Privacy

As grandkids building for our grandparents, we created Messagebox to be simple, private, and safe for the whole family. Below you'll find our Privacy Policy, Medical & Clinical Disclaimer, and AI Disclaimer.

Privacy Policy

Effective Date: September 14, 2026
Last Updated: September 14, 2026

1. Introduction

Quo Labs, Inc. ("Quo Labs," "we," "us," or "Company") provides Messagebox, a voice-message box for older adults, along with the Messagebox mobile application for iOS, our website and online store at messagebox.co (collectively, the "Services").

We built Messagebox so a family can leave a voice message for a loved one, and hear one back, without a screen or an app on their end.

This Privacy Policy explains how we collect, use, share, and protect your information. By using Messagebox, you agree to these practices. If you don't agree, please don't use our Services.

Our Privacy Commitment: Messages stay between you and the person you paired with. We never sell your data, we never use your voice messages to train AI, and you can delete everything from the app at any time.

2. What Messagebox Is, and What That Means for Your Data

Messagebox is a voice-message service, so unlike a text app, the voice messages themselves are the product. Here is exactly what happens to them.

Voice messages are recorded and stored

When you press the button in the app and speak, your voice is recorded on your phone and sent to our servers, where it is stored so the box can play it. When your loved one presses the button on the box and speaks, their voice is recorded on the box and sent to our servers so you can hear it in the app. Each message is between one and thirty seconds long.

Messages are private to one pair

A box is paired to exactly one account. Messages only ever travel between that account and that box. There is no feed, no directory, no sharing, and no way for anyone else to send messages to your box.

Transcripts are optional

If transcription is turned on, the app shows the words of each message under it. To do this, our server sends the recording to a speech-recognition provider (see Section 6), and the app stores the words on your phone only. We do not keep transcripts on our servers.

What we can and cannot see

We CAN see:

• Account information (email address and first name)
• The name and nickname you give for the person using the box
• Voice messages stored on our servers, and when they were sent and heard
• Box status (online/offline, software version, uptime)
• Technical logs (connection times, errors)
• Store orders and shipping information

We do NOT:

• Listen to your messages in the course of running the service. Staff access to stored messages is restricted to what is needed to fix a problem you report to us.
• Sell your data, ever
• Use your voice messages or transcripts to train AI
• Show ads or use advertising trackers in the app

3. Information We Collect

3.1 Information You Provide

Account Information:

• Email address (used to sign in with a one-time code; there is no password)
• Your first name
• The name and nickname of the person using the box ("Margaret," "Mum")
• Customer support communications

Payment Information (Store Only):

• Billing and shipping addresses
• Credit/debit card information (processed by Shopify Payments; we don't store full card numbers)
• Order history and purchase details

Messages:

• Voice messages you record in the app
• Voice messages recorded on the box by the person using it
• Messages you type in the app, which are turned into speech so the box can play them

3.2 Message Data

Voice Recordings: Stored on our servers, encrypted in transit and at rest, until you unlink the box or delete your account.

Message Information: When each message was sent, how long it is, and whether it has been heard.

Transcripts: Stored on your phone only, if transcription is on. Never stored on our servers.

3.3 Device & Technical Information

Box Data: A hardware identifier, software version, connectivity status, uptime, restart reason, the box's address on your home network (not your Wi-Fi password), and error logs. Your Wi-Fi name and password are stored on the box itself and are never sent to us.

App Usage: The app contains no analytics or advertising software. Our servers keep short-lived request logs that include your device's internet address.

Website & Store: IP address, browser type, pages viewed, products viewed or purchased, and checkout activity, collected by Shopify.

3.4 Third-Party Information

• Shopify: Order data, shopping behavior
• Speech Recognition and Text-to-Speech: Voice messages and typed text, when you use transcription or typed messages (see Section 6)

3.5 What We Do NOT Collect

✗ Location ✗ Contacts ✗ Photos ✗ Social Security Numbers ✗ Full credit card numbers ✗ Health information ✗ Children's data ✗ Genetic data ✗ Religious or political beliefs ✗ Wi-Fi passwords

4. How We Use Your Information

Core Services

• Voice Messages: Store the message you recorded and deliver it to your box; store the message your loved one recorded and deliver it to your phone
• Transcription: If turned on, show the words of each message under it in the app
• Typed Messages: Turn text you type into speech so the box can play it
• Pairing: Connect your account to your box using the word shown on its screen
• Account Management: Create accounts, verify sign-in codes, personalize the app with the names you give us
• Box Health: Keep your box online, deliver software updates, and diagnose problems you report

E-Commerce

Process orders, calculate taxes and shipping, coordinate shipping, handle payments (via Shopify), manage returns and refunds.

Customer Support

Answer questions, troubleshoot issues, help with setup, resolve problems.

Product Improvement

Fix bugs and improve reliability using technical logs and box status. Message content is never used for this.

Marketing (Optional—You Can Opt Out)

Emails about features and updates if you opted in at the store. We never use message content for marketing.

