Privacy Policy
Last updated 7 August 2026
HeyBub is a private family photo album. This page says exactly what we store, who can see it, and how to get rid of it. No pre-ticked boxes, no ad networks.
What we do not do
- We do not sell your data. There is no advertising in HeyBub, so there is no ad network to sell it to.
- We do not track you across other apps or websites. There is no advertising identifier and no tracking SDK.
- We do not collect your location.
- We do not use your photos to train machine learning models.
What we store
| What | Why |
|---|---|
| Your name and email address | From Sign in with Apple, to identify your account and show your name to your family. If you use Apple's Hide My Email, we only ever see the relay address. |
| Photos and videos you upload | They are the product. Stored so your family can see them. |
| Your children's names and birthdays | To label albums and show a child's age on a photo. Birthday is optional. |
| Comments and reactions | So your family can talk about a photo. |
| Who did what, and when | Sign-ins, uploads, views, and screenshot attempts, shown to the album owner on the Activity screen. This is the feature that tells you when someone tried to screenshot your child's photo. |
| A notification token for your device | To send you a push notification. It identifies an app install, not you. |
| Subscription status | Whether your subscription is active, which product, and when it renews. Handled through RevenueCat and Apple. We never see your card details. |
| Crash reports | Through Sentry, so we can fix what breaks. Your identity is stripped out before the report leaves your phone, and web addresses are scrubbed because they can carry access tokens. |
Location data inside photos
HeyBub does not ask for your location and never reads it. But a photo or video taken on a phone often carries the coordinates where it was taken inside the file itself, and HeyBub stores your file exactly as your phone produced it. So that information sits in your album alongside the photo.
Nobody you invite can take a copy. There is no download in HeyBub, and invited family members cannot save, screenshot, or export anything. Your phone's camera settings control whether location is recorded in the first place.
Who can see your photos
Only the people you invite. There is no public feed and no way to search for another family. You control, per person and per child, who can view and who can comment.
We can technically access what is stored, because we run the servers. We do not look at it, and we only ever would to fix a specific problem you have asked us to fix, or where the law requires it.
Where it is stored
Photos and videos are stored with Cloudflare R2. Everything else is stored with Supabase, which runs on Amazon Web Services. Both hold data in the United States. Crash reports go to Sentry. Subscription records go to RevenueCat. Those four companies, plus Apple, are the only outside parties involved.
How long we keep it
For as long as you keep your account. Delete your account and we delete your photos, videos, and comments.
Deleting your account
Settings, then Delete account. Or email heybubapp@proton.me and we will do it for you. If you were the owner of a family album, deleting your account removes that album for everyone in it, so tell them first.
Children
You must be 13 or older to hold a HeyBub account, including as an invited family member. Buying a subscription requires being 18 or older.
Children are the subject of the photos, not users of the app. We do not knowingly collect anything from a child under 13, and if we learn that someone under 13 holds an account we will close it and delete what it holds.
Your rights
You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email heybubapp@proton.me and we will respond within 30 days.
Changes
If we change this policy in a way that matters, we will tell you in the app before the change takes effect.