Stackbox
Privacy Policy
ETERNAXCODE (the “Operator”) handles the personal information of people who use the Stackbox app (the “App”) in accordance with Korea’s Personal Information Protection Act. By default, the App keeps your records only on your device (and on a watch you connect). The only information that goes to our servers is what is described below.
- Box and goal names and check records are stored only on your device. They are kept in your account only if you sign in and turn on backup.
- If you connect an Apple Watch or a Wear OS watch, your phone and watch exchange today’s list and the checks and amounts you log on the watch directly with each other (Apple WatchConnectivity, Google Wear Data Layer). The operating system (Apple, Google Play services) carries the exchange between the two devices and, depending on the connection, it may travel over that company’s network, but the Operator does not receive it.
- If you join a league, your nickname, that week’s XP, your streak and the number of goals you completed are visible to other league participants. Your goal names and what you logged are not.
- If you open or join a shared box, its box and goal names, your nickname, and how much you filled each day are visible to the people in that shared box. Check-in times and logged amounts are not sent.
- The interests you pick are stored on your device, and also in your account if you are a member (signed in with Apple or Google).
- Usage stats send only which screens and features are used and how often. You can turn them off in My profile.
- We don’t show ads, don’t collect advertising identifiers (IDFA or Advertising ID), and don’t track you by linking data with other companies’ apps or websites.
1. Personal information we process and why
| When | Items | Purpose |
|---|---|---|
| While you use the App (if usage stats are turned on) |
App installation identifier; records of screens viewed and features used (creating a box, checking, joining, viewing, or leaving a league, signing in or signing up, backup, opening, joining, or leaving a shared box, sending an invite, reporting); number of boxes in use; the interests you picked (from a fixed list); device model, OS version, and language; country and region estimated from your IP address | To learn how many people use the App, how long they use it, and which features they use, so we can improve the App |
| When you choose a league nickname or join a league | Anonymous account identifier; nickname (stored with your account so no one else has the same one); that week’s XP, best streak, number of goals completed, and total number of goals; last update time | To show weekly standings to people who use the same official box |
| When you sign in with Apple or Google (sign up as a member) | Account identifier, email address, and name (if the sign-in provider passes them along) | To keep your league, backup, and shared boxes on the same account when you change phones |
| When a member picks or edits interests | The interests picked (from a fixed list such as exercise or study), device type (iOS or Android), when you joined and last edited | To manage members, show official boxes that match your interests first, and decide which features members want (statistics) |
| When you open or join a shared box | The person who opens it: box name, icon, and color; goal names, frequencies, and targets; nickname; invite code; account identifiers of people they removed Everyone in it: account identifier, nickname, how much they filled each day (%), whether they completed the box, streak, this week’s XP, last update time |
To let invited friends see each other fill the same box |
| When you report a shared box or a person | Reporter’s account identifier, the shared box, the reported person’s account identifier, the reason, and the time | To review and act on inappropriate content |
| When you turn on backup or back up manually | All records stored on the device (box and goal names, check and logged-amount records, App settings), backup time, number of boxes and checks, device type (iOS or Android) | To restore your records on a new device |
Box and goal names, check records, and nicknames are not included in usage stats. Box and goal names in a shared box are visible only to the people in that shared box, and check-in times and logged amounts are never sent anywhere. Signing in (signing up), interests, backup, and joining a league or shared box are all optional. You can use the App’s basic features without them.
2. Retention and deletion
- League records, account, and backup: kept until you delete your account. Deleting your account in the App removes them immediately.
- If you only want to delete your backup, you can do so separately under Backup in My profile.
- Member information (interests): kept until you delete your account, and deleted immediately when you do.
- Shared boxes: your row is deleted immediately when you leave or are removed. When the person who opened it closes it or deletes their account, the box definition, all rows, and the invite code are deleted together.
- Reports: kept for one year after review (to see whether the same problem recurs), then deleted.
- Usage stats: kept for up to 14 months from the day they are collected, then automatically deleted from the analytics tool.
- Records on your device: deleted when you uninstall the App. The copy on a watch you connected is deleted when you uninstall the watch app.
Deleted information is destroyed in a way that cannot be restored.
3. Sharing with third parties
The Operator does not provide personal information to third parties, except when an investigative agency or other authority requests it through the procedure prescribed by law.
4. Outsourcing and cross-border transfers
The App does not run its own servers. It entrusts processing to the services below. Information is sent over the internet while you use the App.
| Recipient | Country | Entrusted work and items | Retention period |
|---|---|---|---|
| Google LLC (Firebase) |
Republic of Korea (Seoul data center), United States | Storing league records, backups, member information, shared boxes, and reports (Cloud Firestore, Seoul), sign-in (Firebase Authentication), usage stats (Google Analytics for Firebase) | Same as Section 2 |
| Apple Inc. | United States | Sign-in processing if you choose to sign in with Apple | Per Apple’s policies |
If you don’t want your information transferred abroad, don’t use sign-in, backup, leagues, or shared boxes, and turn off usage stats. In that case, your records never leave your own devices. What is exchanged with a watch you connected goes between your phone and your watch, carried by the operating system (Apple, Google Play services). The Operator does not receive it, and it never reaches the Operator’s servers.