Security & Legal

Verify identity, detect fraud, monitor for intrusions, enforce security, comply with applicable law, respond to legal requests, prevent harm.

What We Do NOT Use Data For

✗ Selling to third parties ✗ Sharing messages with advertisers ✗ Training AI models ✗ Political targeting ✗ Employment screening ✗ Insurance underwriting ✗ Surveillance

5. Data Storage, Security & Retention

What We Store

Voice Messages: On secure cloud servers in the United States, in a private storage bucket. Messages are fetched by the app and the box through time-limited links that expire after one hour.

Account Information: With our authentication provider (see Section 6).

NOT Stored: Transcripts (phone only), Wi-Fi passwords, location.

Security Measures

• Encryption in transit (HTTPS) for every connection between the app, the box, and our servers
• Encryption at rest for stored messages and account data
• Sign-in by emailed one-time code; no passwords to leak
• Each box holds its own secret credential; a reset box cannot reach its old messages
• Secure cloud servers in the US

Retention Periods

• Voice Messages and message information: kept until you unlink the box or delete your account, at which point they are deleted immediately
• Account information: while your account is active; deleted when you delete your account
• Pairing codes: 10 minutes
• Box status and technical logs: while the box is registered; server request logs are kept for a short period by our hosting provider
• Orders: 7 years (legal requirement)

Delete anytime: in the app under Account, or email hello@messagebox.co

6. How We Share Your Information

We do not sell your personal information.

The Person You Paired With

Voice messages you record are delivered to the box you paired with, and messages recorded on that box are delivered to your account. Anyone who can press the button on the box can hear what you sent and can send a message back.

Service Providers

• Authentication (Clerk): Stores your email address, first name, and the names you enter for your loved one, and sends your sign-in codes
• Cloud Hosting and Storage (Vercel, Supabase): Run our servers and store voice messages and box information
• Speech Recognition and Text-to-Speech (ElevenLabs, and Deepgram as a fallback for live captions): Receive voice messages to produce transcripts, receive typed text to produce speech, and receive live microphone audio while you hold the talk button if live captions are on. These providers may retain audio and text for a period under their own policies. We do not permit them to use your data to train their models where their settings allow us to opt out, and we are working to disable retention entirely.
• Payment Processing (Shopify): Secure, PCI-compliant order and payment handling

All are contractually required to protect your data.

Shopify (Store Only)

Processes payments and orders and collects shopping behavior. It may use that data for ads across Shopify. It has NO access to your messages or app data. Learn more: Shopify Privacy Policy

Legal Requirements

We may disclose information when required by subpoenas, court orders, or regulatory requirements.

Business Transfers

If we are acquired or merged, we'll notify you, the acquirer must maintain these protections, and you can delete your data first.

What We NEVER Share

✗ Message content with advertisers ✗ Personal data with data brokers ✗ Anything with anyone for AI training

7. Cookies & Tracking

Website & Store: Essential cookies for login, cart, and security; optional analytics and marketing cookies as described in Shopify's cookie settings on our store. You can manage them in your browser, and we honor Global Privacy Control.

Mobile App: No cookies, no advertising identifiers, no tracking. The app does not ask for permission to track you because it does not.

8. Your Rights & Choices

Access

Every message and transcript is visible in the app. Request a copy of your account information at hello@messagebox.co.

Delete

Delete your account in the app: Account → Delete account. This unlinks your box, deletes every message and recording, and removes your account and the names you entered. It cannot be undone.

Unlink your box in the app: Account → Unlink this box. This deletes every message and recording and returns the box to its pairing screen; your account stays.

You can also email hello@messagebox.co.

May be retained: order records required by law.

Correct

Update your name in the app under Account, or email us.

Transcription

Transcription and live captions can be turned off in the app under Account. When off, no audio is sent to a speech-recognition provider.

Communication Preferences

Marketing emails are optional and you can unsubscribe at any time. Sign-in codes and important service notices are required to run the service.

9. Additional Privacy Rights

Children's Privacy

Messagebox is for adults. We don't knowingly collect data from children under 13. If we learn we have, we delete it immediately. Contact hello@messagebox.co if concerned.

The Person Using the Box

The person using the box does not need an account and may never see this policy. If you set up a box for someone, please tell them that their messages are recorded and stored so you can hear them, and that they can ask you to unlink the box at any time.

International Users

Messagebox operates from the US. If you are outside the US, your information transfers to the US. By using Messagebox, you consent.

European Users (GDPR): Additional rights include: object to processing, restrict processing, data portability, withdraw consent, lodge complaints with a supervisory authority. Transfer protections: Standard Contractual Clauses.

California Rights (CCPA/CPRA)

• Right to Know: What we collect and how we use it
• Right to Delete: Request deletion
• Right to Correct: Request corrections
• Right to Opt-Out: We don't sell information (the store may "share" browsing data for advertising; you can opt out)
• Non-Discrimination: We won't penalize you for exercising rights

Exercise Rights: Email hello@messagebox.co or call (415) 326-6474. Response within 45 days.

