Terms & Conditions – App Usage & Data Security

Effective Date: August 23, 2025

Product Name: Black Box

Company: Click4Kart Tech Private Limited

Support Contact: support@click4kart.com

1. Introduction

Black Box is a mobile application developed by Click4Kart Tech Private Limited. This Privacy Policy outlines how we collect, use, protect, and manage your data. By using Black Box, you agree to this policy.

2. Information We Collect

• Personal Info: Name and Mobile Number (used only for OTP verification)
• Device Data: With your consent, we access Contacts, Images, Documents, and Notes for backup purposes.

3. Purpose of Data Collection

• To verify user identity via mobile number and OTP
• To enable encrypted data backup services
• To allow data restoration on any device after login

4. Data Encryption and Security

Black Box uses industry-standard security practices to protect your information.

• Encryption in Transit: All data transferred between your device and our servers is encrypted using HTTPS/TLS 1.2+, preventing interception during transmission.
• Encryption at Rest: All backups stored on our servers are encrypted using AES-256, one of the strongest encryption standards in the industry.
• Key Management: The encryption keys are securely managed within our infrastructure and are never accessible to unauthorized parties, including our internal team. This ensures that while we store your backups for restoration purposes, we cannot read or misuse your actual data in a human-readable form.

⚠️ Important Note on End-to-End Encryption (E2EE): In strict technical terms, true end-to-end encryption means that only the user controls the encryption keys and the service provider cannot decrypt data at all. Currently, Black Box provides encryption in transit and at rest that meets Google Play’s data security requirements, but the encryption keys are managed by our secure servers. If in the future we implement user-controlled keys to enable strict end-to-end encryption, this Privacy Policy will be updated accordingly.

5. Auto Backup Functionality

Auto-backup starts after the user grants permission. Users can disable this feature anytime within app settings. Only the selected data (Contacts, Photos, Documents, Notes) is backed up securely.

6. Data Recovery

If a user's device is lost, broken, or reset, they can reinstall the app on another device and restore data using their mobile number and OTP. No password or email is required.

7. Data Retention & Deletion Policy

7.1 Uninstalling the App

Uninstalling the Black Box app does not delete your backed-up data. The data remains securely encrypted on our servers and can be restored when you reinstall and log in again.

7.2 Account Deletion Request

If a user requests account deletion through the app or by contacting our support:

• The account is marked for deletion.
• The user’s data is retained for a 30-day grace period.
• During this period, data can be recovered by logging in again.
• After 30 days, the data is permanently deleted and cannot be recovered.

7.3 Device Loss or Change

If your phone is lost or damaged, your data remains secure. You can recover your backups anytime by installing Black Box on a new device and logging in with your registered mobile number.

8. User Rights

• Access your stored data
• Delete specific items or the full backup
• Disable auto-backup at any time
• Request full account and data deletion

9. Permissions Required

We ask for access only when needed, and solely for backup services:

• Contacts
• Photos & Media
• Documents
• Phone State (for basic app functionality)

Permissions are requested only when you enable the related feature (runtime permissions). We will never access data without your explicit consent, and each permission request will be accompanied by a clear explanation inside the app.

10. Data Sharing Policy

We never sell or rent your data. We only disclose your information when required by law or in response to lawful requests by public authorities (e.g., a court or a government agency).

11. Children's Privacy

Our Service is not directed to children under the age of 13 (or under 16 in certain jurisdictions where a higher age of consent applies). We do not knowingly collect data from children. If we become aware that a child has provided personal information, we immediately delete such data in compliance with Google Play Families Policy and applicable law.

12. Changes to This Policy

We may update this policy occasionally. We encourage users to check this page regularly. Continued use of the app after changes implies your agreement to the updated policy.

13. Third-Party Infrastructure

We use trusted third-party cloud services to host your data. All such providers are bound by strict data security and confidentiality agreements. They cannot access or misuse your content.

14. Limitation of Liability

Click4Kart Tech Private Limited shall not be liable for:

• User-side errors, such as device misuse or data deletion
• Unauthorized access due to compromised credentials
• Service interruptions caused by maintenance or technical failures
• Indirect damages such as data corruption, loss of profit, or business interruption
• Losses due to force majeure events (natural disasters, network outages, government restrictions)

By using our app, you acknowledge that you do so at your own risk and accept these limitations.

15. User Responsibilities

Users agree to use Black Box only for lawful purposes. You must not:

• Upload or store illegal, harmful, or abusive content
• Attempt to hack, reverse-engineer, or disrupt the app
• Share your account with unauthorized persons

16. Intellectual Property

All content, trademarks, and logos associated with Black Box are the intellectual property of Click4Kart Tech Private Limited. You may not copy, modify, or distribute our app or branding without prior written permission.

17. Account Suspension & Termination

We reserve the right to suspend or terminate accounts that violate these Terms & Conditions, misuse app services, or engage in illegal activity. In case of termination, backed-up data may be deleted as per our Data Retention Policy.

18. Jurisdiction

This policy and any dispute arising from it shall be governed by the laws of India. Any legal proceedings shall be under the jurisdiction of courts located in your operating city Delhi.

19. Grievance Officer / Contact

For any questions, concerns, or complaints regarding your data, please contact our Grievance Officer at:

Grievance Officer: Aaditya Kumar Tyagi
Designation: Data Protection & Compliance Officer
Email: support@click4kart.com
WhatsApp: +91 8447222999
Company: Click4Kart Tech Private Limited