TrimBox Privacy Policy
Effective date: November 1, 2026 · Policy version 0.9.1
This policy applies to TrimBox (Korean name 트림박스, package name com.sugarmount.trimbox), an Android simulator for packing camping gear into a car trunk, published by simpest under the developer name SugarMount (“we”, “us”). It describes, based on the app's design and implementation, what data the app handles and what it does not.
1. Summary
The app does not collect your name, email, phone number, precise location, contacts or photos, and there is no sign-up, sign-in or payment. From version 0.9.1 the app shows Google AdMob ads (app open ads, and rewarded ads that play only when you choose them), and the ads SDK sends data such as the advertising ID and IP address to Google (section 2). Only the ads SDK uses the internet; your packing layouts and their names never leave the device. We run no server and use no usage analytics or crash reporting SDK.
| Data | How it is handled | Handled by |
|---|---|---|
| Packing layouts (item names, sizes, positions and rotation, vehicle, second-row seat position) and the names you give them | Stored only in the app's storage on your phone. Never sent off the device and never put into ad requests. | Your device |
| App settings (display language, whether you have seen the first-run guide), ad pacing records, ad consent status | Stored only in the app's storage on your phone. | Your device |
| Ad-related data (advertising ID and app set ID, approximate location derived from the IP address, app interactions, diagnostics) | Collected by the ads SDK under Google's policies and shared with Google for advertising, analytics and fraud prevention. Where required, you can choose on the consent screen (UMP) (section 2). | |
| Error log (up to the latest 50 entries) | Technical details of app errors only, kept on your phone. Nothing you typed, such as layout names, goes into it. It leaves the device only if you choose to include it in a feedback email (section 5). | Your device |
| Images you share or save, layout files you export | Created only when you tap the button, and handed to the app or location you pick (section 4). | The app or location you pick |
| Feedback and support emails | We receive them only when you send one from your mail app. | Us |
| Precise location (GPS), contacts, photos, account information | Not collected. | — |
2. Internet use and ads
The internet is used for ads only
- From version 0.9.1 the app has the INTERNET permission. Only the Google Mobile Ads SDK uses it, to load ads and show the ad consent screen.
- Trunk shapes, the gear list, auto-packing and the “Will it fit?” verdict are all built into the app and computed on your device. The app works without an internet connection; only ads are not shown then.
- We run no server. There is no account, sign-in or payment, and no usage analytics (such as Google Analytics) or crash reporting (such as Crashlytics) library.
- When you tap the privacy policy link in the app, your phone's browser opens this page. That connection is made by the browser.
Ad formats
The app shows ads with Google AdMob (Google Mobile Ads SDK). It uses no mediation (no other ad networks). Ads appear only in these two formats:
- An app open ad that may appear when you return to the app after being away for a while
- Rewarded ads that play only when you choose them (watch an ad to make a loading-order card image)
Ad content is limited to the PG rating.
Data the ads SDK collects and shares
To show ads, measure their performance and prevent fraud, the ads SDK automatically collects the following data under Google's policies, and shares it with Google for advertising, analytics and fraud prevention. Data is encrypted in transit (TLS).
- Device or other IDs: the Android advertising ID, the app set ID and other device identifiers
- Approximate location: the IP address, which may be used to estimate the device's general location (country or region). The app requests no location permission, so precise location such as GPS is not available to the ads SDK.
- App activity (app interactions): app launches and interactions with ads such as impressions, taps and video views
- App info and performance (diagnostics): launch time, hangs, errors and performance of the app and the ads SDK
Google collects and processes this data; we have no direct access to it. Your packing layouts, layout names and gear lists are never put into ad requests. For the exact data and purposes, please see Google's information:
- Google Privacy Policy
- How Google uses information from sites or apps that use its services
- Google Mobile Ads SDK data disclosure
Consent and changing your choices
- The app uses Google's User Messaging Platform (UMP). Where the law requires it (the European Economic Area, the UK and Switzerland), it shows an ad privacy consent screen before loading ads. You can use the app without consenting.
- Where consent is required, Privacy options appears on the app info screen, and you can change your consent choices there at any time. It does not appear where it is not required.
- In Android Settings under Google > Ads (or Privacy > Ads), you can reset or delete your advertising ID. Once deleted, it is not used for personalized ads.
