Privacy policy

Last updated 2026-10-16

UniBox is designed so that your inventory stays between your phone and your own inventory server. We, the makers of UniBox, do not run a service that receives your data, and the app contains no analytics, advertising or tracking.

What UniBox stores on your device

• Connection details for each inventory system you add: its web address and the name you give it.
• Sign-in credentials (an API key, token, or username and password). These are kept only in the phone's secure storage (the iOS Keychain or the Android Keystore), never in the app's ordinary database.
• A copy of your inventory that UniBox reads from your server so it can work offline: container and item names, descriptions, quantities, locations, tags and links.
• Label links: which QR label belongs to which container. A label contains only a random identifier.

All of this stays on your phone. Removing a source in the app deletes its saved sign-in and its copy of your inventory. On iOS, saved sign-ins can outlast an app deletion, so remove your sources in the app first if you are getting rid of the app.

What UniBox sends over the network

• To the inventory servers you add, and only to them. UniBox contacts the addresses you enter to read your containers and items, using your credentials. UniBox does not send this to us or to anyone else.
• Nothing else. There are no analytics, crash reporters, advertising identifiers, or accounts.

Your inventory systems (for example Homebox or InvenTree) are run by you or by whoever hosts them, and are covered by their own policies.

Camera

The camera is used to read QR labels and to show you which label to look for. Images are processed live on your phone and are not saved, uploaded, or shared. If you decline camera access you can still type a label code by hand.

Local network

Many home inventory servers live on your local network. iOS asks for permission for the app to reach devices on that network; UniBox uses it only to connect to the servers you add.

This website and label links

A label may contain a link of the form unibox.cam/c/…. Opening it in a browser loads a static page from this site, hosted on Cloudflare, which may keep standard server logs (for example IP address and the address requested, including the random label ID). That ID does not identify you or reveal anything about your inventory. If UniBox is installed, opening the link goes straight to the app and does not load our page.

Children

UniBox is a general-purpose tool and is not directed at children.

Changes

If this policy changes, the date above will change with it, and significant changes will be described in the app's release notes.

Contact

Questions about privacy: hello@unibox.cam