10. Data Breach Notification

If a breach occurs affecting your data, we will notify you within 72 hours by email, with details of what happened, what was exposed, the steps we have taken, and what you can do.

11. Changes to This Policy

We may update this policy to reflect law changes, new features, or improved practices. We'll notify you by email, in the app, or on our website. Material changes: 30 days' notice. If you disagree, delete your account before the changes take effect. Continued use means acceptance.

12. Contact Us

General Privacy and Customer Support
Email: hello@messagebox.co
Phone: (415) 326-6474
Mail: Quo Labs, Inc., 2 Marina Blvd, San Francisco, CA 94123

California Privacy Rights
Email: hello@messagebox.co (Subject: "California Privacy Rights")

13. Regulatory Complaints

If we can't resolve your concerns:

• Consumer Protection: FTC, 1-877-FTC-HELP, ftccomplaintassistant.gov
• California: Attorney General, oag.ca.gov
• EU: edpb.europa.eu
• UK: ico.org.uk

14. Consent

By using Messagebox, you acknowledge you've read and understood this Policy, and you consent to:

• Collection and use as described
• Transfer to the United States
• Recording and storage of voice messages sent between your account and your box
• If you turn transcription on, sending voice messages to a speech-recognition provider to produce transcripts

You understand:

• Voice messages are stored on our servers until you unlink the box or delete your account
• Messages are private to your account and your box
• You can withdraw consent and delete your data at any time

Withdraw by: turning off transcription, unlinking your box, deleting your account, or contacting hello@messagebox.co.

Our Promise to You

We built Messagebox for our grandparents, and for yours.

A voice message from someone you love is a small, precious thing. We keep it between the two of you: no ads, no selling, no training AI on your family's voices, and a delete button that really deletes.

If anything is unclear, email hello@messagebox.co. We're here to help.

This Privacy Policy is effective as of September 14, 2026.

Medical & Clinical Disclaimer

Messagebox is a voice-message device designed to help families stay connected. Messagebox is not a medical device, clinical tool, diagnostic instrument, or healthcare provider.

Messagebox does not and cannot:

• Provide medical advice, diagnosis, or treatment
• Replace a physician, nurse, therapist, or any licensed healthcare professional
• Monitor vital signs, detect medical emergencies, or assess physical or mental health conditions
• Prescribe, recommend, or manage medications
• Serve as a clinical decision-support system or an emergency alert system

If your loved one is experiencing a medical emergency, call 911 (or your local emergency number) immediately. Do not rely on Messagebox or any consumer device in place of emergency medical services. A message left on a Messagebox is not guaranteed to be heard.

Health data handling

If health-related topics come up in messages, that content is protected under our Privacy Policy. However, Messagebox is not designed to collect, store, or act on health information in a clinical capacity.

Limitation of liability

Quo Labs, Inc. makes no warranties, express or implied, regarding the timely delivery or playback of any message. Quo Labs is not liable for any harm, injury, or adverse outcome resulting from reliance on Messagebox for time-sensitive, medical, or emergency communication.

Always consult a qualified healthcare professional for any medical questions or concerns about your loved one's health.

This Medical & Clinical Disclaimer is effective as of September 14, 2026.

Artificial Intelligence Disclaimer

Messagebox uses artificial intelligence (AI) for two optional features: turning voice messages into written transcripts, and turning typed messages into speech. This section explains what that means for you and your family.

How Messagebox uses AI

• Transcription: Speech-recognition AI produces the words shown under each message in the app, and live captions while you hold the talk button
• Typed messages: Text-to-speech AI turns a message you type into a spoken voice the box can play

Messagebox does not use AI to analyze, summarize, monitor, or make decisions about your conversations. The voice messages themselves are real recordings of real people.

AI limitations

Like all AI systems, these features have inherent limitations. Transcripts may occasionally:

• Misunderstand speech, especially in noisy rooms, with strong accents, or with quiet voices
• Get names, numbers, or medications wrong
• Miss words or add words that were not said

The recording is always the source of truth. Transcripts should not be treated as accurate or authoritative, including for medical, legal, or financial matters. Listen to the message.

Third-party AI services

Messagebox uses third-party providers (ElevenLabs, and Deepgram as a fallback) to deliver transcription and text-to-speech. These providers process audio and text in accordance with our Privacy Policy and are contractually required to protect your information. Audio sent to these services is encrypted in transit. You can turn transcription off in the app under Account, and no audio is sent to them when it is off.

AI training and your data

We do not use your voice messages, transcripts, or any personal data to train AI models, and we do not permit our providers to do so where their settings allow us to opt out.

Limitation of liability

Quo Labs, Inc. is not liable for any actions taken or decisions made based on AI-generated transcripts or speech. Users and families assume all responsibility for how they interpret and act on transcribed content.

This AI Disclaimer is effective as of September 14, 2026.

Our Commitment to Your Family

Thank you for trusting us with your loved one's voice.

Every policy on this page exists because we believe your family deserves transparency, protection, and peace of mind.

Questions or concerns? Reach out anytime at hello@messagebox.co. We're always here.