Countdown Widget Timer

Privacy Policy

Effective September 11, 2026

In brief: Countdown does not require an account. Events and selected photos stay in the App's local shared container, and APP BOX does not receive that content through its service. Production versions use Firebase Analytics and Crashlytics automatically for usage measurement and reliability. Countdown may send a short-lived Apple Search Ads token through an App Attest-protected APP BOX service to measure Apple Search Ads acquisition; Apple controls whether its response is standard or detailed. Non-premium users may see Google ads; advertising consent and iOS tracking choices control eligible ad data and personalization.

This Privacy Policy explains how Countdown Widget Timer ("Countdown" or the "App") handles information. The data controller is APP BOX EOOD, UIC 207060361, Lazur District, Block 109, Apartment 5, 8000 Burgas, Bulgaria ("APP BOX", "we", "us", or "our"). Contact us at info@appbox.group.

1. Information stored on your device

Countdown stores the information you create locally on your device and in the App Group container shared with its widgets and Apple Watch components. This may include:

• event titles, dates, times, recurrence rules, colors, layouts, and notification settings;
• photos you choose for event backgrounds; and
• preferences and premium-entitlement status needed to operate the App and widgets.

APP BOX does not receive your event titles or selected photos through an APP BOX server. Apple may include local App data in device backups according to your Apple Account and device-backup settings.

2. Optional device permissions

• Photos: used only when you choose a photo for an event background.
• Notifications: used to schedule reminders you configure through Apple system services.
• Calendar: used only when you ask Countdown to add an event to your system calendar. Calendar data may then sync through accounts you configured with Apple or another provider.
• Tracking: where applicable, iOS may ask whether you permit tracking for advertising. Denying permission does not prevent use of the App.

You can decline or later change optional permissions in iOS Settings.

3. Consent, advertising, analytics, and diagnostics

Google User Messaging Platform and Mobile Ads

Countdown uses Google User Messaging Platform (UMP) to determine whether a privacy message is required and to store your consent choices. Google Mobile Ads may show ads to non-premium users only after UMP reports that ads may be requested. Depending on your region, device settings, and choices, Google may process identifiers, IP-derived information, device and app information, ad interactions, consent signals, and usage data for ad delivery, fraud prevention, security, and measurement. Personalized advertising is used only where the required consent and platform authorization are available.

Firebase Analytics

Firebase Analytics is enabled automatically in production versions of Countdown and is not controlled by a separate in-App opt-in. Google may process app interactions, device or installation identifiers, approximate technical information, and purchase events so we can understand use and improve the App. We do not intentionally include event titles or selected photos in analytics events.

Firebase Crashlytics

Firebase Crashlytics is enabled automatically in production versions of Countdown and is not controlled by a separate in-App opt-in. It may process crash reports, diagnostics, device model, operating-system version, App version, memory and device-state information, and technical identifiers so we can diagnose and fix reliability problems. We do not intentionally include event titles or selected photos in crash reports. Google Mobile Ads may also process diagnostic information related to ad delivery.

Your UMP choices and iOS tracking permission control advertising storage, advertising user data, ad personalization, and tracking where applicable; they do not turn off Countdown's operational Analytics or Crashlytics collection.

Learn more in Google's Privacy Policy, Firebase Privacy and Security information, and information about Google's partner services.

Apple Search Ads attribution and purchase verification

On an eligible launch, Countdown may create an app-specific pseudonymous installation link and use Apple App Attest cryptographic proofs when it contacts the APP BOX service. These checks help us reject fraudulent client requests; they do not create an APP BOX account or identify you by your event content.

Countdown may send a fresh Apple Search Ads AdServices attribution token when Apple makes one available. We use it only to measure Apple Search Ads acquisition. The token is encrypted while it is processed and its bytes are removed after terminal processing. We do not send a Firebase app-instance identifier or use IDFA through this service, and we do not use the information to join Countdown activity to our other apps. Apple determines whether the resulting attribution is standard or detailed through its own global and per-app tracking controls. Countdown does not show an ATT prompt solely for this request, and denying tracking does not prevent use of the App.

