# Privacy Policy — PocaBox

**Effective:** May 26, 2026 · **Last updated:** May 26, 2026

**Summary:** PocaBox runs no servers of its own. Your collections, photos, and notes are stored only in your own private iCloud (Apple CloudKit), and the developer (blue-code) cannot access this data. The app uses no third-party analytics, no advertising SDKs, and no tracking, and it never shows an App Tracking Transparency (ATT) prompt. Our Apple App Store privacy label is **"Data Not Collected."**

---

## 1. Information We Collect / Store

PocaBox does not transmit any information to a developer-operated server. No such server exists. The data you create in the app is stored only in the following places:

- **On your device (app sandbox)** — collection data stored locally.
- **Your own private iCloud (Apple CloudKit Private Database)** — when you are signed in to iCloud, your data is stored in your personal, private iCloud area for syncing across your devices. This area is protected by your Apple Account and is not accessible to the developer.

Examples of stored data:

- **Collection details** — the names, status (owned / wishlist / duplicate), counts, and notes for the groups, members, seasons, and photocards that you enter yourself.
- **Photocard images** — images you capture with the camera or pick from your Photo Library. They are compressed in the app and stored in your collection.

## 2. Data Sharing

**PocaBox does not share any data with any third party.**

- No analytics tools
- No crash-reporting SDKs
- No advertising or tracking identifiers (no IDFA usage)
- No App Tracking Transparency (ATT) prompt
- No developer backend server

Data syncing happens entirely within your own account through Apple's iCloud / CloudKit infrastructure, which is governed by Apple's privacy policy.

## 3. Permissions

The app may request the following iOS permissions, used strictly as described:

- **Camera** — to photograph photocards for adding to your collection. Captured images are processed only on-device.
- **Photo Library** — used only when you choose to pick an existing image to add as a photocard, or to save a generated share card image. The app does not scan your entire library; it reads only the image you select.

Image background removal runs **entirely on-device** using Apple's **Vision** framework. Images are never uploaded anywhere except your own iCloud.

You can revoke any permission at any time in iOS Settings. Revoking a permission only limits the corresponding feature; no data is ever collected silently.

## 4. Purchases

Paid features (subscriptions and in-app purchases) are handled by Apple's **StoreKit**. Payments are processed through your Apple Account, and the developer never receives or stores any payment details such as card numbers.

## 5. Data Retention & Deletion

- You can delete collections, cards, and images inside the app at any time.
- Uninstalling the app immediately removes the local data stored on the device.
- Data synced to iCloud can be managed or deleted from the iCloud management screen in iOS Settings, or from the app on any of your other devices.

## 6. Accounts & Login

PocaBox requires no account, no login, and no identifiers such as email, phone number, or social sign-in. iCloud syncing uses the Apple Account already signed in on your device.

## 7. Children's Privacy

PocaBox is rated **4+** and collects no personal data, so it does not knowingly collect any personal information from children.

## 8. Your Rights

- Because all data stays on your device and in your own iCloud, you retain full control at all times.
- You can exercise access, correction, and deletion rights directly through the in-app UI and iOS system settings.
- For GDPR / CCPA / other regulatory questions, contact us using the address below.

## 9. Changes to This Policy

If this policy changes, the updated version and a new effective date will be posted on this page. Material changes will also be announced in-app.

## 10. Independent App Notice (IP)

PocaBox is an **independent app that is not affiliated with, nor officially licensed by, any K-pop group, artist, or agency.** The app does not pre-supply any real artist photos, real names, logos, or agency names. All group, member, and season information shown in the app is **entered by you, the user.**

## 11. Contact

Developer: **blue-code**
Email: digimaru@gmail.com
App bundle ID: `com.blueCode.PocaBox`