Privacy Policy

Last updated: May 26, 2026

Shoebox Technologies LLC (“Shoebox,” “we,” “us,” or “our”) operates the Shoebox mobile app and the website at myshoebox.io (together, the “Service”). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using the Service, you agree to this Policy.

1. Information We Collect

Information you give us

• Phone number. We use your mobile phone number to create your account and to sign you in with a one-time verification code (sent by SMS). Your phone number is your primary account identifier.
• Recovery email (optional). If you choose to add a recovery email, we store it so you can regain access to your account.
• Your content.The photos, videos, titles, captions, and other text you add to your moments. This content is private to you and the people you invite, unless you choose to make a moment public (see “Public Moments” below).
• Contacts (only with your permission). If you grant contacts access, we use your device contacts solely to help you find and invite people to collaborate on a moment. You can use the Service without granting contacts access; we do not upload your full address book to build a social graph.

Information collected automatically

• Usage and product analytics. We use PostHog (US region) to understand how the app is used. We capture a small, defined set of product events (for example, that a moment was created or a media upload succeeded) and basic app-lifecycle and device information (such as app version, device type, and OS). We do not use automatic tap or screen capture, and our analytics events are filtered to strip out personal content like phone numbers, names, captions, and media URLs before they are sent.
• Session replay (masked). We use PostHog session replay to diagnose usability and stability issues. All text, all text inputs, all images, and system pickers are masked, so replays never contain your photos, videos, captions, phone number, or other content.

Subscription and payment information

Paid subscriptions are processed by Apple through the App Store, and managed with the help of RevenueCat. We receive your subscription status (for example, whether you have an active subscription) but we do not receive or store your payment card details. Apple’s handling of your purchase is governed by Apple’s privacy policy.

2. How We Use Information

• To create and secure your account and sign you in.
• To store, display, and sync your moments across your devices.
• To let you collaborate with and invite people you choose, and to deliver moments you make public.
• To process and manage your subscription.
• To operate, maintain, debug, and improve the Service, and to understand product usage in aggregate.
• To communicate with you about your account, security, and important changes to the Service.
• To comply with law and enforce our Terms of Service.

3. How We Share Information

We do not sell your personal information. We share information only with service providers who help us run the Service, and only as needed for them to perform their function:

• Supabase — database, authentication, and photo storage.
• Cloudflare Stream — video hosting and streaming.
• Twilio — sending one-time verification codes by SMS.
• PostHog (US) — product analytics and masked session replay.
• RevenueCat and Apple — subscription processing and management.

We may also disclose information if required by law, to protect the rights, safety, and property of Shoebox or others, or in connection with a merger, acquisition, financing, or reorganization (including a change of our legal entity), in which case we will require the recipient to honor this Policy.

4. Public Moments

When you choose to make a moment public, Shoebox generates a shareable link (for example, myshoebox.io/m/…). Anyone who has that link can view the moment’s photos, videos, and text without signing in, and may save it to their own Shoebox. Only make a moment public if you are comfortable with it being seen by anyone who receives the link. You can make a public moment private again at any time, which disables the link.

5. Data Retention and Deletion

We keep your information for as long as your account is active. You can delete your account at any time from Settings → Account → Delete account in the app. Deleting your account permanently removes your profile, the moments you own, and your photos and videos from our systems and our storage providers. Some information may persist briefly in backups or be retained where required by law before it is purged.

6. Security

We use industry-standard safeguards, including encryption in transit, to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to limit access to it.

7. Children’s Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us information, please contact us at support@myshoebox.io and we will delete it.

8. Your Choices and Rights

• Access and deletion. You can access your content in the app and delete your account at any time as described above.
• Permissions. You control camera, photo library, and contacts permissions through your device settings, and you can revoke them at any time.
• Regional rights. Depending on where you live (for example, under the California Consumer Privacy Act), you may have additional rights to access, correct, or delete your personal information, or to opt out of certain processing. To exercise these rights, contact us at support@myshoebox.io.

9. Where Your Information Is Processed

Shoebox is operated from the United States, and your information is processed and stored in the United States. By using the Service, you understand that your information will be handled in the U.S.

10. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you in the app. Your continued use of the Service after an update means you accept the revised Policy.

11. Contact Us

Shoebox Technologies LLC
Email: support@myshoebox.io