Legal
Privacy policy
Boxsight and your data: what stays on the phone, and what does not.
Last updated: 31 August 2026
In short. Boxsight has no account, no server of ours, and collects none of your data. The only information that leaves the device is the crash reporting described below.
1. Who processes the data
The controller is Ubiquitous S.r.l., Via Ariosto 25, 00185 Roma, Italia, P.IVA 17584931004. For anything about this policy, write to privacy@synapsi.ai.
2. What stays on your device
Boxsight stores in the app's private storage, on your phone:
- the selected model and the detection thresholds (confidence, IoU, acceleration)
- any model you import yourself, in the app's private storage
- your theme preference
None of it is transmitted to us. Uninstalling the app takes it with it.
3. What goes over the network
Inference runs entirely on the device. Camera frames are analysed in memory and discarded: they are not transmitted, not stored, and never leave the phone. The only things that persist are the ones you save yourself — a photo in your gallery, or a detection log in a file you pick — and they stay where you put them.
Diagnostics: crashes and usage statistics
The app uses two Google services: Firebase Crashlytics and Firebase Analytics (Google Ireland Limited).
When the app crashes, Crashlytics receives a technical report we use to understand what broke: the stack trace, the device model, the Android version and the app version. Analytics receives anonymous events about how the app is used — which screens are opened, which features are tapped — along with an identifier Google assigns to the installation, not to you.
Neither receives video, audio, credentials, your camera addresses, or anything of what you film. Those do not leave the device, as described above.
Google's own privacy policy governs its processing. You can ask us to have the diagnostic data deleted by writing to privacy@synapsi.ai.
4. Permissions, and why
- Camera — it is what the app analyses; without it there is nothing to detect
- Internet and network state — only to download the optional RF-DETR model from Google Play and for in-app purchases. Inference never uses the network
5. In-app purchases
The Boxsight Pro subscription is sold and managed by Google Play. Payment happens on your Google account: we never see a card number and we store no payment data. Google tells us only whether a subscription is active, without identifying you. Google's own privacy policy governs its processing.
6. Your rights
The GDPR gives you access, rectification, erasure, restriction, portability and objection. For this app the practical answer is nearly always the same: the data is already only yours and already only on your device. For the diagnostic data, write to us and we will have it deleted. You can still write to privacy@synapsi.ai, and you may lodge a complaint with your data protection authority.
7. Children
The app is not directed at children under 13 and does not knowingly collect data about them.
8. Changes
If this policy changes, the date at the top changes with it. Material changes are announced in the Google Play release notes too.