Privacy policy

What this policy covers

This policy covers the Cubby iPhone app and this website, tuckincubby.com. "Cubby", "we" and "us" mean the independent developer who makes the app. If you have a question about anything here, write to admin@tuckincubby.com.

What Cubby stores

Cubby keeps your data on our servers so that it comes back when you sign in on a new phone. This is what is stored with your account:

• Your account. How you sign in (Apple, Google or an emailed code), the account id we assign, and your email address if your sign-in gives us one. With Sign in with Apple this can be a private relay address.
• Your profile and cub. Your name as you typed it during setup, your cub's name, look and pronoun, your time zone, and when you finished setting up.
• Your setup answers. The answers you gave to the short questionnaire during setup, stored with the questions as you saw them.
• Your schedule and settings. Bedtime, wake-up time, nights off, unlock limit, alarm time limit, alarm sound, your morning missions, alarm mode, commitment settings and your notification choices.
• Your nights. For each night: the date, the schedule it ran on, when your apps locked, when you used Sleep early, how many unlocks you used and when each started and ended, when the alarm was due and first rang, when you woke your cub, and the result: an adventure, a stay at home, a night off, or a night while your subscription had lapsed. We do not store which app an unlock was for.
• Your mornings. Which missions you did each morning, in what order, when you started and finished each, and whether you skipped one. Mission photos and camera images are not stored (see below).
• What you have earned. The plants your cub brought home and the badges you earned, with the night each came from.
• Your subscription status. Whether you subscribe, to which plan, trial and renewal dates, and Apple's transaction id for the subscription, so Cubby knows what you have paid for. Apple takes the payment. We never see your card or your Apple Account details.
• Support reports. If you send a report from Settings → Report error: your message, the reply email you give, your account id, and the app and iOS versions. Nothing else from your phone is attached, and never the names of your apps.
• Emails you send us. If you write to admin@tuckincubby.com, we keep your message and address to answer you.

If you used an earlier version of Cubby, what it stored with your account, such as tasks, journal entries and wind-down tool history, stays with your account until you delete it. The current version does not collect it.

Usage and crash data

The app also sends us information about how it is used and when it goes wrong, so that we can see where setup is confusing, understand how Cubby is used night to night, and fix crashes and bugs. Both kinds are linked to your Cubby account id. Only App Store and TestFlight versions of Cubby send them.

• Usage data. Which setup screens you see, what you tap on each and how long you spend on it; your answers to the setup questionnaire; how you sign in; whether you allowed Screen Time, alarms, the camera and notifications; your schedule settings; how many apps you chose to lock, never which ones; the steps of the subscription screen and whether a purchase or trial went through; and your nightly activity as counts and times, such as unlocks, when you woke your cub and the night's result. It also records when you open the app and which settings you change. Each event carries your device model, iOS version, Cubby version, language and region, and time zone.
• Crash reports. When the app crashes, freezes or hits an error, a report with technical details: where in Cubby's code it happened, your device model, iOS version and Cubby version, your account id, and a short trail of Cubby's own recent steps (event types and status codes). Errors in our server functions are reported the same way. Crash reports do not include screenshots, and they do not include anything you wrote or picked in Cubby.

Usage data and crash reports never include which apps you lock or their names, your cub's name, your name, your email address, or any photo or camera image.

What never leaves your phone

The apps you lock, and anything you do in them. Apple's Screen Time gives Cubby a coded reference for each app that we cannot read, and it stays on your phone. Your Screen Time, alarm, camera and notification permissions also stay on the phone.

Missions that use the camera are checked on your phone. A photo mission looks at one photo to tell whether it shows what you were asked for; an exercise mission watches the front camera to count each repetition. Nothing is recorded, saved or sent. The shake mission reads your phone's motion sensors, also only on the phone.

Cubby cannot see your browsing, your messages or how you use your other apps.

How we use it

We use your data only to run Cubby for you: to keep your cub, schedule and nights in sync and restore them on a new phone, to work out each night's result, your streak, your garden and your badges, to check your subscription, to send your sign-in codes, to answer your questions and fix problems you report, and to keep the service secure. We use usage data and crash reports to understand how Cubby is used, improve it, and find and fix crashes and bugs.

Cubby has no advertising and no tracking. It contains no advertising SDKs, does not track you across other companies' apps or websites, and does not sell your data or share it for advertising. Usage data is never used for advertising.

