top of page

Privacy Policy — Subtext by BlackBox

Effective: 23rd February 2026

1. Who We Are

BlackBox operates digital applications designed to support clarity, decision-making, and structured communication. Our current products include Subtext and may include additional applications in the future.

Contact: Alison @ BlackBox Email: alison@black-box.solutions Website: https://black-box.solutions/contact

2. Scope of This Policy

This policy applies to the Subtext iOS application, the BlackBox website, and any future tools released under the BlackBox brand.

3. Information We Collect and Process

A. Text Submitted for Analysis

When you paste text or upload content into Subtext:

  • The text is sent to a third-party AI language model provider - Anthopic's Claude Ai - solely to generate your requested analysis

  • The text is not stored by BlackBox after your result is returned

  • We do not sell, share, or use submitted text for advertising purposes

  • We do not use submitted text to train AI models

  • Text is processed only to provide the service you requested

Our AI processing is provided by a third-party language model provider. Submitted text is transmitted to their servers to perform the analysis and is not retained beyond the request.

B. Account Information (Pro Users Only)

If you upgrade to a Pro subscription via Subtext:

  • We collect and store your email address and subscription status

  • Your account is created and managed via Base44, our application platform provider

  • Payment processing is handled by third-party providers. We do not store full payment card details

  • Free users are not required to create an account

C. Usage Data

We and our platform provider Base44 may collect limited usage information including:

  • Features used within the app

  • Device type and operating system

  • Session duration and frequency

  • Basic analytics to improve performance and reliability

D. Device-Based Usage Limits

Free access is limited to one analysis per day. To enforce this:

  • A local record may be stored on your device

  • This record contains no message content and is used only to track daily usage limits

4. Third-Party Service Providers

BlackBox uses the following categories of third-party providers to operate Subtext:

  • Base44 — application platform and user account management

  • AI language model provider — processing of submitted text for analysis

  • Subscription billing provider — handling of Pro subscription payments

  • Analytics provider — usage and performance monitoring

  • Hosting and infrastructure provider — app delivery and reliability

Each provider processes data only as necessary to deliver their service. We do not authorise providers to use your data for their own purposes.

5. Legal Basis for Processing (UK GDPR)

Where applicable under UK GDPR, we process personal data under the following lawful bases:

  • Consent — when you choose to submit content for analysis

  • Contractual necessity — to provide and manage your paid subscription

  • Legitimate interest — to maintain, secure, and improve our services

6. California Residents (CCPA)

If you are a California resident, you have the right to:

  • Know what personal data we collect and how it is used

  • Request deletion of your personal data

  • Opt out of the sale of your personal data (BlackBox does not sell personal data)

  • Non-discrimination for exercising your privacy rights

To exercise these rights, contact us at alison@black-box.solutions

7. Data Retention

  • Submitted text is not stored after processing

  • Account data for Pro users is retained while your account remains active

  • You may request deletion of your account and associated data at any time by contacting alison@black-box.solutions

8. Your Rights

Depending on your location, you may have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion of your data

  • Restrict or object to processing

  • Request data portability

To exercise any of these rights, contact: alison@black-box.solutions

We will respond to all requests within 30 days.

9. Data Security

We implement reasonable technical and organisational safeguards to protect your personal data. However, no online service can guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you as required by applicable law.

10. Children

Subtext is not directed at children under the age of 13. We do not knowingly collect personal data from children. If we become aware that a child has provided personal data without appropriate parental consent, we will delete it promptly.

11. International Data Transfers

Your data may be processed by our service providers in countries outside the UK or European Economic Area. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

12. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted at this URL with an updated effective date. We encourage you to review this policy regularly.

BlackBox is not a law firm and this policy does not constitute legal advice. You are responsible for ensuring compliance with the laws applicable to your location and activities.

bottom of page