FAQ — InZeWishBox Connect

The master only sees what they create: the actions they post on your account, your balance in their context, the rewards they configure. They see nothing on your phone outside the app: not your photos, not your contacts, not your other apps. InZeWishBox asks for no such permission.

No. Each context is fully separate. The teacher doesn't see your family balance. Your parents don't see your school points. Each context has its own encryption key, its own history. On your dashboard they're just shown one below the other to save you time, but it's purely visual — there's no communication between them.

Because the context master (your parents) enabled the "Other beneficiaries' summary" option in the context settings. You see their balance read-only — you can't do anything to it. It's useful for families who want full transparency. If you'd rather not see it, ask your parents to disable the option on the master side. Same for history.

No. On the dashboard, you only ever see yourself, in each context. Extended visibility (Summary, History) is a separate option, and the dashboard remains personal.

For sync between your device and the master's, yes — they go through a Cloudflare relay. But the server sees no content: everything is end-to-end encrypted with a key only your two devices have. The server only routes opaque bytes.

Ask the master to unpair you — they go to the beneficiary card (you) and tap Unpair this device. Your old phone receives nothing more. When you have a new phone, they generate a new QR for you and you re-pair.

Sync can take a few seconds (local Wi-Fi) or a few minutes (cross-Internet sync via the relay). Pull down on the screen to force a manual refresh. If it still doesn't update, check that your phone and the master's are online.

Depends on the validation mode:

• Trust: yes, the action is created and validated immediately. You can dispute within 48 hours.
• Confirmation required: no, the action waits for you to accept or refuse (auto-accepted after 48 hours without response).

You can tell which mode is used by looking at the action in To validate.

Depends on what the master has configured in your beneficiary card ("Connect permissions" option). Four trust levels possible:

• None (default): you can propose nothing.
• Approval requested: you propose, the master accepts or refuses.
• Disputable: your action is validated immediately, the master can dispute within 48 hours.
• Full trust: your action is validated immediately and stays that way.

If the option is enabled, you'll see a FAB "+ Request an action" or "+ Add an action" on your dashboard.

To make sure you're pairing with the right master and not with someone trying to intercept the QR. The pairing is validated instantly when you scan, but the 4 fingerprint words are then shown — if they don't exactly match the master's, ask them to unpair you and start over. It's rare but possible (a man-in-the-middle attack on the network).

Your InZeWishBox data is encrypted in transit (between devices) and stored locally on your phone. If someone stole your phone and unlocked it, they could see your balance and history — but that's true for all your apps. For more security: lock your phone with a strong PIN + Android encryption (enabled by default since Android 7).