Cubdays — Privacy Policy

Last updated: 27 August 2026

Who we are

Cubdays is a baby-tracking app made by Cyan Dev, who is responsible for the information described here. This policy covers the Cubdays mobile app.

Questions, or any request about your data: cyan1114@outlook.com.

The short version

Everything you record about your baby — feeds, sleeps, nappies, growth measurements, vaccines, photos, notes and spending — is stored on your device only. We do not upload it, we cannot see it, and we do not back it up to any server.

An account is optional. If you create one, we hold your sign-in details and nothing else about your baby.

What we store on your device

Your baby’s name, date of birth, sex, optional photo and colour choice; every record you log, including notes and photos you attach; the reminders you create; and your app settings.

This never leaves your phone unless you choose to export or share it (More → Data & privacy → Export data, or the immunization export on Growth), in which case it goes wherever you send it. Uninstalling the app removes it, and so does deleting your last baby profile.

What we store on our servers

Only what an account needs, and only if you create one: your email address and a Firebase authentication identifier. We do not store your baby’s records on our servers.

If you sign in with Google, Google also returns your name and profile picture, and Firebase keeps them on the account record. Cubdays itself never displays or uses them — you are shown by email — but they are held, so they are listed here. We never receive your Google password.

Firebase additionally records sign-in metadata for security and abuse prevention: account creation and last sign-in times, and the IP address a sign-in came from.

We use Google Firebase Authentication for all of this, as our processor. Google may store and process it in the United States and other countries where Google operates. See Google’s privacy policy at https://policies.google.com/privacy.

If you buy Cubdays Plus, the purchase itself is made through Google Play — Google, not us, handles your card and your payment details. We use RevenueCat as our subscriptions processor to check whether a purchase is active.

RevenueCat receives the identifier we use for your account (the same Firebase identifier described above, so that a subscription follows you to a new phone), your purchase and renewal history for this app, and basic device and country information. If you are not signed in, it receives an anonymous identifier generated on your device instead. It never receives your baby’s records. RevenueCat processes this in the United States.

Deleting your account removes it from our authentication provider, but the subscription record held by RevenueCat is separate: write to us and we will delete that too. Google Play keeps its own record of the transaction under its own policy.

What we do not do

We do not sell or rent your information. We show no advertising and run no advertising or analytics SDKs that profile you. We do not build advertising profiles of you or your child.

The app sends no push notifications from a server: reminders are scheduled on your phone, so we never hold a push token or know when you were reminded.

Permissions

Notifications — to deliver the reminders you create and the next vaccine dose. Decline and reminders still appear inside the app; nothing is pushed.

Camera and photo library — to attach a photo to a record or a baby profile. Photos are copied into the app’s private storage on your device and are not uploaded.

Children

Cubdays is for parents and carers, who must be adults. It is not directed at children, and children do not create accounts. The information recorded is about a child but is entered and controlled by the adult using the app, and — apart from an optional account — stays on that adult’s device.

Your choices

Take your data: More → Data & privacy → Export data produces a CSV of every record.

Delete your records: from a record’s own sheet, or a whole profile from More → Babies → ✎. Deleting the last profile clears the app’s data.

Delete your account: More → Account → Delete account removes the account and everything above that is held for it. Your on-device records are unaffected — they were never uploaded. If you have uninstalled the app, email us from the address you signed up with and we will delete it for you.

Depending on where you live you may have rights to access, correct, export or erase the personal data we hold (for example under the GDPR or the CCPA). The only personal data we hold is your account, so those requests are answered by the deletion route above or by writing to us.

How long we keep things

Account data is kept until you delete your account, after which it is removed from our authentication provider. On-device data is kept until you delete it or uninstall the app.

Security

Account credentials are handled by Firebase Authentication; we never see your password. On-device data is protected by your phone’s own security — a device passcode and full-device encryption are the meaningful protections here, and we recommend both.

Not medical advice

Cubdays is not a medical device and does not provide medical advice. Growth percentiles are computed from the WHO Child Growth Standards and vaccine schedules follow published national schedules, but both are shown for your reference only. Always talk to your paediatrician about your child’s health.

Changes

If we change this policy we will update the date above and, for anything that materially affects you, tell you in the app before the change takes effect.