Cubbin — Privacy Policy

Last updated: July 9, 2026

Cubbin is a cozy, private space for keeping and sharing small memories with the few people who matter to you. We built it to be calm and personal, and we treat your data the same way. This page explains what Cubbin collects, why, and the choices you have. We do not sell your data, we do not show ads, and we do not use third‑party advertising or tracking.

What we collect

The things you place. Photos, videos, notes, voice recordings, captions, reactions, comments, and the little objects you arrange in a cubby. This is the content of the app — we store it so your cubby exists and so the people you share it with can see it.
A display name and optional avatar you choose, shown to the members of your shared cubbies.
A device identity. Each install creates a random identifier and a secret device credential used to authenticate your requests. We store only a one‑way hash of that credential — never the secret itself. It lives in your device's Keychain.
Location — only for a "Place." If you add a Place object, we use its location. The coordinate we store is deliberately fuzzed for privacy unless you choose more precision, and a Place marked "Only me" keeps its exact location on your device only.
Push token. If you allow notifications, we store an Apple push token so we can tell you about activity in your cubbies.
Basic diagnostics. Aggregate, privacy‑preserving counts (for example, how many devices are active, or security signals used for rate‑limiting). These contain no identifiers and no content.

How we use it

To run the app: store your cubbies and sync them to the people you've shared with.
To authenticate your device so only you can act as you, and to protect cubbies from abuse.
To send the notifications you've opted into.
To keep the service reliable and secure.

We do not use your content to train models, to advertise, or for any purpose beyond running Cubbin for you and the people you share with.

Who can see your content

Content in a cubby is visible to the members of that cubby — the people invited with its code. A solo cubby is yours alone. Cubbin is not public: there is no feed, no discovery, and no way for strangers to browse your cubbies.

Where it's stored

Cubbin's backend runs on Cloudflare (Workers, Durable Objects, and a private media bucket); media is served only through an access‑checked proxy, never a public link. Notifications and beta distribution go through Apple. These providers process data on our behalf to run the service. We don't share your content with anyone else.

Your choices and control

Delete your content. You can remove items you placed; deleted items go to a recovery area for a limited time before they're erased.
Leave or delete a cubby. You control the cubbies you own and the content you added.
Notifications. Turn them on or off any time in iOS Settings.
Location. Optional and only used when you add a Place; you choose the precision.
Delete everything. To delete your data or ask a question, email us (below) and we'll help.

Retention

We keep your content while your cubby is active. Deleted items and closed cubbies have grace periods (typically 30 days, longer for significant or memorialized cubbies) so nothing important is lost by accident, after which they're erased. Aggregate diagnostics are short‑lived.

Security

Requests are authenticated by a device credential (stored only as a hash), traffic is encrypted in transit, media is private and access‑checked on every fetch, and invite codes are high‑entropy and rate‑limited. No system is perfect, but privacy and safety are a core part of how Cubbin is designed.

Children

Cubbin is intended for personal and family use and is not directed to children under 13 for independent account creation. If a family chooses to include a child's memories in a shared cubby, that content is controlled by the adults who share it. If you believe a child has provided us information directly, contact us and we'll remove it.

Changes

If we make meaningful changes to this policy, we'll update the date above and, where appropriate, let you know in the app.

Contact

Questions, requests, or anything privacy‑related: apple.shakable401@passinbox.com.