4. Purchases

Apple processes purchases through StoreKit and the App Store. Countdown receives product and verified entitlement information needed to unlock premium features. When the App Box service is available and you use it, APP BOX may receive Apple-signed transaction and entitlement evidence, the product identifier, purchase status, and the app-specific pseudonymous link needed to verify a purchase and prevent duplicate or fraudulent claims. APP BOX does not receive your complete payment-card details or Apple Account password. Apple handles purchase data under its App Store Privacy Notice.

5. Support and this website

If you use the in-App support form or email support, we process your email address when you provide it, message, attachments, and any information you choose to provide to answer and administer the request. The form does not automatically attach event content, purchase evidence, or analytics data. Please do not send sensitive personal information or private event details. You can request deletion of one saved in-App support conversation through its privacy request control or contact us using the address below.

These support and legal pages do not use advertising or analytics scripts and do not intentionally set tracking cookies. Hosting infrastructure may process standard request information, such as an IP address, browser or user-agent information, requested URL, and request time, for delivery, security, and troubleshooting.

6. Purposes and legal bases

Depending on the feature and applicable law, information is processed:

• to provide requested App features and verified purchases or to perform our agreement with you;
• for our legitimate interests in maintaining reliability, preventing fraud, securing the App and website, providing eligible non-personalized advertising, and responding to support requests, where those interests are not overridden by your rights;
• for our legitimate interests in measuring Apple Search Ads acquisition, preventing fraud, and securing the APP BOX service, using the limited pseudonymous attribution processing described above;
• with your consent for personalized advertising, advertising storage, advertising user data, access to advertising identifiers, or tracking where consent is required; and
• to comply with legal obligations or establish, exercise, or defend legal claims.

7. Sharing and international processing

We do not sell your locally created event content. Information may be processed by Apple for purchases, App Attest, attribution, and platform services; by Google for UMP, advertising, analytics, and diagnostics as described above; by our hosting, backup, security, and email providers when they operate the APP BOX service or support website; and by professional advisers or authorities when legally required. Apple and Google may process data globally, including outside the EEA, using the transfer safeguards described in their policies and required by applicable law.

8. Retention

Local event data remains until you delete an event or remove the App, subject to copies in your device backups. We keep an Apple Search Ads attribution link for up to 180 days and attribution-token bytes for no more than 24 hours; the token bytes are removed earlier after terminal processing. We retain the minimum purchase identity link while it is needed for an active entitlement and for 90 days after it ends or is unlinked; a separate minimum financial reconciliation record may be retained for 120 calendar months from the following January where required for that purpose.

We retain a closed support conversation for 90 days, or an open conversation for up to 180 days without activity. Working diagnostics are retained for 14 days and ordinary security or administrative audit evidence for 180 days. Encrypted backup copies have a 35-day rolling retention period. We may retain limited information longer where necessary to comply with law, establish, exercise, or defend legal claims, or preserve an active legal hold. Apple, Google, calendar providers, and backup providers retain information under their own published retention rules and legal obligations.

9. Your choices and rights

Where required, Countdown provides an Advertising Privacy control so you can review or change advertising choices. Apple controls its own tracking settings and the standard or detailed Apple Search Ads result described above. The Advertising Privacy control does not disable Firebase Analytics or Crashlytics. You can also change permissions in iOS Settings, delete events and backgrounds in the App, request restoration of eligible purchases, or remove the App.

Depending on where you live, including in the EU/EEA or United Kingdom, you may have rights to access, correct, delete, restrict, or object to processing, withdraw consent, or receive a portable copy of personal information. You may complain to your local data-protection authority; in Bulgaria, this is the Commission for Personal Data Protection. Email info@appbox.group to exercise a right. We may need information to verify and fulfill your request, and in many cases APP BOX cannot identify local-only data that never leaves your device.

10. Children

Countdown is a general-audience utility and is not designed to knowingly collect personal information directly from children. If you believe a child has provided personal information through support or another feature, contact us so we can investigate and take appropriate action.

11. Security

We use reasonable technical and organizational safeguards, including Apple platform storage and transport protections and data-minimizing defaults. No method of storage or transmission is completely secure.

12. Changes

We may update this policy when Countdown, our providers, or legal requirements change. We will update the effective date and provide additional notice in the App or App Store listing when required.

13. Contact