EFFECTIVE JULY 21, 2026

Privacy Policy

BoxWherever is operated by Archieboy Holdings, LLC (“Archieboy,” “we,” or “us”). This policy explains the information used by BoxWherever.com, BoxWherever Studio, and the BoxWherever Quest application.

Information we collect

• Account information: email address, name or nickname if supplied, encrypted password credentials, account dates, and acceptance of our Terms.
• Your workout content: audio and panorama files you upload, song titles, choreography maps, workout preferences, and selected scene coordinates, panorama identifiers, and facing direction.
• Quest connection information: a device identifier and name, a one-way hash of its pairing token, and paired/last-connected times.
• Technical and security information: IP address, browser/device information, referral or campaign parameters, session cookies, and server/error logs.
• Support communications: the information you choose to include when contacting us.

Quest controller and headset movement is processed locally in real time to detect punches, blocks, and dodges. The current release does not upload raw body tracking, biometric data, health measurements, or workout scores to our servers.

How we use information

We use information to create and deliver workouts, pair your headset, secure and operate accounts, provide support, prevent abuse, troubleshoot crashes, improve reliability, meet legal obligations, and communicate service-related information. Where applicable, our legal bases are performance of our agreement with you, our legitimate interests in operating and securing the service, your consent for optional content, and compliance with law.

Music and scene processing

Your uploaded music is stored privately for your account and processed to detect musical timing and generate choreography. It is not placed in a public music library or sold. Google location scenes are requested live when selected and are not stored for offline use. A user-uploaded panorama is stored with that user's workout.

Service providers and disclosures

We use service providers only as needed to operate BoxWherever, including Amazon Web Services for hosting and operational email, Google Maps Platform for location imagery, Apple’s public iTunes catalog service for search and previews, and Meta for Quest distribution and operating-system services. Their handling of information is governed by their own terms and privacy policies. We may disclose information when required by law, to protect users or the service, or as part of a business transaction subject to appropriate safeguards.

We do not sell personal information, share it for cross-context behavioral advertising, or use third-party advertising trackers.

Cookies

BoxWherever uses essential cookies for sign-in, security, preferences, and attribution of how a visitor reached the site. We do not use advertising cookies.

Retention and security

Account content is retained while your account is active. When you delete a workout, its active files are removed. When you delete your account, account records, workouts, scene uploads, and paired-device credentials are removed from active systems; protected disaster-recovery backups may retain encrypted copies for up to 90 days before aging out. Security and access logs are retained only as reasonably necessary for operations, fraud prevention, legal compliance, and incident investigation.

We use HTTPS, access controls, hashed passwords and device tokens, private per-user storage, release signing, rate limits, and restricted backups. No system can promise absolute security.

Your choices and rights

You can download a machine-readable account export or permanently delete your account from Account. You may also ask to access, correct, delete, restrict, or obtain a copy of personal information, or object to certain processing, by contacting us. Rights vary by location. We may verify your identity before completing a request.

Children

BoxWherever is a general-audience fitness service and is not directed to children under 13. We do not knowingly collect personal information from a child under 13. Users aged 13 through 17 may use the service only with permission and supervision from a parent or legal guardian.

International use and changes

BoxWherever is operated from the United States, so information may be processed there. We will post material policy changes here and update the effective date; when required, we will provide additional notice or request consent.

Contact

Archieboy Holdings, LLC · Email higgins@archieboy.com with “BoxWherever Privacy” in the subject line.