Cubby is currently offered on the App Store in the United States, Canada, Australia and New Zealand. If you use it from the European Union, the European Economic Area, the United Kingdom or Switzerland anyway: we use your data because it is needed to provide the app you asked for, because we have a legitimate interest in keeping it secure, answering support requests, understanding how the app is used and fixing crashes.

Who handles it

We use a small number of service providers to run Cubby. Each one handles your data only to provide its service to us.

• Supabase stores your account and the data listed above, runs sign-in, and runs the small server functions that delete accounts and receive subscription updates. Your data is encrypted in transit and at rest, and access rules mean each account can read only its own data.
• Apple handles Sign in with Apple, App Store payments and Screen Time on your phone.
• Google handles sign-in if you choose Sign in with Google.
• RevenueCat checks your App Store subscription so Cubby knows what you have paid for. It receives your Cubby account id and your App Store purchase records, never your name or email. It also passes subscription events, such as a trial starting, a renewal or a cancellation, to PostHog under your account id.
• PostHog receives and stores the usage data described above, on its EU Cloud in Frankfurt, Germany.
• Sentry receives and stores crash reports from the app and our server functions, in its EU region in Germany.
• Resend sends the emails with your sign-in codes and delivers support reports to our inbox.
• Microsoft 365 hosts our support inbox, admin@tuckincubby.com.
• Cloudflare hosts this website. Like any web host it processes the technical details of each visit, such as your IP address and browser type, to deliver and protect the site.

This website uses no cookies and no analytics. Its pages load the Nunito typeface from Google Fonts, so your browser asks Google's servers for the font files.

PostHog and Sentry store Cubby's data in the European Union. The other providers may process data in the United States and other countries. Where the law requires it, transfers are covered by safeguards such as the European Commission's standard contractual clauses.

How long we keep it

Your account and everything stored with it are kept for as long as you have an account, and deleted when you delete it.

Usage data is kept for up to 12 months. Crash reports are kept for up to 90 days. Both are then deleted.

Support reports are kept for 12 months and then deleted. Emails to our inbox are kept for as long as we need them to help you; you can ask us to delete them at any time.

Deleted data can remain in routine backups for a short time before those backups are overwritten.

The waitlist

Before Cubby launched, this website had a waitlist. If you joined it, we hold your email address, the version of the page you saw, the advertising details of the link you arrived through, the page that referred you, your approximate country, and a scrambled fingerprint of your IP address that we used to stop spam. We use this only to send you one email when Cubby launches, and then we delete the whole list. The website no longer collects sign-ups and no longer uses the Meta pixel or any other advertising code. To be removed from the list sooner, write to admin@tuckincubby.com.

Deleting your account

Settings → Account → Delete account deletes your account and everything stored with it on our servers: your profile and cub, settings, nights, unlocks, missions, plants, badges, setup answers, subscription status and support reports, and anything kept from an earlier version of Cubby. It also clears Cubby's data from your phone. It cannot be undone.

Deleting your account also deletes your usage data from PostHog. PostHog removes the underlying events in a later batch, so they can take a few days to disappear. Crash reports are not deleted one by one; they are removed within 90 days under Sentry's normal retention.

Deleting your account does not cancel your subscription. Cancel that in iPhone Settings → your name → Subscriptions first.

You can also ask us to delete your account by writing to admin@tuckincubby.com from the email address on the account. We will do it within 30 days.

Your choices and rights

You can see and change most of your data in the app, and delete all of it with Delete account. There is no switch in the app to turn off usage data or crash reports; the only way to stop them is to stop using the app or delete your account. To have the usage data we hold about you deleted without deleting your account, write to admin@tuckincubby.com from the email address on the account and we will delete it. You can also write to us to ask for a copy of your data, to correct it, to delete it, or to object to how we use it. We answer within 30 days, and we may ask you to confirm the request comes from you. We will not treat you differently for asking.

Depending on where you live, you may have further rights under laws such as the GDPR or California's privacy law, and you can complain to your local data protection authority. We do not sell personal information or share it for cross-context behavioral advertising.

Children

Cubby is not directed to children under 13, and we do not knowingly collect personal data from anyone under 13. If you think a child under 13 has an account, write to us and we will delete it.

Changes

If this policy changes in a way that matters, Cubby will tell you in the app before the change takes effect. The date at the top is the last time it changed.

Contact

Write to admin@tuckincubby.com, or use Settings → Report error in the app.