- SYSTALOG.ai
- BlackBox
- Privacy policy
BlackBox Privacy Policy
Last updated October 7, 2026. This version describes the upcoming launch release. Earlier TestFlight builds may have different features, as described in their release notes; the legacy-data handling below applies when upgrading.
BlackBox is provided by SYSTEMS LOGIC & AUTOMATION GROUP LLC, United States. Privacy and support contact: backofficevets@gmail.com. This policy covers the BlackBox iOS app, its optional companion, and BlackBox product pages. Other SYSTALOG products have their own policies.
The essentials
Your timeline is stored on your iPhone. BlackBox has no app account, advertising, third-party analytics SDK, or developer-operated timeline server. We do not automatically receive your locations, notes, photos, audio, or app-usage history. We do not sell personal information, share it for cross-context behavioral advertising, or use your records to train AI models.
On-device storage does not mean that every feature is offline. Apple services, optional timestamp services, destinations you choose for exports or backups, and website hosting process the limited information explained below. If you send us a record in a support request, we receive the copy you send.
BlackBox is intended for adults aged 18 or older recording their own device. It is not a covert monitoring, parental monitoring, employee monitoring, emergency-response, or medical service. Do not record other people or restricted material without the authority and consent the situation requires.
Information the app processes on your device
With the relevant iOS permission and recording enabled, BlackBox can record device coordinates, altitude supplied with a location fix, reported accuracy and capture time, visits and saved-place transitions, available connected Wi-Fi identifiers, battery state, and data-protection transitions iOS reports while the app is running. Saved places, incident descriptions, notes, and user-selected attachments are also stored locally. These signals can reveal home, work, travel, and other sensitive activity, even though we do not receive them.
Location may be recorded while BlackBox is in the background if you permit it. iOS determines when the app can run; permissions, battery state, accuracy, clock settings, and other conditions can create gaps. A device observation does not establish who carried the device or what a person did. Calendar import is optional and reads events to annotate your timeline; a calendar entry is a plan, not proof of attendance. BlackBox does not scan your photo library. The system photo picker gives the app only the items you select; imported files may contain embedded metadata.
Optional photo check-ins are off by default. When enabled, a successful biometric unlock of BlackBox itself presents a choice before starting the rear camera and saving one image. The app cannot silently photograph after every device unlock. Apple performs biometric matching; BlackBox receives the result and can record a signed check-in, but never receives a facial template, fingerprint template, or Face ID image. An enrolled biometric match does not identify a named person. A saved rear-camera image can include people, screens, documents, or sensitive surroundings, so check whether photography is allowed before confirming.
Audio starts only after you choose the manual recording flow, accept the consent reminder, and start recording. Recording is indicated on screen and by iOS's microphone indicator. The reminder does not determine the applicable law or obtain anyone else's consent. It does not look up your location online.
The launch release does not collect Apple Health, pedometer, motion-and-fitness sensor history, or barometer readings. Earlier beta records remain local until removed with the relevant day or app data; restricted history is omitted from shareable exports, including backup exports. Omitted records and resulting verification limitations are disclosed; signed originals are not silently edited.
Private App Activity
Optional Screen Time authorization lets you select apps with Apple's picker and view usage for managing your own device use. Apple controls the report and the opaque app selection. Reports may include authorized iPhones, provide hourly totals and reported pickups, and do not provide a complete list of exact app opening and closing times in BlackBox.
Usage details stay inside Apple's report extension. They are separate from the evidence timeline and excluded from exports, billing, advertising, and analytics. You can disconnect authorization and clear the selection in BlackBox App Activity settings or change permission in iOS Settings. BlackBox cannot delete Apple's underlying Screen Time history.
