Privacy Policy

This Privacy Policy explains what personal information Cubie Technologies collects, why we collect it, how we use and protect it, and what choices you have.

1. Information we collect

Information you give us

• Account information — name, email address, and password (stored only as a hash, never in readable form)
• Profile information — display name, photo and any optional details you add
• Content — messages, files, journal entries and other material you create or upload
• Correspondence — what you send us by email or through our contact form

Information collected automatically

• Usage data — pages visited, features used, and timestamps
• Device and connection data — browser type, operating system, and IP address
• Cookies and similar technologies — see our Cookie Policy

Information from third parties

If you sign in with Google, we receive your name, email address and profile picture from Google. We do not receive your Google password.

2. How we use information

• To provide, operate and maintain the Services
• To authenticate you and keep your account secure
• To deliver your content to the people you send it to
• To respond to your enquiries and provide support
• To detect, investigate and prevent abuse, fraud and security incidents
• To understand how the Services are used so we can improve them
• To send service messages, and marketing email only where you have opted in
• To comply with legal obligations

3. What we do not do

We do not sell your personal information. We do not use the content of your private messages for advertising, and we do not use it to train machine learning models.

4. Legal bases

Where GDPR or similar law applies, we rely on: performance of a contract (providing the Services you signed up for), legitimate interests (security, abuse prevention and improving the Services), consent (marketing email and non-essential cookies), and legal obligation.

5. Sharing

We share personal information only in these situations:

• Service providers who process data on our behalf under contract — hosting, object storage, email delivery, push notifications and analytics
• Other users, where you choose to share — for example the recipient of a message
• Legal requirements, where we are required to disclose by valid legal process, or to protect rights, safety or property
• Business transfer, if we are involved in a merger or acquisition, with notice to you beforehand

See our Data Processing Agreement for how we handle data on behalf of business customers.

6. International transfers

Our infrastructure and service providers may be located outside your country. Where personal data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses.

7. Retention

We keep personal information for as long as your account is active, and afterwards only as long as needed for the purposes described here or as required by law. When you delete your account, we delete or anonymise your personal data, except where retention is legally required. Backups expire on a rolling cycle.

8. Security

We use technical and organisational measures appropriate to the risk, including encryption in transit, password hashing with bcrypt, parameterised database queries, access controls and per-user data isolation at the query level. No system is perfectly secure, so we also work to detect and respond to incidents quickly.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent. You can exercise most of these directly in your account settings, or by writing to legal@cubietec.com. We respond within 30 days.

To delete your account entirely, use the account deletion option in settings or the deletion page linked from the relevant product.

10. Children

The Services are not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes

We will post any changes to this policy on this page and update the date above. Material changes will be notified through the Services or by email.

12. Contact

Privacy questions and requests: legal@cubietec.com.