Privacy Policy

This Privacy Policy explains what information Cubby collects, how we use it, and the choices and rights you have. It applies to the Cubby app and this website (together, the “Service”).

Who we are (data controller)

Cubby (“we”, “us”) is operated by Pavlo Seleznov, based in Ukraine(the “operator”), which is the data controller for your personal data. You can reach us about privacy at support@usecubbyapp.com.

1. Information we collect

• Account details — your name and email address, used to sign you in and let friends find you.
• Your content — the tools, places, and lending records you create.
• Connections — the friends you add and the tools you lend or borrow.
• Technical data— basic information needed to run and secure the Service, such as connection status and error diagnostics handled by our infrastructure provider. We don’t use tracking or advertising identifiers.
• Push notification tokens— a device token used to deliver the notifications you’ve enabled (for example, friend requests and borrow updates). It’s stored with your profile and removed when you sign out or delete your account.

2. How we use your information & legal bases

Under the GDPR and similar laws, we rely on the following legal bases:

• To provide the Service — storing your inventory, syncing it across devices, and enabling lending with friends you choose. Basis: performance of our agreement with you.
• To keep the Service secure — authentication and preventing abuse. Basis: our legitimate interests.
• Improving Cubby with anonymized insights— using aggregated, anonymized usage data to understand how the app is used and decide what to build. This is on by default and you can opt out anytime (Settings → Data & privacy). Basis: our legitimate interests (see section 5).
• Any future advertising or third-party sharing — not done today. If ever introduced, basis: your consent, which you can withdraw at any time.

3. Who we share it with

We share data with Google Firebase (Cloud Firestore and Firebase Authentication), our infrastructure provider, which processes it on our behalf to run the Service. We also show a tool to another user only when you mark it lendable and they are an approved friend. We do not sell data that identifies you personally, and we don’t share it with third parties for their own marketing.

4. International transfers

Google Firebase may store or process data on servers outside your country, including outside the European Economic Area (EEA). Where data is transferred outside the EEA, it is protected by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

5. Improving Cubby & aggregated insights

To improve Cubby and decide what to build next, we use aggregated, anonymized usage data — for example, counts of tool categories, not tied to you individually. This is on by default on a legitimate-interest basis, and you can turn it off at any time under Settings → Data & privacy.

• The data used for this is aggregated and anonymized — it does not identify you individually.
• It is used only to improve Cubby. We do not sell it and do not share it with third parties for their own purposes.
• You can opt out at any timeunder Settings → Data & privacy; opting out takes effect immediately.

Cubby is not ad-supported, and we do not sell or share data that identifies you. If we ever introduce advertising or any sharing of insights with third parties, we will ask for your explicit, opt-in consent first — separate from these terms and never a condition of using Cubby.

6. How long we keep your data

We keep your account and content for as long as your account is active. When you delete your account, your personal data is removed from the live Service; residual copies in backups are purged on a rolling basis within a limited period. Tools you’ve lent out are flagged for the borrower for 3 days so they can claim them, and are then deleted automatically — deletion normally completes within 24 hours of that deadline.

7. Security

Data is protected in transit and by security rules that limit access to you and the friends you share with. No system is perfectly secure, but we take reasonable measures to protect your information.

8. Your rights & choices

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal data, to object to certain processing, and to withdraw consent at any time. You can manage your profile, your marketing choice (Settings → Data & privacy), and delete your account directly in the app, or contact us at support@usecubbyapp.com.

If you are in the EEA or the UK and believe we have handled your data improperly, you also have the right to lodge a complaint with your local data protection authority.

9. Cookies & on-device storage

This website does not use tracking or advertising cookies. The app stores data on your device only to run the Service — to keep you signed in and to cache your inventory for offline use.

10. Automated decision-making

We don’t make decisions about you solely by automated means that produce legal or similarly significant effects.

11. Children’s privacy

Cubby isn’t directed at children under 13, and we don’t knowingly collect their personal information.

12. Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the “last updated” date above, and where a change introduces a new use of your data that requires it, we’ll ask for your consent before that use begins.

13. Contact

Questions about your privacy? Reach us at support@usecubbyapp.com.