PRIVACY POLICY

Effective Date: 9/1/2026
Last Updated: 9/1/2026

Flixbox Studios  ("we," "us," or "our") operates the website located at flixboxstudios.com (collectively, the "Service").

This Privacy Policy explains how we collect, use, store, disclose, and protect information when you use our Service.

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy.

1. Information We Collect

Depending on how you use the Service, we may collect the following categories of information.

A. Information You Provide

You may provide information such as:

• Full name

• Email address

• Phone number

• Username and password

• Company or organization name

• Business address

• Profile information

• Employee information

• Information submitted through forms

• Information contained in uploaded files, images, or documents

• Customer support messages and communications

• Other information you voluntarily provide through the Service

We only request information that is reasonably necessary for the functionality of the Service.

B. Automatically Collected Information

When you use the Service, certain information may be collected automatically, including:

• IP address

• Device type

• Operating system

• Browser type

• App version

• Device identifiers

• Language and timezone

• Date and time of access

• Pages or features accessed

• General usage and interaction information

• Diagnostic and error information

C. Location Information

If a feature of the Service requires location information and you grant permission, we may collect location information such as:

• Approximate location

• GPS coordinates

• Location associated with a clock-in or clock-out event

• Location associated with a transaction or activity

Location collection will only occur when permitted by your device settings and applicable law.

You may disable location permissions through your device settings. However, doing so may prevent certain features from functioning properly.

D. Camera, Microphone, and Other Device Permissions

Certain features may require access to device hardware or services, including:

• Camera

• Microphone

• Photos or media

• Files and documents

• Bluetooth

• Notifications

• Location services

We will only request permissions that are necessary for the applicable feature.

2. How We Use Your Information

We may use collected information to:

• Create and manage user accounts

• Provide and operate the Service

• Authenticate users

• Process transactions or requests

• Provide requested features

• Maintain employee or company records

• Process clock-in and clock-out records

• Synchronize data

• Provide customer support

• Communicate with users

• Send service-related notifications

• Improve the Service

• Monitor system performance

• Detect and prevent fraud, abuse, and unauthorized activity

• Troubleshoot technical problems

• Maintain security

• Comply with applicable laws and regulations

• Enforce our Terms of Service

• Develop new features and services

We will not use your personal information for purposes materially different from those described in this Privacy Policy without appropriate notice or consent where required by law.

3. Legal Basis for Processing

Where applicable, we process personal information based on one or more of the following:

• Your consent

• Performance of a contract with you

• Compliance with legal obligations

• Our legitimate business interests

• Protection of the rights, safety, and security of users and others

Where processing is based on consent, you may withdraw your consent where permitted by law.

4. Account Information

If you create an account, you are responsible for keeping your login credentials confidential.

You should notify us promptly if you believe that your account has been accessed without authorization.

We may retain account information for as long as your account remains active or as reasonably necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

5. Employee and Business Information

If the Service is used by a company or organization to manage employees, the company may provide information about its employees to the Service.

Such information may include:

• Employee name

• Employee identification number

• Contact information

• Position or department

• Work schedule

• Attendance records

• Clock-in and clock-out records

• Location information associated with attendance events

• Other employment-related information submitted by the organization

In these circumstances, the organization may be responsible for determining how employee information is collected and used.

Employees should contact their employer regarding questions about the employer's use of their personal information.

6. Biometric Information

[IF APPLICABLE — KEEP THIS SECTION ONLY IF YOUR APP COLLECTS BIOMETRIC DATA]

Certain features of the Service may involve biometric information, such as facial recognition, fingerprint information, or other biometric identifiers.

Where biometric information is collected, we will:

• Collect it only for specified purposes;

• Use it only as reasonably necessary for the applicable feature;

• Apply appropriate security measures;

• Not sell biometric information;

• Not use biometric information for unrelated advertising purposes; and

• Retain or delete biometric information according to applicable law and the applicable service configuration.

Where required by law, we will obtain appropriate consent before collecting biometric information.

7. Offline Data and Synchronization

[IF APPLICABLE]

Certain features may continue to operate when the device is offline.

Information generated while offline may be temporarily stored on the device and synchronized with our servers when an internet connection becomes available.

Users should understand that information stored locally on a device may be accessible to anyone who has unauthorized access to that device.

We recommend using appropriate device security, including passwords, PINs, biometric device authentication, and current operating-system security updates.

8. Cookies and Similar Technologies

Our website and web applications may use cookies, local storage, pixels, analytics technologies, and similar technologies.

These technologies may be used to:

• Keep users signed in

• Remember preferences

• Maintain sessions

• Analyze website usage

• Improve performance

• Understand how users interact with the Service

• Provide security

• Measure advertising effectiveness, where applicable

You may be able to control cookies through your browser settings.

Some features may not function correctly if certain cookies or storage technologies are disabled.

9. Analytics

We may use third-party analytics services to understand how users interact with the Service.

These services may collect information such as device information, usage information, IP address, and interaction data.

[LIST ANALYTICS PROVIDERS HERE, IF ANY.]

Examples may include:

• Google Analytics

• Firebase Analytics

• [OTHER PROVIDER]

The use of these services is subject to their respective privacy policies.

10. Advertising

[IF APPLICABLE]

We may display advertisements through third-party advertising providers.

Advertising providers may collect information about your device, application usage, and interactions with advertisements in accordance with their own policies.

