Cubby Privacy Policy
Effective October 25, 2026
Cubby helps parents keep track of school emails, deadlines, forms and events for their kids. This policy explains what information Cubby uses, why, who helps us process it, and the choices you have. Cubby is built for parents and guardians, not for children.
Information you give us
- Family details: your name, your kids' names, grades and schools, and other caregivers you invite.
- Email account connection: when you connect Gmail or Outlook, you sign in with Google or Microsoft and grant Cubby permission to read your messages. We never see your email password.
- School website logins (optional): if you connect a school or activity portal, you enter that site's username and password.
- Your edits: to-dos, notes, dismissed items and settings.
How Cubby uses your information
- To find school, activity and health related emails and pull out dates, deadlines, forms, payments and to-dos for each child.
- To show your Today view, calendar, reminders and morning digest.
- To answer your questions in Ask Cubby using your saved items.
- To check your sent replies so finished to-dos can be marked done (you can turn this off).
We do not sell your information, show ads, or use your information to track you across other apps or websites.
Where your information is stored
- On your iPhone: your family details, to-dos, events, settings and a copy of recent emails Cubby has read. School website passwords are stored in the iPhone Keychain.
- On Cubby's servers (Cloudflare): the sign-in tokens that let Cubby read your connected mailbox, and your connected email addresses.
Service providers we use
- AI processing: to understand an email, its sender, subject and text are sent over an encrypted connection to our AI providers (Rork's AI gateway, Vercel AI Gateway and Google Gemini). They process it only to return results to Cubby.
- Website connections: when Cubby checks a school portal for you, your login for that site is sent over an encrypted connection to our server and to Browserless, a secure browser service, which signs in to that site on your behalf for that check.
- Hosting: Cloudflare runs Cubby's servers.
- Subscriptions: Apple processes payments. RevenueCat helps us manage your subscription status. We never receive your card details.
Google user data
Cubby's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Gmail data only to provide Cubby's features to you. We do not use it for advertising, do not sell it, and do not allow people to read it except with your permission, for security purposes, or to comply with the law.
Children's information
Cubby is for parents and guardians. Children do not use Cubby or create accounts. Information about your children comes from you and from emails sent to you, and is used only to organize your family's schedule.
How long we keep information
We keep your information while you use Cubby. When you disconnect a mailbox, we delete its sign-in tokens. When you delete your Cubby data, we delete everything described above from your iPhone and our servers.
Your choices
- Disconnect any mailbox or website at any time in the Family tab.
- Turn off reading sent mail and notifications in Settings.
- Delete all your data in the Family tab with Delete my Cubby data.
- Remove Cubby's access to your Google account at myaccount.google.com/permissions.
- Manage or cancel your subscription in your Apple account settings.
Security
Information is sent over encrypted connections. Passwords for school websites are kept in the iPhone Keychain. No system is perfectly secure, but we work to protect your information and limit who can access it.
Changes
If we change this policy, we will update the date above and let you know in the app when the change is important.
Contact
Questions or requests: hello@hicubby.ai