Crated: Moving Box Organizer — Privacy Policy

Effective date: April 3, 2026

Introduction

Crated: Moving Box Organizer ("the App") is developed and operated by Area43 Labs. This Privacy Policy explains how we collect, use, and protect your information when you use the App.

The App helps individuals and households inventory moving boxes by assigning QR code labels, photographing contents, searching across boxes, and tracking unpacking progress.

By using the App, you agree to the collection and use of information as described in this policy.

Information We Collect

Account Information

The App works fully without an account. Account creation is optional and is only required if you enable household sync. If you create an account, we may collect:

• Email address
• Password (stored as a secure hash — we never store your plain-text password)

Usage and Analytics Data

We automatically collect anonymized usage data to understand how users interact with the App, including:

• Features and screens accessed
• Session duration and frequency
• In-app actions and events (including affiliate link taps — see Third-Party Services below)
• App version and OS version

Analytics events do not contain any personally identifiable information. No user ID, device ID, email address, account identifier, or household ID is included in any analytics payload.

Device Information

We collect basic device information required for the App to function and for crash diagnosis:

• Device type and model
• Operating system version
• App version

Box and Inventory Data

When you use the App, you create content including box labels, item names, room names, and move names. This data is stored locally on your device. If you enable household sync, this data is also stored on our secure cloud servers (Supabase) and shared with other household members you invite.

Photos

If you photograph box contents, those photos are stored locally on your device. If household sync is enabled, photos are uploaded to our secure cloud storage (Supabase Storage) and shared with your household members. Camera access is requested only when you first attempt to take a photo.

Affiliate Link Activity

If you tap affiliate product links in the App (Amazon Associates or Home Depot affiliate links), we record an analytics event containing: the surface where the link appeared, the product category, the affiliate network, and a timestamp. This event contains no personally identifiable information.

How We Use Your Information

We use collected data to:

• Provide and maintain the App's core functionality
• Sync your box inventory and photos across household members (when sync is enabled)
• Improve the App based on usage patterns and crash reports
• Track affiliate link performance (anonymized, for monetization purposes)
• Comply with legal obligations

We do not sell your personal data to third parties.

Data Storage and Security

Data you enter into the App is stored locally on your device by default. If you enable household sync, your inventory data and photos are encrypted in transit using TLS and stored on our secure servers (Supabase, hosted on industry-standard cloud infrastructure).

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or disclosure.

Despite our safeguards, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

Data Retention

We retain your data for as long as your account is active. If you delete your account or request deletion:

• Your personal data is deleted from our systems within 30 days
• Anonymized, aggregated analytics data (which cannot identify you) may be retained indefinitely

You can delete all local app data at any time from the App's Settings screen. This deletes all moves, rooms, boxes, items, and photos stored on your device. It does not delete your Supabase account or synced cloud data unless you separately delete your account.

Third-Party Services

The App uses the following third-party services that may collect data subject to their own privacy policies:

Your Rights

Depending on your location, you may have rights regarding your personal data, including:

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data ("right to be forgotten")
• Portability: Request your data in a portable format
• Opt-out: Opt out of analytics or personalized advertising where applicable

To exercise any of these rights, contact us at privacy@area43labs.com. We will respond within 30 days.

GDPR (EU/EEA users): If you are located in the EU or EEA, you have additional rights under the General Data Protection Regulation, including the right to lodge a complaint with your local data protection authority.

CCPA (California users): If you are a California resident, you have rights under the California Consumer Privacy Act, including the right to know what personal information we collect and to opt out of its sale. We do not sell personal information.

Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at privacy@area43labs.com and we will delete the information promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Effective date" at the top of this page. We encourage you to review this policy periodically. Continued use of the App after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy, please contact:

Area43 Labs Email: privacy@area43labs.com