Where required, we will provide appropriate consent mechanisms and controls for personalized advertising.

[LIST ADVERTISING PROVIDERS HERE.]

11. Payments

[IF APPLICABLE]

If the Service allows users to purchase subscriptions, products, credits, or other services, payment information may be processed by third-party payment providers.

We generally do not store complete payment-card information on our own servers unless specifically stated otherwise.

Payment providers may include:

• [PAYMENT PROVIDER]

• [PAYMENT PROVIDER]

Payment processing is subject to the applicable provider's terms and privacy policy.

12. Third-Party Services

We may use third-party companies and service providers to operate and improve the Service.

These providers may include services for:

• Cloud hosting

• Database storage

• Authentication

• Analytics

• Payments

• Email delivery

• Push notifications

• File storage

• Customer support

• Advertising

• Security

• Error monitoring

Examples include:

• [BASE44]

• [SUPABASE]

• [GOOGLE]

• [AWS]

• [CLOUDFLARE]

• [STRIPE]

• [OTHER PROVIDERS]

Third-party providers may process information on our behalf and are expected to handle information in accordance with applicable agreements and laws.

13. Information Sharing

We do not sell your personal information for money.

We may share information in the following circumstances:

Service Providers

We may share information with trusted service providers that help us operate the Service.

Business Customers

If you use the Service through an organization, information may be accessible to authorized administrators of that organization.

Legal Requirements

We may disclose information if required to do so by law, regulation, court order, governmental request, or legal process.

Protection of Rights

We may disclose information when reasonably necessary to protect our rights, property, users, employees, or the security of the Service.

Business Transfers

If we are involved in a merger, acquisition, restructuring, financing, sale of assets, or similar transaction, personal information may be transferred as part of that transaction.

14. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required by law.

Retention periods may depend on:

• The type of information

• The purpose for which it was collected

• Whether the user's account remains active

• Legal and regulatory requirements

• Dispute resolution requirements

• Security and fraud prevention requirements

When information is no longer required, we may delete, anonymize, or securely dispose of it.

15. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information from:

• Unauthorized access

• Unauthorized disclosure

• Alteration

• Loss

• Destruction

• Misuse

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Therefore, we cannot guarantee absolute security of your information.

16. International Data Transfers

Your information may be processed or stored in countries other than the country where you live.

These countries may have data-protection laws that differ from those in your jurisdiction.

Where required, we will take appropriate measures to protect personal information when it is transferred internationally.

17. Children's Privacy

The Service is not intended for children under the age of [13/16/18], unless specifically stated otherwise.

We do not knowingly collect personal information from children in violation of applicable law.

If you believe that a child has provided personal information to us without appropriate authorization, please contact us so that we can take appropriate action.

18. Your Privacy Rights

Depending on your location and applicable law, you may have rights including:

• Right to access your personal information

• Right to correct inaccurate information

• Right to request deletion

• Right to request restriction of processing

• Right to object to certain processing

• Right to withdraw consent

• Right to data portability

• Right to opt out of certain marketing or personalized advertising

• Right to lodge a complaint with a relevant privacy regulator

To exercise your rights, contact us using the information provided below.

We may need to verify your identity before completing certain requests.

19. Philippines Privacy Rights

[KEEP THIS SECTION IF YOUR SERVICE OPERATES IN THE PHILIPPINES.]

If applicable, personal information may be processed in accordance with the Philippines Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

Subject to applicable law, data subjects may have rights including the right to:

• Be informed

• Access personal information

• Correct inaccurate information

• Object to processing

• Request deletion or blocking where legally applicable

• Data portability

• File a complaint with the National Privacy Commission

For more information regarding Philippine data privacy requirements, users may consult the official National Privacy Commission.

20. California Privacy Rights

[KEEP ONLY IF APPLICABLE.]

If you are a California resident, you may have additional rights under applicable California privacy laws.

These may include rights relating to:

• Access

• Deletion

• Correction

• Opt-out of certain data sharing or targeted advertising

• Limitation of certain uses of sensitive personal information

To exercise applicable rights, contact us using the information below.

21. European Economic Area, United Kingdom, and Other Jurisdictions

[KEEP ONLY IF APPLICABLE.]

If you are located in the European Economic Area, United Kingdom, or another jurisdiction with applicable data-protection laws, you may have additional rights concerning your personal information.

Where applicable, we will process personal information in accordance with applicable privacy legislation, including the GDPR and/or UK GDPR.

22. Third-Party Links

The Service may contain links to third-party websites, applications, or services.

We are not responsible for the privacy practices, content, or security of third-party services.

We recommend reviewing the privacy policy of any third-party service before providing personal information.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When we make changes, we will update the "Last Updated" date at the top of this Privacy Policy.

If we make material changes, we may provide additional notice through the Service, email, or other appropriate means where required by law.

Your continued use of the Service after the updated Privacy Policy becomes effective means that you acknowledge the updated policy.

24. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

Company: [COMPANY NAME]
Website: [WEBSITE URL]
Email: [PRIVACY EMAIL ADDRESS]
Address: [BUSINESS ADDRESS]
Data Protection Officer / Privacy Officer: [NAME OR TITLE, IF APPLICABLE]

25. Consent

By using the Service, you acknowledge that you have read and understood this Privacy Policy and, where consent is legally required, provide consent to the collection and processing of your personal information as described herein.

Effective Date: [DATE]

Last Updated: [DATE]