5. Your rights and how to exercise them
- Turn off usage stats: My profile → Data → Share usage stats
- Leave a league: tap Leave league at the bottom of the league screen. Your row is removed from the standings.
- Delete your backup: My profile → Backup
- Edit or clear your interests: My profile → Interests
- Leave a shared box: menu at the top right of the shared box screen → Leave shared box (the person who opened it closes it instead). Your row is deleted immediately.
- Delete your account: My profile → Delete account. Your account, all league records, your backup, and your member information are deleted together; shared boxes you opened are closed, and you leave the ones you joined. If you can’t use the App, you can request deletion by email as described in the account deletion instructions.
- For other requests to access, correct, delete, or restrict the processing of your information, send them to the contact below. We will act on them without delay.
6. Device information collected automatically
The App does not use web cookies. For usage stats, Google Analytics for Firebase uses an app installation identifier that is randomly generated for each device. This identifier is not an advertising identifier, and a new one is created if you uninstall the App. Turning off usage stats stops the collection.
7. Security measures
- All transmissions are encrypted (HTTPS).
- Server access rules ensure that only your own account can read and write your backup. No one else can view it, not even through the Operator’s App.
- In leagues, the only things other people can see are your nickname, XP, streak and number of goals completed.
- Only you can read your member information, and only the Operator can see reports.
- Shared box names and goals are filtered so they can’t contain profanity, links, or contact details such as phone numbers.
8. Children under 14
Sign-in, backup, leagues, and shared boxes are features for people aged 14 and older. The Operator does not knowingly collect personal information from children under 14. If we learn that we have, we will delete it right away.
9. Privacy officer and contact
- Privacy officer: ETERNAXCODE
- Email: support@eternaxcode.com
Users in Korea can also report personal information infringements or seek advice from the KISA Personal Information Infringement Report Center (privacy.kisa.or.kr, dial 118 within Korea, no area code needed) and the Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972).
10. Additional information by region
The following is required by the laws of the place where you live. It applies together with Sections 1–9.
European Union, European Economic Area, and United Kingdom
- The controller of your personal information is ETERNAXCODE in the Republic of Korea. Contact details are in Section 9.
- Legal bases: performance of a contract (GDPR Art. 6(1)(b)), to provide the features you choose, such as sign-in, leagues, backup, shared boxes, and showing official boxes that match your interests. Legitimate interests (Art. 6(1)(f)), for usage stats (to improve the App), statistics on interests, and reviewing reports (to protect other users). Legal obligation (Art. 6(1)(c)), when we respond to requests made under the law.
- You have the right to access, correct, and delete your information, to restrict its processing, to receive it in a portable form, and to object. You can object at any time to processing based on legitimate interests, and you can turn off usage stats directly in the App. Send requests to the email in Section 9. We will reply within one month.
- You can lodge a complaint with the data protection authority where you live or work. In the United Kingdom, this is the Information Commissioner’s Office (ICO, ico.org.uk).
- Transfers: your information is processed in the Republic of Korea and the United States. The European Commission and the UK government have decided that the Republic of Korea ensures an adequate level of data protection. Google LLC, which processes information in the United States, participates in the EU-U.S. Data Privacy Framework and its UK Extension.
- Providing personal information is not a legal or contractual requirement. If you don’t provide it, you can still use the App’s basic features. We don’t make automated decisions, including profiling, that have legal or similarly significant effects on you.
Japan
- Personal data is handled in the Republic of Korea and the United States. The Operator has checked the personal information protection systems of both countries and takes the security measures in Section 7.
- On request, we will promptly tell you the Operator’s address and the name of its representative, and give you information about the measures taken by recipients in other countries and about those countries’ systems.
- You can request disclosure, correction, deletion, or suspension of use of your retained personal data as described in Section 5, or by email to the address in Section 9.
California, United States
- We do not sell personal information or share it for targeted advertising.
- Do Not Track: the App does not track you across other companies’ apps or websites, so it does not respond differently to Do Not Track signals.
- The items we collect and who receives them are in Sections 1 and 4, how to review and correct your information is in Section 5, and how we notify you of changes is in Section 11.
11. Changes to this policy
If we change this policy, we will post notice on this page at least 7 days before the change takes effect. For changes that are unfavorable to users, we will give notice at least 30 days in advance.
What changed (effective November 20, 2026)
- Added a note that records are exchanged with a watch you connect. The Operator does not receive it, and the information we collect does not increase.
The previous policy applies from November 10, 2026 through November 19, 2026.
What changed (effective November 10, 2026)
- Added storing the interests a member picks in their account.
- Added shared boxes, where you invite friends to fill a box together, and reports.
- Added the interests you picked and shared box activity to usage stats.
- Added information for people who live in the European Union, the United Kingdom, Japan, and California (Section 10).
The previous policy applies from November 2, 2026 through November 9, 2026.