Services and destinations outside your device
Apple provides map tiles, app/device integrity services, and In-App Purchase. Viewing a map or opening a recorded position in Apple Maps can disclose the viewed area or selected coordinates and network metadata to Apple. Optional address lookup sends coordinates to Apple's geocoding service. Address lookup is off for new installs; previously chosen address preferences remain selected. New WeatherKit collection is disabled in this launch release. Earlier betas could send a location rounded to about 1 km to Apple WeatherKit when enabled. Previously saved weather records remain on-device and display Apple Weather attribution and a legal source link; upgrading does not restart weather requests. Apple's own privacy policy governs its services: Apple Privacy Policy.
Optional independent timestamps send record or seal fingerprints to FreeTSA, DigiCert, or Sectigo. Optional OpenTimestamps sends fingerprints to public calendar servers for Bitcoin anchoring. Both features are off for new installs. Requests include hashes rather than record contents, but the providers receive network information, including IP addresses, and a hash can become linkable if you later disclose the matching record. Public anchors and third-party receipts cannot be recalled by BlackBox. Turning the feature off stops future requests; it does not erase previous requests. See FreeTSA, DigiCert Privacy Notice, Sectigo Privacy Policy, and OpenTimestamps for provider information.
An optionally paired Mac companion exchanges signed proximity and selected computer-activity receipts over Bluetooth only while BlackBox is active in the foreground. Checks pause when BlackBox becomes inactive or moves to the background. Pairing is removable. The companion may observe foreground application names and idle intervals when you enable its recording; those observations concern that computer, and are not independently certified human activity. Use it only on a computer you are authorized to monitor. BlackBox does not send companion history to our servers.
Exporting or choosing a backup folder transfers copies to the recipient, file provider, or storage service you select. That service may upload them, process them abroad, or keep its own copies. These destinations are under your control, not BlackBox's. Review sensitive locations, media, notes, filenames, and embedded metadata before sharing. Ordinary ZIP/PDF exports and daily folder copies are not encrypted by BlackBox. Password-protected exports and encrypted rolling recovery copies are different options; keep the password or recovery key separate from the archive. Backups are record archives, not a promise of a complete database restore.
Purchases and preview
Apple processes payment information and subscription transactions. BlackBox checks Apple-signed entitlements on-device, including expiration or revocation, to determine recording access. We do not receive payment-card details or a copy of your timeline through billing. Apple may provide developer sales reports and, if enabled under your Apple diagnostic-sharing settings, crash or diagnostic reports under its own services. BlackBox adds no developer-operated timeline analytics upload. For subscription administration and billing reports, Apple's servers can send signed purchase, renewal, expiration, refund, storefront, price and transaction-identifier records to RevenueCat, our subscription service provider. RevenueCat associates these with an anonymous billing identifier when no app account token is provided. BlackBox does not supply your name, email, timeline, coordinates, photos, Screen Time or audio through this integration, and does not include a RevenueCat SDK on your device. The on-device 24-hour preview is not reported as an Apple or RevenueCat subscription trial. See RevenueCat's privacy policy.
The optional 24-hour app preview stores its start time and a last-observed time in this device's Keychain. It starts only when you choose it, never charges automatically, and requires a separate Apple purchase to subscribe. Keychain preview state can survive uninstalling the app; deleting or reinstalling the app does not cancel an Apple subscription. See the Terms of Use.
Retention, deletion, and security
The default retention period is 90 days for eligible unprotected days. You can change it in Settings. Cleanup occurs when BlackBox gets an opportunity to run, rather than at a guaranteed second. Days marked Keep Forever or protected by an incident can remain until you remove that protection or delete the eligible day. Archive deletion and retention create an audit notice containing the deleted day and sequence information; remaining integrity metadata can persist. User-imported incident attachments are protected with their incident. The app is not a system that automatically removes every sensitive record after 90 days.
Deleting a photo check-in removes the local image and creates a dated deletion record. Its original fingerprint and timeline entry remain to document what was deleted; the photo is no longer available in later exports from that device. This does not remove the image from earlier exports, backups, another device, or a recipient's files. Deletion means removal through the available app or iOS controls, not a guarantee of forensic erasure from flash storage.
