Ilox was built with privacy-by-design principles at its core. We intentionally built the app to require no account, no cloud connection, and no data transmission to our servers or any third-party servers. That means we never have access to:

• Personal identifiable information: We never ask for your name, email, phone number, or any other details that could be used to identify you. There is no signup flow, no profile to fill out, and no way for us to link your use of Ilox to you as an individual.
• Your waste sorting records: Every photo you snap or import, every custom tag you create, every calendar log and stat entry is stored exclusively in your device’s local app sandbox. We cannot access these files, and they never leave your device unless you intentionally choose to share them manually.
• Location data: Ilox never requests location permissions, and we have no way to track where you sort waste, where you store your bins, or where you take recyclables.
• Usage analytics: There are no tracking pixels, no hidden analytics SDKs, and no behavior logging built into Ilox. We don’t know how often you open the app, which features you use, or how many waste records you create. We don’t even track how many total people use Ilox.
• Crash or performance data: If the app malfunctions, we do not automatically receive crash logs or performance data from your device. You can choose to manually share error details with us via email if you want to help us fix issues, but this is entirely optional.

Ilox only requests access to device features that are strictly necessary for core functionality. You can deny any of these permissions at any time in your device settings, and the app will still work for the features you choose to use:

• Camera access: Only requested when you tap the "Snap Photo" button to capture an image of sorted waste. If you deny this permission, you can still import existing photos from your device gallery to create records.
• Photo library access: Only requested when you tap the "Import Photo" button to add existing images to your waste log. We only access the specific photos you select, and we never scan or access your entire photo library.
• Local notification permission: Only requested when you choose to set up custom collection reminders. All reminders are stored and triggered locally on your device — we never send you push notifications, and we have no access to your reminder schedule.
• Local storage access: Required to save your waste records, tags, and preference settings to your device’s private app storage. This access is limited exclusively to Ilox’s own sandboxed storage folder, and we never access other files on your device.

Since all your data lives exclusively on your device, you have complete control over every part of your Ilox experience:

• You can edit, re-tag, or delete individual waste records at any time directly in the app. These changes happen only on your device, and no copy of the deleted data remains anywhere else.
• You can filter, sort, and export your record data manually at any time by taking screenshots, sharing individual record photos, or using any device-level export tools you have access to. We never handle this export process.
• If you uninstall Ilox from your device, all your photos, tags, calendar logs, reminder settings, and preference data are permanently erased. We have no backup of this data, so there is no additional action required to delete your information from our systems (because we never had it in the first place).

Ilox contains no third-party advertising, tracking, or analytics code of any kind. The only external code included in the app is core system libraries provided by your device’s operating system to handle basic functions like camera access, local storage, and local notifications.

We do not share any of your app data with these system libraries beyond what is strictly necessary for the features you choose to use. Any data collected by your device’s operating system is governed by the policies of the company that builds your OS, which we have no control over.

If any third party ever requests user data from us, we will be able to truthfully tell them we have no user data to share. We built Ilox specifically so that we never have access to your information, even if we wanted to.

We will only update this privacy policy if we add new optional features to Ilox that change how data is handled (for example, if we add an optional end-to-end encrypted cloud sync feature for users who want to back up their data across devices).

Any policy update will be posted in the Settings tab of the app at least 30 days before it takes effect. We will never change our core promise of never collecting user data by default. If you don’t agree with an updated policy, you can continue using older versions of Ilox, or uninstall the app entirely — no hoops to jump through, no account to delete.

Our commitment to your privacy is baked into every part of Ilox, and these promises will never change:

• We will never embed advertising or tracking code in Ilox.
• We will never make cloud sync or account creation a requirement to use core Ilox features.
• We will never sell, rent, or share any user data (because we don’t have any to share).
• We will always prioritize local storage and user control over any new feature ideas.

If we ever break this promise, we will publish a full public apology and give all users clear instructions to export any data they have stored (though again, we will never have access to that data ourselves).

If you have any questions, concerns, or feedback about this privacy policy or Ilox’s privacy practices, you can reach our team at any time at privacy@ilox.app.

When you send us an email, the only information we receive is the email address you choose to send from and the content of your message. We will only use this information to respond to your inquiry, will never add your email to any marketing list, and will delete your entire conversation thread if you ask us to.