Privacy Policy

Cubi is a private diary of a child's growing up: photos, videos, and a few words about the baby's day, shared inside your family. Cubi is made in Vietnam, for iOS (from iOS 17.0) and Android.

• This policy covers the Cubi app and the cubi.family website.
• Photos and videos are stored and served through cdn.cubi.family.
• If you have a question, write to us at hello@cubi.family.

Cubi keeps only what the diary needs to work. Specifically:

• Your account: email, display name, and how you sign in (Apple, Google, or email and password).
• The baby's profile: name, date of birth, gender (if you choose to add it), an avatar (if any), and the word you call yourself by (mẹ, má, bố, ba…). The baby's age is computed automatically from the date of birth, for example "6 months 12 days".
• What you save: the photos, videos, and the caption with each moment.
• Reactions: the emoji your family taps on a moment (Cubi has no comments).
• Your family circle: the invite labels you set (such as "Grandma"), device name, when each person joined, and when they were last active.
• Device: the push token and the device timezone, used to send notifications and show the right age.
• Notification preferences: which notifications you turn on or off — this is stored on your device.
• Usage and crash data, collected through Firebase, to keep Cubi running smoothly and to fix problems.

A few things we want to say plainly:

• Photos are compressed (long edge 1920px). Cubi does not keep full-resolution originals.
• Location (GPS) data sometimes embedded in a photo is stripped from the image before it is stored and shared. Cubi does not use location for any feature, and there is no map.

Everything Cubi keeps serves one thing: helping your family watch the baby grow.

• Running the diary: saving moments, showing the timeline, computing the baby's age.
• Delivering photos and the widget to the family you invite: the latest photo and the baby's age appear right on the phone's home screen and lock screen, refreshing through the day.
• Sending the notifications you have turned on, such as when there is a new moment.
• Keeping the service stable and fixing problems, through usage and crash data.

Cubi does not use your information for advertising, and Cubi does not sell personal data. There is no public feed here, no strangers, no followers.

Cubi does share some technical data with the partners that run the service: usage statistics, crash reports, and device identifiers are shared with Google Firebase to keep Cubi stable and fix bugs. This is sharing to operate the service, not selling data, and never for advertising.

Cubi processes information only when there is a clear reason:

• To perform our agreement with you — that is, to run the diary you chose to use.
• With your consent — for example, when you turn on notifications. You can withdraw it at any time.
• For Cubi's legitimate interests — keeping the service safe, stable, and improved, balanced against your family's privacy.

Only the family members the diary owner invites can see anything. Nothing is shown publicly.

• The owner opens the diary, saves moments, and invites the family with a 7-character code or a link. Family members join with no sign-up; they view and react only. If they want to keep their place when changing devices, they can upgrade to a full account, entirely optional.
• Each moment has a visibility scope the owner chooses: Everyone in the family, Only some people, or Only me.
• For a truly private moment, choosing Only me keeps it for your eyes only.

Cubi relies on a few trusted partners to run the service. They process data only to help Cubi work, not for their own purposes:

• Supabase — database and authentication, hosted in Singapore (ap-southeast-1).
• Cloudflare R2 — photo and video storage, served through cdn.cubi.family.
• Google Firebase — push notifications (FCM), usage analytics, and crash reporting.
• Apple — Sign in with Apple and push delivery via APNs.
• Google — Sign in with Google.

If you choose Sign in with Apple and use Apple's hide-my-email feature, Cubi receives a private relay address instead of your real email — and that is all we need.

Because Cubi uses the cloud services above, your information may be stored and processed outside Vietnam, for example in Singapore. Wherever it is held, Cubi protects it under this policy.

Cubi keeps your information while your account is active, so the diary is there each time your family opens it.

• The diary owner can delete the account right in the app, under Settings, or by writing to hello@cubi.family.
• When you delete your account, Cubi removes that account along with the photos and videos saved with it. This cannot be undone, so please consider it carefully.
• A family member who joined with an invite code can remove their own access at any time. This only removes their own view; the owner's diary stays intact.
• Some technical data may be retained a little longer where the law requires it or to keep the service safe, then deleted.

Cubi is operated by parents and adults in the family. All information about a child — name, date of birth, photos — is entered and controlled by the parent.

• Cubi is not directed to children under 13 to operate on their own.
• The parent decides what to save and whom to invite, so the parent holds responsibility for what they share.
• To remove a child's information, simply delete that moment, or delete the account as described above.

Cubi's audience is adults (parents and family); it is not an app for children to use on their own. Information about a child is data that the parent — the holder of parental authority — provides and consents to Cubi processing, to keep and share within the family circle. Cubi complies with applicable children's-privacy rules, including COPPA (US) and the GDPR (EU) where they apply. Cubi does not request or encourage children under 13 to create accounts or enter information themselves.

Cubi treats your baby's diary as something private, to be looked after with care.

• All data is encrypted in transit (HTTPS).
• Photos and videos are uploaded through signed, single-use URLs.
• Access to data is controlled per account and per family circle.

Cubi keeps being refined every day. No system is perfectly secure, so we tell you honestly, and we will keep making it sturdier over time.

The diary is yours, and you are always in control of your information.

• Access and correct: you can view and edit the baby's profile and your moments right in the app.
• Delete: you can delete individual moments, or delete the whole account under Settings.
• Withdraw consent: you can turn off notifications at any time under Settings.
• For anything else, write to us at hello@cubi.family and we will help.

Cubi is currently free. A paid tier may be introduced later, and if so we will tell you clearly in advance. Adding a paid tier does not change how Cubi respects your family's privacy.

If anything about privacy is on your mind, or you would like our help with your information, please write to us.

• Email: hello@cubi.family
• Web: cubi.family

Cubi grows alongside the babies it holds, so this policy will sometimes need updating. When there is a meaningful change, we will let you know in the app or by email, and we will always show the new effective date.

• Current effective date: June 9, 2026.