WAR BOXPrivacy Policy
This policy explains how Six Ridge Labs LLC ("we", "us") handles information in the War Box app for iPhone (the "app") and on getwarbox.com (the "website"). The short version: your gear records are private to your account, we don't sell your data, we don't run ads or ad tracking, and you can delete your data at any time.
1. The website and waitlist
What we collect. If you join the waitlist we store your email address, the optional answer to "What do you build?", and the date you signed up. That's all the waitlist form asks for.
Why. We use your email only to tell you when the War Box app launches and to offer early test (TestFlight) spots. We don't add it to any other mailing list, and we don't sell or share it for marketing.
Abuse protection. To stop automated sign-ups, the website keeps a short-lived counter tied to a one-way hash of your IP address. We never store the IP address itself, and the counter deletes itself automatically after about 10 minutes.
No trackers. The website uses no cookies, analytics, ad pixels, third-party fonts or third-party scripts.
How long we keep it. We keep your waitlist entry until you ask us to remove it or until we stop running the waitlist, and in any case no longer than 12 months after the app launches.
Unsubscribe or delete. Email support@getwarbox.com from the address you signed up with and we'll remove it from the waitlist. Every waitlist email will also include a way to unsubscribe.
2. The War Box app
Your account
You sign in with an email address and password. Accounts are handled by Firebase Authentication, a Google service. We can see your account's email address and unique account ID; we can't see your password.
The records you enter
The app stores what you choose to enter: gear and inventory items, firearm and accessory details including serial numbers, kits and case contents, range sessions, ammo counts, maintenance reminders, radio frequencies and PACE plans, wishlists and loans. These records are stored in Cloud Firestore (Google) under your account. Database security rules allow only your signed-in account to read or change them. We don't look at your records except when you ask us to for support, or when the law requires it.
Photos. The app doesn't store photos of your gear. The only time it uses a photo is Photo ID (see section 3). There, the photo you pick is shrunk on your phone and sent once for identification. We don't save it on your phone, in your account or on our servers.
The app also keeps a copy of your records on your iPhone so it works offline and syncs when you're back online. You can lock the app with Face ID, Touch ID, your passcode or a PIN; that lock is handled on your device, and we never receive your biometric data.
Location
The app doesn't track your location. The only feature that can read it is the optional Use my location button in the comms (PACE) plan builder. If you tap it and allow access, the app reads your position once and rounds it to two decimal places (roughly within a kilometer). It then puts it in the planner's Area field, where you can change or clear it. You can also type a town or ZIP code yourself, or leave the field blank. Whatever is in the Area field is saved with your planner settings and in the notes of any plan you build. It's also sent with the plan request as described in section 3. Nothing else in the app reads your location.
Microphone
The shot timer uses your iPhone's microphone, with your permission, only while the timer is open. It listens for the sound of shots, and that sound is analyzed on your phone as it happens. Audio is never recorded, saved or uploaded. If you save a run, only the shot times and splits are stored, as a range session in your account. The microphone turns off when you close the timer.
Sharing you choose
- Share links. If you turn on a share link for an item or kit, anyone who has that link can view what it shows. You can turn links off at any time in the app's security settings.
- Loans. If you record a loan to another War Box user, that borrower's account can see the item's name and the loan dates, nothing else.
Nothing else in your account is visible to other users.
3. AI lookups
AI lookups are optional. They fill in things like prices, weights, batteries and specs. When you use one, the app sends a request to our lookup service, which runs on Cloudflare Workers. Our service checks that you're signed in and counts your lookups, then sends the details below to Anthropic's Claude AI models to get an answer. Anthropic may run web searches using those details to find current information.
What is sent, depending on the lookup you choose:
- Price and weight lookups: the item's name, brand, category, color and condition.
- Identify from a photo: the photo you take or pick, shrunk on your phone to a smaller image, plus any name you typed for it. Our service passes it to Anthropic and doesn't store it.
