Earbox Privacy Policy
Earbox turns articles, email excerpts, documents and web pages you import into audio you can listen to later. This policy explains what we collect, why, how it is handled and your rights. We collect only what the service needs, never sell personal data, never use your content to train models, and show no ads.
1. Information we collect
1.1 Content you import (stored on your device). Pasted text, imported files, extracted web articles, titles, source links, import time, playback progress, voice and speed preferences, queue state and cached synthesized audio. These stay on your device under iOS Data Protection; our servers do not store them and there is no cloud sync.
1.2 Text sent for narration. After you enable cloud narration and play an item, the paragraph currently being read (at most 600 characters at a time) is sent through our server to our speech-synthesis provider. Titles, links and history are never sent. The server does not keep the text; it records only the character count for metering.
1.3 Account. You sign in with Apple. We receive Apple's stable user identifier and the email you choose to share (possibly an Apple private relay address). We never see your Apple ID password.
1.4 Subscription. Subscriptions are processed by the App Store. We receive Apple-signed transaction records (transaction id, product, purchase and expiry dates, renewal and refund status) to confirm your entitlement. We never handle card details.
1.5 Usage and technical data. Per-synthesis character counts, voice and timestamp for free-allowance and subscription metering; server access logs (IP address, path, time, app version, status) kept for at most 30 days for security and troubleshooting. We embed no analytics, advertising or crash-reporting SDKs.
1.6 Web fetching. When you add a link, your device fetches that page directly; the request does not pass through our servers.
2. How we use it
To narrate your content and match voices to its language; to identify you and apply free-allowance and subscription rules; to keep the service secure and working; to meet legal obligations. We do not sell or rent personal data, train models on your content, or send marketing without separate consent.
3. Processors and international transfers
| Processor | Purpose | Data | Location |
|---|---|---|---|
| Apple (Sign in with Apple, App Store) | Sign-in, subscriptions, payment | Account identifier, email, transactions | Apple |
| Alibaba Cloud Model Studio (Alibaba Cloud International) | Speech synthesis (model qwen-audio-3.0-tts-plus, qwen3-tts-flash) | The paragraph being read | Singapore |
| Amazon Web Services (our API server) | Account, subscription and usage records | Sections 1.3–1.5 | United States (California) |
| Alibaba Cloud International (our database) | Account, subscription and usage records | Sections 1.3–1.5 | United States (Virginia) |
Synthesis happens in Singapore, so narrated text leaves the United States. Only the current paragraph is transferred, without your account identifier; the provider processes it under its data processing terms, does not retain it beyond the request, and does not use it for training. The app asks for your explicit consent before the first playback, and you can withdraw it at any time in Settings › Cloud narration.
4. Retention
On-device content: until you delete it, clear caches or uninstall. Account, subscription and usage records: for the life of the account; personal fields are deleted within 30 days of account deletion, while transaction records are kept in minimized form for up to 7 years as required for accounting and platform obligations. Access logs: 30 days.
5. Your rights
Export local data as JSON from the Privacy Center; delete items, history and audio cache in the app; delete your account (Settings › Account) to remove server-side data and revoke the Apple sign-in; withdraw cloud-narration consent at any time; manage or cancel subscriptions in iOS Settings › Apple ID › Subscriptions (refunds are handled by Apple). Depending on where you live you may have further rights (see Section 10 for California). Email [email protected]; we answer within 30 days.
6. Children
Earbox is not intended for children under 16 and we do not knowingly collect their data.
7. Security
TLS everywhere; session tokens stored only as one-way digests; provider credentials kept only on the server; device data under iOS Data Protection. No system is perfectly secure; keep your device and Apple ID safe.
8. Changes
We will notify you in the app of material changes and update the effective date.
9. Contact
Infinbits · [email protected] · https://infinbits.com
10. California residents (CCPA/CPRA)
We collect the categories described in Section 1 (identifiers, commercial information, internet activity, and the text you choose to narrate). We use them only for the purposes in Section 2. We do not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics. You have the right to know what we collect, to delete it, to correct it, and not to be discriminated against for exercising these rights. Delete your account in the app or email [email protected]; we verify requests through your signed-in account. Authorized agents may submit requests on your behalf with written permission.