Deleting the app removes its local app container through iOS. System Keychain items, Apple's Screen Time data, subscriptions, exported archives, Files copies, and system backups may remain separately. App-level iCloud timeline sync is disabled in the launch release. Copies synced by earlier betas may remain in your iCloud until you remove them there. Your iCloud/Finder device backup settings can also affect app-data copies. We cannot retrieve or erase copies that exist only in your accounts, devices, or recipients' storage.
The app uses iOS file protection, Keychain, and cryptographic signatures; certain data must remain available after the first device unlock for authorized background recording. Protection depends on device security and access you grant. A biometric app lock is not a promise that every file is separately encrypted by Face ID, and no security measure eliminates all risk. Hashes help detect changes to recorded bytes; they do not establish that an observation is true or guarantee legal admissibility. Keep your device protected and your recovery credentials private.
Website and support information we receive
Our BlackBox product pages are hosted by Vercel. Vercel processes ordinary requests, including IP address, browser/device information, requested URL, and request time, to deliver and secure the site. The BlackBox pages contain no advertising pixels or analytics trackers. We do not track visitors across third-party websites and do not change that practice based on a Do Not Track signal. See Vercel Privacy Notice for its handling of service information. Pages elsewhere in the ecosystem follow their own notices.
When you contact us, we receive your email address, correspondence, and anything you choose to attach. We use this to answer requests, investigate reported issues, and maintain necessary support, security, and legal records. Send the minimum necessary information; redact unrelated people and sensitive records. We use email, hosting, and service providers to perform those functions, not to advertise using your timeline. Our Gmail support mailbox is processed under Google’s Privacy Policy. We may disclose information we actually hold when required by valid legal process, to protect rights or security, or in a lawful business transfer subject to applicable privacy requirements. We have no server-side copy of your local timeline to hand over.
Support correspondence is retained while needed to resolve the issue and for necessary follow-up, security, dispute, or legal purposes, then deleted when no longer needed. Provider request logs follow the relevant provider's retention controls and obligations. We do not promise that stopping recording deletes website logs or support emails. Our operations and providers may process information in the United States and other countries. Where applicable law requires transfer safeguards, those requirements must be satisfied before the relevant transfer; this policy does not claim certification under a transfer framework.
Your choices and privacy requests
You can pause automatic recording, revoke iOS permissions, disconnect App Activity or companion pairing, switch off optional network features, change retention, remove eligible local records, and choose whether to export. Withdrawing permission stops the affected future processing; it does not erase already created copies. Automatic recording also stops when preview or subscription access ends, while viewing, export, deletion, and retention remain available.
Billing records held by Apple and RevenueCat are retained separately for subscription administration, reporting, fraud prevention and applicable legal obligations; uninstalling BlackBox does not delete those records. We can assist with requests for billing records under our control and coordinate with our provider.
For information we hold, contact backofficevets@gmail.com with “BlackBox privacy” and the request. Depending on applicable law, you may request access, correction, deletion, portability, restriction, or objection; withdraw consent; exercise applicable California rights; or complain to the relevant privacy regulator. We do not sell or share data for behavioral advertising and do not penalize lawful privacy requests. We may need proportionate verification or may retain information where the law permits or requires it; we respond within applicable legal deadlines. Do not send identity documents or full timeline archives unless specifically necessary. An authorized agent may contact us with evidence of authority. For records we cannot access because they exist only on your device, use the app and iOS controls described above.
Where a law requires a legal basis for processing, responding to requested support uses the applicable service/contract basis; protecting the service uses legitimate interests where permitted; compliance uses legal obligations; and optional sensitive processing uses consent where required. iOS permission alone is not another person's recording consent. The user's own disclosure of third-party information may carry separate legal obligations.
We do not knowingly solicit personal information from children under 18. Contact us if a child has sent us information so we can address it. Merely being pictured or mentioned in a user-controlled local record does not mean we have received that record.
Changes
The date above identifies this version. Material changes will be described on these pages and, where required, in the app before new processing begins. We will obtain additional permission when required; a policy update does not silently authorize a new use or upload of existing sensitive records.