- Rewarded ads play only when you tap the button. If you don't, no rewarded ad is shown.
3. Data stored on your device
- Auto-save: the layout you are working on, shown again when you reopen the app.
- Named layouts: layouts you saved under a name, with the time saved, the vehicle and the number of items. You can delete them one by one on the load screen. A layout holds up to 64 items.
- App settings: display language (system, Korean or English) and whether you have seen the first-run guide.
- Ad records: so that ads do not appear too often, the time an ad was last shown, the number of ads watched today and the number of times the app has been opened, as plain numbers. Your ad consent status is stored on the device by Google UMP.
- Error log: section 5.
- This data lives in Android's app-private storage (SharedPreferences), which other apps cannot read. It is deleted when you uninstall the app or clear its data in Android settings.
4. What leaves the device only when you tap it
Each of these happens only when you tap a button, and goes through Android's share sheet, file picker or your mail app. What the receiving app or service does with it is governed by its own policy.
- Share image: an image of the trunk view (screenshot), or a share card with the fill rate and gear list, is created and handed to the app you pick in the Android share sheet, together with a short text listing the vehicle, the fill rate and each item's name and size. The temporary file sits in the app's private cache folder, and files older than 10 minutes are removed the next time you share or save an image.
- Save image: on Android 10 and later, saved as a new image file in your photo storage (Pictures/TrimBox), with no storage permission; the app does not read your other photos. On Android 7 to 9 the share sheet opens instead of asking for a permission.
- Export and import layouts: layouts (vehicle, second-row seat position, item names, sizes and positions) are saved or opened as JSON files through Android's system file picker. You choose where to save and which file to open, and the app can access only that one file. Files larger than 2 MB are not opened.
- Feedback email: tapping “Send feedback” on the app info screen opens your mail app with the recipient (sugarmount21@gmail.com), a subject (app name and version, device model and Android API level) and diagnostics in the body (app version, device model and Android API level, app display language, and the number of items on screen) filled in. Item names and layout names are not included. The error log is added only if you turn on “Attach error log” (off by default, section 5), and nothing is sent until you tap send in your mail app. The “Request a vehicle” email works the same way, with only the recipient, a subject and a short prompt filled in.
- If there is no mail app: the app copies our email address to your phone's clipboard and, if you ask, the subject and body too. The clipboard is not sent anywhere.
- Open Google Play: opens this app's store page in the Google Play app (or the browser if Play is missing), for example to rate the app.
5. Error log
- When an error occurs, the app keeps the technical details needed to fix it (error type, the first line of the error message, the top lines of the stack trace that point to the code location, the time in UTC and how many times the same error repeated) in the app's storage on your phone. Only the latest 50 entries are kept; older ones are deleted.
- So that nothing you typed, such as layout names, ends up in the log, text in quotes, words that look like file paths, addresses or email addresses, words with non-English letters (such as Korean) and numbers of five or more digits are masked with “…” before saving.
- The error log is never sent automatically. It goes into the body of a feedback email, with the app version, build type and app display language (up to 8,000 characters), only if you turn on “Attach error log”, and you can review or delete it in your mail app before sending.
6. Android backup
If Google backup is turned on on your phone, Android may back up this app's stored data (section 3) to your Google account and restore it on a new device. This is a feature of Android and your Google account; we cannot receive or see the backed-up data. You can turn backup off in your phone's settings.
7. Permissions
The app asks you for no permissions. The permissions below are granted at install time, without a prompt.
| Permission | Purpose |
|---|---|
| Internet (INTERNET), network state (ACCESS_NETWORK_STATE) | Used by the ads SDK to load ads and show the ad consent screen. No other part of the app uses the internet. |
| Advertising ID (com.google.android.gms.permission.AD_ID) | Lets the ads SDK read the advertising ID for ads and ad measurement. Not used once you delete the advertising ID in Android Settings. |
| Android ad services APIs (ACCESS_ADSERVICES_AD_ID, ACCESS_ADSERVICES_ATTRIBUTION, ACCESS_ADSERVICES_TOPICS) | Added by the ads SDK to show and measure ads through Android's privacy-preserving ad APIs (Privacy Sandbox). They give no access to your photos, files, location or contacts. |
| Prevent sleep (WAKE_LOCK), foreground service (FOREGROUND_SERVICE) | Added by AndroidX WorkManager, which the ads SDK uses, to let short background tasks finish. They show no notification and give no access to your data. |
com.sugarmount.trimbox.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION | Added automatically by the AndroidX library so that other apps cannot send signals meant for this app's own components. Only this app uses it, and it gives no access to data on your device. |
The app does not declare location, contacts, camera, microphone, photo, media or storage permissions. Saving images and exporting files use Android system features (photo storage, the system file picker) that need no permission.
