Privacy Policy

Cubby ("we," "us," or "our") is committed to protecting your privacy and the privacy of the people you support. This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data.

By using Cubby, you agree to the collection and use of information as described in this policy. If you have questions, contact us at hello@cubbyplaylist.com.

Admin account information: When you create an account, we collect your email address, name, and (if using Google Sign-In) your Google profile name and profile picture. We do not store your password directly — it is handled securely by our authentication provider (Supabase).

Profile information: You provide a first name (or nickname), an avatar, a color theme, and an optional screen-time limit for each profile. We do not collect any government-issued IDs, birth certificates, or other identifying information about the people you support.

Video library data: We store the list of YouTube video IDs, titles, thumbnails, and channel names that you add to each profile's library.

Screen time data: We store daily watch-time totals per profile on your device (locally in browser/app storage). Summary data may be synced to our servers to enforce screen time limits.

Analytics: We use PostHog, a US-based product-analytics provider (data is processed at us.i.posthog.com in the United States), to understand how the admin experience is used so we can improve it. For signed-in admins we send a limited set of usage events tied to an internal account identifier, never your name or email. We do not send any analytics from the viewing experience, we remove profile identifiers from page addresses before they leave your device, and we honor the Do Not Track browser signal. PostHog acts as our data processor for this information.

We use the information we collect to:

• Provide, operate, and maintain the Cubby service.
• Create and manage your admin account and profiles.
• Enforce screen-time limits you set for each profile.
• Sync your video collections and settings across your devices.
• Process subscription payments (via our payment processor — we do not store card numbers).
• Send important service announcements, such as changes to these policies.
• Respond to your support requests.
• Improve and develop the service through anonymized analytics.

We do not sell your personal data to third parties. We do not use your data for advertising purposes. We do not share your data with third parties except as described in this policy or as required by law.

Cubby is intended for teens and adults aged 13 and older, and for the adults who support them. Cubby is not directed to children under 13, and we do not knowingly collect personal information from children under 13. We do not collect age or date-of-birth information from anyone. If you believe a child under 13 has provided us personal information, contact us at hello@cubbyplaylist.com and we will delete it. Because Cubby is not directed to children under 13, the Children's Online Privacy Protection Act (COPPA) does not apply to our service.

Your account data is stored securely using Supabase, a US-based database and authentication platform. Data is stored in data centers located in the United States. Supabase uses industry-standard encryption in transit (TLS) and at rest.

Screen time tracking data is stored locally on your device and may be synced to our servers to support multi-device access. Your admin PIN is stored only on your device and is never transmitted to our servers.

While we take reasonable measures to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Cubby uses the YouTube Data API Services to allow you to search for and add YouTube content. By using Cubby, you agree to the Google Privacy Policy.

We store YouTube video metadata (video IDs, titles, thumbnails, channel names) as part of your curated video collections. We do not store YouTube viewing history or any data returned by the YouTube API beyond what is needed to display your video library.

We share your data only in the following limited circumstances:

• Service providers: We use Supabase for database and authentication services. These providers process data only on our behalf and under our instructions.
• Payment processors: Subscription payments are handled by our payment processor. We share only what is necessary to complete the transaction. We do not store payment card numbers. For subscriptions bought on the web, we also use RevenueCat to manage your subscription. RevenueCat receives your Cubby account identifier and your purchase and subscription status so it can keep your plan up to date. Your card details still go only to Stripe.
• Legal requirements: We may disclose your information if required to do so by law, court order, or government request, or to protect the rights, property, or safety of Cubby, our users, or the public.
• Business transfers: If Cubby is acquired or merges with another company, your data may be transferred. We will notify you before your data becomes subject to a different privacy policy.

Payment processing for Cubby subscriptions is handled entirely by Stripe. We never see or store your credit card number, CVV, or full payment card details — that information goes directly to Stripe and is governed by their privacy policy.

What we do store on our end:

• Your subscription plan type (Free or Family Plan).
• Your billing interval (monthly or annual).
• Your current subscription status (active, cancelled, past due, etc.).
• Your current billing period start and end dates.
• Your Stripe Customer ID — a unique identifier that links your Cubby account to your Stripe record so we can manage your subscription (e.g., process upgrades, cancellations, or open the Stripe Customer Portal on your behalf).

This billing information is used solely to provide and manage your subscription. It is not shared with third parties for marketing or advertising purposes.

We retain your data for as long as your account is active or as needed to provide the service. You can delete your account at any time from Account Settings within the app.

When you delete your account, we will delete your admin account information, all profiles, and all associated video collections and settings within 30 days. Some data may be retained in anonymized form for analytical purposes.

To request deletion of your data or a profile, you can also email us at hello@cubbyplaylist.com and we will process your request within 30 days.

Depending on your location, you may have certain rights regarding your personal data, including the right to access, correct, or delete your data. To exercise any of these rights, please contact us at hello@cubbyplaylist.com.

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA). We do not sell personal information.

Cubby uses browser local storage and session storage to maintain your login session and store preferences such as your selected profile and screen-time data. We do not use third-party advertising cookies.

Our authentication provider (Supabase) may use cookies to maintain your session. These are strictly necessary for the service to function.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email or a prominent notice in the app. We encourage you to review this policy periodically. Your continued use of Cubby after changes take effect constitutes your acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us at:

Email: hello@cubbyplaylist.com

We aim to respond to all privacy inquiries within 5 business days.