPilot is the operator name used for this release. The application has no account registration, broker connection, real-money orders, advertisements, analytics SDK, tracking SDK, subscription or in-app purchase. This policy applies to the app and the public legal and support pages.
The app stores your box plans, immutable box versions, risk mandates, execution intentions, fills, cash ledger, protection changes, review notes, lesson completion receipts, question attempts, imported CSV datasets and display preferences on your iPhone. Notes may contain personal information if you enter it; avoid recording sensitive information. The app does not transmit these records to BoxPilot or operate a remote user database. The app does not enable iCloud synchronization. Operating-system device backups may include app data according to your Apple settings.
You choose which CSV or BoxPilot backup files to open through the iOS file picker. Access is limited to the files you select. CSV values are validated before saving. When you export or share a report or backup, you choose its destination using iOS. A third-party storage or sharing service handles that copy under its own policy. Active training backups contain only visible bars and are read-only snapshots. Completed plans can include the full synthetic or imported dataset. Do not share data you do not have permission to distribute.
This version does not capture images, record sound, access contacts, request location or ask for tracking permission. Camera and microphone purpose strings are present in the app configuration, but the app does not request these permissions or use either sensor. Choosing a file does not grant unrestricted access to your photo library or other documents.
The core lessons, synthetic data, plans and simulation operate offline. When you open Privacy Policy, Terms of Use or Support, the app loads an HTTPS page in WKWebView from boxpilot-legal.pages.dev. Cloudflare Pages hosts these pages and may process standard network information, such as your IP address, request URL, browser information and security or operational logs, under Cloudflare’s privacy policy. This is separate from the local training data, which is not included in those requests. The pages do not set advertising cookies or embed third-party analytics. A bundled copy is available if a network request fails.
On-device processing is used to provide the training, persistence, import, export and display features you request. Public-page network processing is needed to deliver and secure the requested pages. Where applicable law requires a legal basis, processing is limited to providing your requested service, complying with legal obligations and legitimate interests in secure page delivery. No personal information is sold, shared for cross-context behavioral advertising or used for profiling.
Local plans and learning records remain until you clear user data or uninstall the app. You can remove an unreferenced imported dataset individually. Clearing user data requires two confirmations and retains built-in learning content. Exported files, shared reports and device backups are separate copies; delete them from their destinations if you want to remove them. BoxPilot has no remote user-record retention period because it does not receive those records. Cloudflare controls hosting-log retention under its policies.
You can inspect your data in the app, export a backup, correct editable notes and preferences, clear user data, avoid opening remote legal pages and use bundled copies. Frozen historical box values remain immutable to preserve the audit trail; create a new version to change a plan. Depending on your location, you may have rights of access, correction, deletion, portability, restriction, objection or complaint to a supervisory authority. Contact support to discuss a rights request. Because we do not hold your local database, we may be unable to retrieve or identify it remotely.
We use iOS application sandboxing, local transactional storage and HTTPS for the public pages. No storage or network system can be guaranteed completely secure. Protect your device and exported files. Cloudflare may process page-delivery information in countries other than yours under its own safeguards. BoxPilot is intended for users aged 13 or older and is not directed at children under 13. If you believe information has been submitted through a support request by a child, contact us.
The revision date identifies the current policy. Material changes will be reflected in the app or on this page. Contact: boxpilot@support.com. The public support page describes available troubleshooting and the local-data controls. Cloudflare privacy information: https://www.cloudflare.com/privacypolicy/.