8. Sharing with third parties, processors and transfers abroad
We run no server, and your packing layouts and their names are never transferred. The ads SDK sends the data in section 2 to Google, which may process and store it outside Korea (in the United States and other countries where Google has data centers).
| Recipient | Data transferred | Purpose | When and how | Retention |
|---|---|---|---|---|
| Google LLC (Google AdMob, User Messaging Platform) | Device identifiers such as the advertising ID and app set ID, IP address, app and ad interactions, diagnostics, ad consent choices (section 2) | Showing and measuring ads, analytics, fraud prevention, managing ad consent | Sent over an encrypted connection (HTTPS) when ads load or the consent screen is shown | Under Google's policies |
If you do not want ad data to be transferred, delete your advertising ID in Android Settings, or stop using and uninstall the app. What you share or email is handled by the apps and services you choose. Feedback emails we receive are kept in our Gmail (Google) mailbox.
Of the components in the app, Flutter and shared_preferences run on your device only; only google_mobile_ads (the Google Mobile Ads SDK and UMP) communicates with Google as described above. License notices are on the app info screen.
9. Retention and deletion
| Data | Retention | How to delete |
|---|---|---|
| Auto-saved and named layouts | On your device only, until you delete them | Delete on the load screen, clear app data, uninstall |
| App settings, ad records, ad consent status | On your device only | Clear app data, uninstall. Where consent is required, change your ad consent in Privacy options on the app info screen. |
| Error log | On your device, latest 50 entries | Oldest deleted automatically; clear app data, uninstall |
| Temporary share images | Briefly, in the app's private cache folder | Files older than 10 minutes are deleted automatically on the next share or save; clear app data, uninstall |
| Saved images, exported layout files | Wherever you chose | Delete them yourself in your gallery or files app. |
| Ad-related data | Under Google's policies | Reset or delete your advertising ID in Android Settings. Where consent is required, change your choices in Privacy options on the app info screen. |
| Feedback and support emails you send us | Kept in our mailbox as long as needed to answer and handle your request | Ask us to delete them at the contact below. |
Data whose retention period has ended or whose purpose has been met is destroyed without delay in a way that cannot be recovered.
10. Your rights
- You can delete the layouts stored on your device in the app, or all of them by clearing app data or uninstalling. We do not hold this data.
- You can reset or delete your advertising ID in Android Settings.
- Where consent is required, you can make your ad consent choices again at any time in Privacy options on the app info screen.
- You never have to watch a rewarded ad; it plays only if you tap the button.
- You can ask us to access, correct, delete or stop processing emails you sent us, at the contact below. For data Google controls, such as ad data, we will point you to Google's procedures.
11. Children's privacy
The app is meant for adults, and its target age group on Google Play is 18 and over. It is not directed at children and does not collect age information. If you learn that a child under 14 has emailed us, or if you are a parent or legal guardian requesting deletion, please contact us below. We will delete what we can verify without delay.
12. Changes to this policy
If the way the app handles data changes, we update this page, its policy version and its effective date. If we add a feature that sends new data off your device, or a new ad format, we will update this policy before releasing that version.
Change history
- v0.9.0 → v0.9.1: added Google AdMob ads (app open ads, rewarded ads), ad consent (UMP), and the internet, network state and advertising ID permissions
13. Contact and privacy officer
For questions about data handling, or to request access, correction, deletion or suspension of processing, please email us.
- Developer: simpest (SugarMount)
- Privacy officer: Simpest
- Email: sugarmount21@gmail.com
- App page: https://sugarmount21.com/en/apps/trimbox/
Users in Korea can also report or seek advice on privacy violations to the Personal Information Infringement Report Center (privacy.kisa.or.kr, 118 in Korea) or the Personal Information Dispute Mediation Committee (www.kopico.go.kr).
Effective date: November 1, 2026 · Policy version 0.9.1