Frequently Asked Questions

BoxOwl is a secure personal data vault and universal autofill tool. It lets you store your info once and fill forms across websites and apps with a single tap. Unlike password managers, BoxOwl handles your full identity: addresses, contacts, work history, preferences, and more.

Vault data is encrypted in transit (TLS 1.3) and at rest. The Android app uses SQLCipher 4.5.4 with transparent 256-bit encryption for the local cache. Payment methods and secure notes are end-to-end encrypted on your device — BoxOwl cannot read those categories. Other categories (identity, addresses, contacts, work history, etc.) are server-readable so they can power autofill, public profiles, and PDaaS APIs you authorize.

BoxOwl ships for Android (APK) and as a Chromium browser extension (Chrome, Edge, Brave, and other Chromium browsers).

Download the APK from our download page, open it on your Android device, and follow the prompts. You may need to allow installs from your browser.

You can delete your account directly from the app: Settings > Delete Account. This triggers a permanent cascade deletion of all your data. Alternatively, email support@boxowl.me and we will verify your identity and delete your data within 48 hours.

did:web is a W3C-standard decentralized identifier that uses your domain name. BoxOwl generates a did:web for every user, giving you a self-sovereign identity that you control — not a corporation. Your DID document is available at boxowl.me/.well-known/did.json and at boxowl.me/did/{yourhandle}.

BoxOwl uses TLS 1.3 in transit, AES-256 at rest, SQLCipher for the local Android cache, and end-to-end encryption for payment methods and secure notes.

Yes. Your vault is cached locally with encrypted storage. You can read and edit data offline. Changes sync automatically when you reconnect using a delta sync protocol that only sends what changed.

The BoxOwl extension detects forms automatically, classifies them (checkout, signup, profile, contact), and fills fields with your vault data. You can also click field-level badges to pick specific values from your vault.

Password managers store credentials. BoxOwl stores your full personal data model: identity, addresses, contacts, work history, preferences, and profiles. It also provides a PDaaS API for developers and built-in did:web identity.

Yes. The free tier isn't a trial. You can use BoxOwl indefinitely without paying. Premium is available for individuals who want customization, unlimited agent tokens, and priority support.

One person subscribes and pays. They invite other household members by email or BoxOwl handle. Each member gets Premium entitlements and access to shared family vaults. Everyone still manages their own personal vault independently.

Your personal vault is private — no one else can see it. Family vaults are shared spaces every member can read and write to, like a shared address book or shared recovery notes.

No — a family member's entitlements come from the family plan. If they already have an individual Premium subscription, they should cancel it before joining the family to avoid double-billing. BoxOwl warns during the invite flow.

All members revert to the free tier. Shared family vault data becomes read-only and is deleted after 30 days. Members should export anything they want to keep before the period ends.

Yes. Upgrade or downgrade between individual, family, and organization plans at any time. Proration is applied automatically.

Credit cards, debit cards, and PayPal through Stripe. ACH is available for Enterprise plans. BoxOwl never stores full card details — payments go through Stripe.

BoxOwl is currently in private beta. Access requires a registration token. Join the waitlist and we'll send tokens on a rolling basis.

Email support@boxowl.me with details. We follow coordinated disclosure and respond within 48 hours.