Privacy Policy

Last updated: June 2026. MyClipbox™ is privacy-first by design. Here's exactly what that means.

We believe privacy is a right, not a feature. Your family's data stays with your family. This policy explains in plain language what we collect, what we refuse to collect, and how you stay in control.

1. What We Collect

  • Email address — for account access and beta communications.
  • Messages from brands you opt into — the SMS and email that businesses send to your dedicated clipbox number and email alias are received and stored on our servers so we can organize them and pull out the deals, coupons, receipts, and order details for you.
  • Receipts and coupons you add to the app.
  • ZIP code — entered in the app for local deal relevance and to set your timezone. It is stored only on your device and is never sent to our servers.
  • Minimal, anonymous analytics for app stability. No personal identifiers are attached.

2. What We Do Not Collect

  • We never ask for your personal phone number.
  • We do not collect precise location, and we request no GPS, Wi-Fi, or location permissions.
  • We do not access your contacts, address book, or call history.
  • We do not access your camera, microphone, or photo library — except a receipt image you explicitly choose to scan (see §3).
  • We do not access calendar, reminders, Bluetooth, or motion data.
  • We do not use advertising identifiers (IDFA / GAID), tracking cookies, web beacons, pixels, or device fingerprints.
  • We do not build cross-app behavior or browsing profiles.

3. How We Process Your Messages

  • Messages that businesses send to your clipbox number and email are parsed on our servers to detect coupons, deals, receipts, delivery updates, and order information.
  • To extract structured fields — brand name, order number, delivery date, price — from inbound marketing messages, we use a vendor language model under a zero-retention contract. The vendor does not retain, train on, or share message content.
  • We do not send personal correspondence to any language model.
  • Receipt images are processed only when you initiate a scan, and are not retained or used for AI training.
  • You can restrict receipt scanning to on-device only in Settings → AI & Privacy.

4. Data Sharing — What We Do Not Do

  • We do not sell, rent, or license your personal data — to anyone, for any reason.
  • We do not share your information with advertisers or ad networks.
  • We do not trade your data with data brokers, affiliates, or marketing partners.
  • We do not build advertising profiles about you or your family.
  • You may opt out of all communications at any time.

5. Service Providers

  • We share data only with the providers that operate the service, each under contract: Supabase (database and authentication), our zero-retention extraction vendor (structured fields from marketing messages), Stripe (payment processing — we never see your card details), our telecommunications provider (clipbox number provisioning and message routing), and Anthropic Claude (optional receipt-image scanning, only when you initiate a scan).
  • No advertising SDKs, analytics trackers, or data brokers are integrated into the app.

6. Your Personal Inbox (Clipbox)

  • We assign you a dedicated clipbox number and email alias to receive messages from businesses you subscribe to — text clubs, deal alerts, receipts, and the like.
  • This is not your personal phone number or email; it is a separate address managed by MyClipbox.
  • You can unsubscribe from any business with a single tap, and we handle the opt-out for you.

7. Zero Phone Permissions

  • MyClipbox requests zero phone permissions. We built the app to work without accessing any sensitive device features.
  • No contacts, no camera, no microphone, no photo library. No location, no Bluetooth, no motion sensors, no calendar.
  • No advertising identifiers, no tracking cookies, no web beacons.
  • If it isn't necessary to organize your messages, receipts, and coupons, we don't request it.

8. Data Retention and Deletion

  • We retain your personal data only while your account is active.
  • You may request deletion at any time. Deletion starts a 30-day grace period during which you can reactivate your account; after it, your personal data is purged.
  • Please note: the messages that businesses sent to your clipbox number and email are retained in anonymized form as service infrastructure, and your clipbox number is not re-released. This retained data is not linked to your identity.
  • Your authentication record is permanently removed within 90 days.
  • You can delete individual receipts, shopping lists, and coupons at any time from within the app.
  • You have the right to erasure of your personal data under applicable privacy laws (GDPR, CCPA).

9. Children's Data

  • MyClipbox is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
  • If we learn we have collected data from a child under 13 without verifiable parental consent, we will delete it promptly.
  • Parents may contact us to review or request deletion of any data we may hold about a minor.

10. Your Rights — CCPA, GDPR & More

  • Access — request a copy of all data we hold about you.
  • Deletion — request deletion of your account and personal data.
  • Portability — export your data in a standard, machine-readable format.
  • Correction — request correction of any inaccurate personal information.
  • Opt-out — unsubscribe from any communications at any time.
  • Do Not Sell or Share My Personal Information — we do not sell or share personal information for cross-context behavioral advertising; California residents may opt out at any time, and EU/UK residents have the rights granted under GDPR, including the right to lodge a complaint with a supervisory authority.

11. Security

  • All network traffic is encrypted in transit via TLS, and stored data is encrypted at rest with AES-256.
  • Cloud data is protected by row-level security — each family can only access its own records.
  • Access to personal data is strictly limited to authorized personnel on a need-to-know basis.
  • We will notify you promptly in the unlikely event of a data breach.

12. Contact & Changes

  • Questions about our privacy practices? Contact [email protected].
  • We will notify you of any material changes to this policy before they take effect.

Don't take our word for it

Use our Privacy Scanner to compare this policy against any other app's terms.

Try Privacy Scanner

Questions about our privacy practices? Contact us at [email protected]