- Battery and ammo lookups: the device's name, brand and type, or the caliber, brand and load.
- Comms (PACE) plan builder: the answers you give in the planner (for example scenario, terrain, distance, devices and licenses), the Area field if it isn't blank (typed by you, or filled by the Use my location button), and the saved frequencies you include, with their labels and notes.
- Price alerts: for wishlist items you set an alert on, the item's name, brand, category and your target price. To check prices on a schedule, our service stores this list, linked to your account ID, in Cloudflare until you remove the alert. If you turn on phone notifications for alerts, we also store the push subscription your device gives us so we can send them.
If an area is included, Anthropic may use it in web searches for nearby repeaters and weather radio stations.
What is not sent: serial numbers as text, item notes, loans, or the rest of your records. Your name, email and account ID are not included in what we send to Anthropic. You can also switch on a setting that keeps every Arms Room item (firearms, suppressors, optics, lights, lasers and knives) out of price and weight lookups. A photo you send for Photo ID is sent as-is, so keep serial numbers out of frame.
How Anthropic handles it. Anthropic processes these requests under its commercial terms for API customers. Under those terms, Anthropic does not use content sent through its API to train its models. Anthropic may keep request data for a limited time under its own data-retention and safety policies. See Anthropic's Commercial Terms of Service and privacy information for details.
AI answers can be wrong. See our Terms of Use.
4. Payments
Subscriptions and lookup packs are sold through Apple's App Store. Apple processes the payment. We never receive your card number or billing details; we only receive confirmation of what you bought so the app can unlock it.
5. Service providers
We use these companies to run the app and website. They process data for us under their own terms and only as needed to provide their service:
- Google (Firebase Authentication, Cloud Firestore, Firebase App Check): sign-in, storing and syncing your records, and blocking abuse of our backend.
- Cloudflare: hosting the website, the waitlist and the AI lookup service. Like any web host, Cloudflare handles network data such as IP addresses to deliver and secure traffic.
- Anthropic: the AI models behind lookups, as described in section 3.
- Apple: App Store purchases, subscriptions and push notifications.
6. No selling, no ads
We don't sell your personal information, share it for advertising, show ads, or track you across other companies' apps or websites. The app contains no third-party analytics or advertising SDKs.
7. Keeping and deleting your data
We keep your account and records for as long as you have an account. You can delete your account at any time in the app's settings. That deletes your account and the records stored under it. You can also email support@getwarbox.com from your account's email address and ask us to delete it. We complete deletion within 30 days, apart from copies in short-term backups, which expire on their own, and anything we're legally required to keep. Deleting the app from your iPhone removes the on-device copy but doesn't delete your account.
8. Security
Data is encrypted in transit (HTTPS) and stored with Google and Cloudflare, which encrypt data at rest. Access to your records is limited to your signed-in account by database rules. No system is perfectly secure, so please use a strong, unique password and turn on the app lock.
9. Children
The War Box app and website are not directed to children under 13, and we don't knowingly collect personal information from them. If you believe a child under 13 has given us information, email us and we'll delete it.
10. Where we operate
The War Box app and website are offered in the United States only. Your data is stored and processed primarily in the United States. Cloudflare serves each request from the data center nearest to you, so a request made while you're traveling may pass through a Cloudflare location outside the US. We don't control where Anthropic processes the lookup requests we send it.
11. Your choices
You can see and edit your records in the app at any time, turn off share links, keep your armory out of price and weight lookups, or delete your account. Depending on your state, you may have additional rights, such as to access, correct or delete personal information we hold about you. Email us to make any request and we'll respond within the time the law requires.
12. Changes to this policy
If we change this policy we'll update the effective date above. If a change is significant, we'll also tell you in the app or by email before it takes effect.
13. Contact
Six Ridge Labs LLC (War Box app)
Email: support@getwarbox.com
Mail: 30 N Gould St, Ste N, Sheridan, WY 82801