Privacy Policy

Who we are

Hubbub is run by [company legal name and address] (“Hubbub,” “we,” “us”). Questions about privacy go to privacy@hubbubfamily.com.

What we collect and why

Account and family

• Parents and teens with their own login: email address (to send your sign-in code), name, and the color and picture you choose.
• Kid profiles: a parent creates these. We store a first name or nickname, role (kid or teen), color, optional picture, and a four-digit PIN. The PIN is stored only as a scrambled one-way hash.
• Family settings: family name, time zone, plan, and invite links.

What your family adds

• Calendar events, who they're for, drivers, and who's on duty each day.
• Photos of school flyers and schedules you upload, and the events we pull out of them.
• Chores, approvals, allowance entries, payouts, and savings goals. This is a record your family keeps; Hubbub never holds or moves real money.
• Shopping lists, dinner plans, to-do lists, and household notes (for example the Wi-Fi password or the pediatrician's number).
• Family photos you upload for albums and the wall slideshow.

Connected accounts

• Google Calendar: if a parent connects it, we read and write events on the calendars you choose so Hubbub and Google stay in step.
• Gmail (coming during the beta): if a parent connects an inbox, we read messages to find school mail, receipts, and bills, and put the dates on your calendar.
• Bank accounts (later, through Plaid): only if a parent chooses to connect one. We will update this policy before that feature launches.

Access tokens for connected accounts are encrypted and readable only by our servers. They never reach a browser.

Beta sign-ups

If you ask to join the beta, we keep your name, email, number and ages of your kids, which calendar you use, and how you heard about us, so we can choose families and contact you. We also keep a scrambled one-way hash of your IP address to stop spam sign-ups.

Technical information

• Sign-in cookies that keep you signed in. We don't use advertising or analytics cookies, and we don't use third-party trackers.
• Basic server logs (IP address, browser type, pages requested, errors), kept for a short time to run and secure the service.
• An activity log of sensitive actions, such as sign-ins, PIN unlocks, approvals, payouts, connected accounts, and deletions, including which family member did them. This helps parents see who did what on a shared device and helps us investigate problems.

How we use it

• To run Hubbub: show your calendar, lists, chores, and balances to the right people in your family.
• To sync with the calendars and inboxes you connect.
• To read flyer photos and write the morning brief using AI (see Anthropic below).
• To email parents their sign-in codes and morning brief.
• To keep Hubbub secure, fix bugs, and answer your questions.

We don't sell your information, share it for advertising, or use it to build ad profiles. We don't use your family's content to train AI models.

Who processes it for us

We use a few service providers to run Hubbub. Each one gets only what it needs for its job and is bound by its own privacy and security terms.

• Supabase: our database, sign-in, and file storage. Everything your family adds is stored here.
• Cloudflare: hosts the Hubbub website and app and runs our scheduled jobs.
• Anthropic (Claude): reads flyer and schedule photos to find dates, sorts connected inbox mail, and writes the morning brief. Anthropic processes this content to give us the result and, under its commercial terms, does not use it to train its models.
• Google APIs: Google Calendar (and later Gmail) when a parent connects them.
• Klaviyo: sends the morning brief email. Klaviyo gets only parents: name, email address, preferred delivery time, and that day's brief. Kids and teens never get a Klaviyo profile, and we don't use Klaviyo to market to anyone under 18.
• Email delivery: [email provider] sends sign-in codes.
• Open-Meteo: provides the weather on kid pages. It gets only an approximate location, never a name.
• Plaid (later): connects bank accounts for parents who choose that feature.
• Payments (after the beta): Stripe, Apple, Google, and RevenueCat will handle subscriptions. We never see your full card number.

We may also share information if the law requires it, to protect someone's safety, or as part of a merger or sale of Hubbub, in which case this policy keeps applying to your data.

Google user data

When you connect a Google account, Hubbub asks only for the access it needs: your email address, and permission to see your calendar list and read and write events (and, once inbox features launch, to read Gmail messages). We use this data only to show and sync your family calendar and to find dates in your mail.

Hubbub's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google data only to provide and improve the features you can see in Hubbub.
• We transfer it to others only as needed to provide those features (for example, to Anthropic to find dates in an email), to comply with the law, or as part of a merger or sale with your notice.
• We never use it for advertising, and never sell it.
• People at Hubbub don't read it unless you ask us to (for example, for support), it's needed for security or to follow the law, or it has been made anonymous.
• We don't use it to develop, improve, or train general AI or machine learning models.

You can disconnect Google any time in Hubbub (Calendar, then Connections) or from your Google account settings. When you disconnect, we delete the stored access token.

Children

Hubbub is made for families, so kids use it, some under 13. Here's how we handle that:

• Parents are in charge. Only a parent can create a kid profile or invite a kid or teen to their own login. By doing so, the parent consents to Hubbub collecting and using that child's information as this policy describes.
• We collect only what's needed: what the parent enters, plus what the child adds while using Hubbub (events, chores done, savings goals).
• No ads, no tracking, no marketing. There are no ads or third-party trackers anywhere a kid can see. Kid data never goes to Klaviyo or any marketing or analytics tool.
• Parents can see, change, and delete their kids' information at any time in the app, or by emailing privacy@hubbubfamily.com. A parent can remove a kid's profile in the app; to erase everything about a child, including what they added to shared lists, email us and we'll do it within 30 days.
• Parents-only means parents only. Events marked for parents are hidden from teens and kids by the database itself, not just the screen.

During the beta, every family is one we know personally and has agreed to try Hubbub. Before we open to the public, we will add a formal verified parental consent step that meets the Children's Online Privacy Protection Act (COPPA). If you believe a child's information reached us without a parent's consent, email privacy@hubbubfamily.com and we will delete it.

Your choices and rights

• See and edit: almost everything is visible and editable in the app.
• Export: email privacy@hubbubfamily.com from your account's address and we'll send you a copy of your family's data within 30 days.
• Delete: a parent can remove family members in the app. To delete your whole family or account, email us from a parent's address (a delete button in the app is coming before public launch). We delete it from our live systems right away and from backups within 30 days, except where the law makes us keep something.
• Emails: turn off the morning brief any time in the app or with the link in the email. Sign-in codes are always sent.

Depending on where you live (for example California or the EU), you may have more rights, such as to correct your data or object to how it's used. Email us and we will honor them. We don't sell or “share” personal information as California law defines those words.

How long we keep it

We keep your family's information while your account is open. If you delete it, see above. Beta sign-ups that don't become accounts are deleted within 12 months. Server logs are kept for up to 30 days.

How we protect it

• All traffic is encrypted (HTTPS), and data is encrypted at rest by our providers.
• Database rules on every table make sure each person sees only their own family's data, and only what their role allows.
• Tokens for connected accounts are stored encrypted in a separate vault and used only by our servers.
• Sign-in uses one-time email codes, not passwords. PINs are hashed, and a profile locks after repeated wrong guesses.
• Sensitive actions are logged, and our team's access is limited to what the job needs.
• Strict browser security settings, and security reviews before the beta and before public launch.

No system is perfectly secure. If a breach affects your information, we will tell you promptly and as the law requires.

Where it's stored

Hubbub is run from the United States, and your data is stored in [Supabase region]. If you use Hubbub from outside the US, your information is transferred there.

Changes

If we change this policy in a way that matters, we'll tell parents by email or in the app before it takes effect. The effective date at the top always shows the latest version.

Contact

Email privacy@hubbubfamily.com, or write to [mailing address]. See also our Terms of Use.