Privacy policy
Cubby Corner is made by CytechX Corporation (“we”, “us”). This policy explains what the Cubby Corner app and its services collect, why, who can see it, and the choices you have. Questions: privacy@cubbycorner.app.
The short version
- Your household's plans are shared with the members of that household, and with nobody else.
- We don't sell your data, show ads or track you across other apps and websites. There are no advertising or analytics SDKs in the app.
- You can use Cubby Corner on your iPhone without an account. Signing in with Apple is what lets a household share and sync.
- Much of the app runs on your device. Your location stays on your iPhone.
- Crash reports are anonymous and you can turn them off.
- You can delete your account in the app at any time.
What we collect, and why
Account
When you sign in with Apple we receive an Apple user identifier and, if you choose to share it, your email address (which may be an Apple private relay address). We store the name you choose to be known by in your household. We use these to sign you in, to show your name to your household and to contact you about your account.
Household content
Tasks, lists, notes, cubbies, calendar events, meals, photos, videos, voice notes and messages that you add to a shared household are stored on our servers so that every member of that household can see them on their devices. Content you keep personal stays on your device unless a feature says otherwise. Adults-only and personal spaces are limited to the people they are meant for, and those limits are enforced on our servers, not just in the app.
Invitations
If you invite someone by email, we store the address you typed and send them an invitation email on your behalf. We use that address for nothing else.
Reminder emails
If you ask for a reminder by email, we send it to your account's email address at the time you chose.
Reports about messages
If you report a message in household chat, we store the report, the reason and any note you add. The household's owners and admins are notified, and a copy of the report, including an excerpt of the reported message, is emailed to our moderation inbox so that we can act on it.
Problem reports
If you use “Report a problem” (or shake your iPhone to report one), we store your report, any screenshot you choose to attach, the screen it came from, the app version and your account, so that we can fix it. Other owners of your household can read reports filed in that household.
Crash and performance reports
If “Share crash reports” is on (More → Settings → Privacy; on by default), the app sends Apple's MetricKit crash, freeze and performance reports for Cubby Corner. Before a report leaves your device we remove everything except the app version and build, the iOS version, the device model, whether it is a TestFlight build, technical codes and timings, and program locations inside the app's code. Reports are stored without your account, household or device identifiers and are kept for 180 days. Turning the setting off stops sending and deletes any report still waiting on your device.
Connected accounts (optional)
If you connect a Google or Microsoft account to see calendars or mail, we store an encrypted access token so the app can fetch what you asked for, when you ask for it. Suggestions from your mail are worked out on your iPhone. Connecting an account does not share its contents with your household. You can disconnect at any time, which revokes our access. Bank connections are not offered in the current version of the app.
Notifications
If you allow notifications we store your device's push token to deliver them through Apple, and delete it when you sign out.
On your device only
Much of Cubby Corner runs on your iPhone: your local household store, task files, suggestions from mail, text recognition, reading your device calendars (only when you allow it, copying only the events you choose), barcode scanning and place search through Apple Maps.
Location
Place reminders use your iPhone's own region monitoring. The places you pick and your location stay on your iPhone; we never receive your coordinates or where you have been. If you turn on “tell someone when I leave” for a reminder, the only thing sent is a notice to the one household member you chose, with the place's name.
Finding nearby stores. When you tap “Use my location” to find Kroger-family stores for aisles and prices, your location is rounded to about 1 km on our server before it is sent to Kroger, and the store list is cached for 12 hours under that rounded location, not under your account. You can type a ZIP code instead.
Food and product lookups
Barcode and food lookups go from your device to Open Food Facts (openfoodfacts.org). Store product, price and aisle lookups (Kroger) and nutrition facts (USDA FoodData Central) go through our server, which sends the store and the search term without your identity. Results are cached for up to a day, shared across everyone and not linked to you. We keep a short-lived request count per account to prevent abuse.
Who processes data for us
We use service providers who process data only on our instructions:
| Provider | What for |
|---|---|
| Supabase | Database, sign-in, file storage and server functions that hold household data |
| Apple | Sign in with Apple, push notifications, crash reports (MetricKit), Maps place search, the App Store |
| Cloudflare | Our websites, invitation links and account-connection pages |
| Resend | Sending invitation, reminder and moderation emails |
| Kroger, USDA, Open Food Facts | Store, price, aisle, product and nutrition information, without your identity |
| Google, Microsoft | Only if you connect your account with them |
We do not sell or share personal information for cross-context behavioural advertising. We may disclose information if the law requires it, or to protect people's safety.
Who can see what
- Your household: the shared content of households you belong to, and your display name. Roles set by the household control who can create or change things. Adults-only content is not shown to child members.
- Us: we can technically access data stored on our servers. We access it only to run and support the service, to act on reports, for security, or when the law requires it.
- Nobody else, unless you share something yourself.
Keeping and deleting
We keep your data while your account exists. To delete your account, open More → Settings → Account → Delete my account. We delete your account and your Sign in with Apple link, revoke connected accounts and remove you from your households. Households where you are the only person are deleted with your account. In households other people still use, what you already shared stays there, with your name removed. A household that was never shared can be deleted from the app at any time. Anonymous crash reports are kept for 180 days.
Children
Cubby Corner is for households, which can include children, but child members are added and managed by an adult in the household. We do not knowingly let children under 13 (or the age required where you live) create their own account. If you believe a child has given us personal information without a parent's consent, contact us and we will delete it.
Your rights
Depending on where you live, you can ask to access, correct, export or delete your personal information, object to or restrict some processing, and complain to your data protection authority (in the UK, the ICO). Email privacy@cubbycorner.app. We will not treat you differently for exercising these rights.
Security
Data travels encrypted (HTTPS/TLS). Access to household data is checked on our servers for every request. Connected-account tokens are stored encrypted. Report a vulnerability to security@cubbycorner.app.
Changes
If we change this policy we will update the date above and, for significant changes, tell you in the app before they take effect.