Privacy Policy for BoxFax

Privacy Policy for BoxFax

Effective Date: January 2025

1. Controller

Mathias Todisco

Wilmersdorfer Str. 122-123

10627 Berlin

Germany

Email address: hello [at] todisco [dot] de

Phone: +49 179 8174113

Imprint: Imprint

2. Introduction

BoxFax is an iOS app for sending and receiving faxes via a Fritz!Box. The protection of your personal data is important to us. This privacy policy informs you about the processing of your data when using our app.

3. Data Processing

3.1 Local Data Storage and Network Communication

BoxFax is a local app that communicates exclusively within your local network. We collect and process the following data:

• Fritz!Box Connection Data: Host, username, password (stored encrypted)
• Fax History: Sent and received faxes with date, number, and status
• Sender Data: Name, company, phone, fax number (for cover page and header)
• App Settings: Theme settings, header/footer options

Important:

• All data is stored exclusively locally on your device
• Communication only occurs with your Fritz!Box in the local network or via VPN
• No data is transmitted to external servers or cloud services
• Your fax documents never leave your local network

3.2 Contacts Access (optional)

If you allow access to contacts, BoxFax can load fax numbers from your address book. This data is only used for display and is not stored or transmitted.

3.3 Camera Access (optional)

If you allow camera access, BoxFax can scan documents. The scanned images are only processed locally and sent to your Fritz!Box for faxing.

3.4 Photo Library Access (optional)

If you allow access to the photo library, you can select images for faxing. These are only processed locally.

3.5 Local Network

BoxFax requires access to your local network to communicate with the Fritz!Box. The connection can be via WiFi, Ethernet, or VPN.

4. Legal Basis for Processing

The processing of your data is based on the following legal grounds:

• Art. 6 para. 1 lit. b GDPR (Contract fulfillment): Provision of app functions

5. Data Sharing

Your data is not shared with third parties. All communication takes place exclusively between your iOS device and your Fritz!Box.

6. Data Storage and Deletion

6.1 Storage Duration

Your data is stored locally on your device as long as you use the app. You have full control over your data at all times.

6.2 Deletion

You can delete your data at any time:

• Fax History: Delete in the app
• Fritz!Box Profiles: Delete in the app
• All Data: Uninstall the app from your device

7. Your Rights

You have the following rights:

• Right of Access (Art. 15 GDPR): You can request information about your stored data at any time
• Right to Rectification (Art. 16 GDPR): Correction of inaccurate data
• Right to Erasure (Art. 17 GDPR): Delete data directly in the app
• Right to Lodge a Complaint: With the competent data protection supervisory authority

8. Data Security

We take appropriate technical and organizational measures to protect your data:

• Local storage under iOS security mechanisms
• Encrypted connection to Fritz!Box (SSL/TLS)
• No transmission of data to external servers
• Passwords are securely stored in iOS Keychain

iOS Security: Your data benefits from iOS sandboxing and device encryption.

9. No Profiling

There is no automated decision-making or profiling according to Art. 22 GDPR.

10. Changes to this Privacy Policy

We reserve the right to update this privacy policy to reflect changes in law or app features. The current version can always be found at:

https://todisco.de/en/boxfax-privacy

11. Contact

For privacy questions, contact us at:

Email: hello [at] todisco [dot] de

Address: Mathias Todisco, Wilmersdorfer Str. 122-123, 10627 Berlin, Germany

---

Note for users outside the EU:

This privacy policy is primarily based on the EU General Data Protection Regulation (GDPR). Users from other regions may have corresponding rights under local privacy laws.