NatureBox Privacy Policy

Last updated: April 25, 2026

NatureBox is a personal-project iOS app for watching motion-triggered clips from a Raspberry Pi camera you run yourself on your home Wi-Fi. This page explains the data NatureBox handles.

What NatureBox collects

Sign in with Apple. When you choose to sign in, Apple sends NatureBox a stable user identifier and — only on the very first sign-in — optionally your name and email address (you decide what to share or hide on Apple's prompt). NatureBox uses that identifier to issue you short-lived AWS credentials through Amazon Cognito; the identifier is stored in Amazon Cognito (operated by the developer) and on your device in the iOS Keychain.

If you choose "Continue without an account" instead, NatureBox creates no account and stores no identifier on any server.

Camera pairing data. When you pair the app with a Raspberry Pi camera on your local Wi-Fi, NatureBox stores on your device the camera's name, its IP address and port, and a fingerprint of its TLS certificate (used to verify you're connecting to the same camera next time). This information stays on your device.

Cryptographic key. NatureBox generates a per-device key pair and stores the private key in your device's iOS Keychain. The public half is sent to your camera during pairing so the camera can verify requests come from your phone. The private key never leaves your device.

What NatureBox does not collect

Apple-collected diagnostics

If you have iOS sharing of diagnostics enabled in your device's Settings, or if you receive NatureBox via TestFlight, Apple may collect crash logs and basic usage statistics from the app and share them with the developer through App Store Connect. This collection is performed by iOS itself, not by code NatureBox installs, and you can disable it in iOS Settings → Privacy & Security → Analytics & Improvements.

Where data lives

Third-party services

The only third parties involved are Apple (for Sign in with Apple) and Amazon Web Services (for the Cognito Identity Pool). Their respective privacy policies apply to data they receive directly from you. NatureBox does not share data with any other third party.

Account deletion

You can delete your NatureBox account from inside the app: open Settings, then tap "Delete account." This signs you out, forgets paired cameras, and clears the per-device key on your device. Camera clips on your Raspberry Pi are not affected because NatureBox never stored them remotely.

The Cognito identity record may persist in AWS as an opaque identifier with no personal data attached; it is reused if you ever sign back in with the same Apple ID.

The app does not currently call Apple's token-revocation endpoint at deletion. To remove NatureBox from the "Sign in with Apple" list shown in your iOS settings, go to Settings → Apple ID → Sign in with Apple → NatureBox → Stop Using Apple ID.

Children

NatureBox is not directed to children under 13 and does not knowingly collect information from them.

Changes to this policy

This policy may change as NatureBox gains new features. Any change that expands what NatureBox collects will be reflected here before the corresponding feature ships.

Contact

Questions or requests about your data: [your contact email here]