Privacy Policy
Last updated 7 August 2026
HeyBub is a private family photo album. This page says exactly what we store, who can see it, and how to get rid of it. No pre-ticked boxes, no ad networks.
What we do not do
- We do not sell your data. There is no advertising in HeyBub, so there is no ad network to sell it to.
- We do not track you across other apps or websites. There is no advertising identifier and no tracking SDK.
- We do not collect your location.
- We do not use your photos to train machine learning models.
What we store
| What | Why |
|---|---|
| Your name and email address | From Sign in with Apple, to identify your account and show your name to your family. If you use Apple's Hide My Email, we only ever see the relay address. |
| Photos and videos you upload | They are the product. Stored so your family can see them. |
| Your children's names and birthdays | To label albums and show a child's age on a photo. Birthday is optional. |
| Comments and reactions | So your family can talk about a photo. |
| Who did what, and when | Sign-ins, uploads, views, and screenshot attempts, shown to the album owner on the Activity screen. This is the feature that tells you when someone tried to screenshot your child's photo. |
| A notification token for your device | To send you a push notification. It identifies an app install, not you. |
| Subscription status | Whether your subscription is active, which product, and when it renews. Handled through RevenueCat and Apple. We never see your card details. |
| Crash reports | Through Sentry, so we can fix what breaks. Your identity is stripped out before the report leaves your phone, and web addresses are scrubbed because they can carry access tokens. |
Location data inside photos
HeyBub does not ask for your location and never reads it. A photo taken on a phone usually carries the coordinates where it was taken inside the file itself, so we remove them from the photo on your device, before it is uploaded. The coordinates never reach us.
We do this without re-compressing your photo, so nothing about the image quality changes. Only the hidden metadata goes: the location, the camera model, and the rest of it. Which way up the photo should be shown is the one thing we keep, because without it your photos would appear on their side.
Photos uploaded from an older version of the app, or before this change, have the same metadata removed on our servers as soon as they arrive.
Who can see your photos
Only the people you invite. There is no public feed and no way to search for another family. You control, per person and per child, who can view and who can comment.
We can technically access what is stored, because we run the servers. We do not look at it, and we only ever would to fix a specific problem you have asked us to fix, or where the law requires it.
Where it is stored
Everything, photos and videos included, is stored with Supabase, which runs on Amazon Web Services in the United States. Crash reports go to Sentry. Subscription records go to RevenueCat. Those three companies, plus Apple, are the only outside parties involved.
How long we keep it
For as long as you keep your account. Delete your account and we delete your comments everywhere, along with your name and profile photo.
Deleting your account
Settings, then Delete account. Or email heybubapp@proton.me and we will do it for you. Either way you are signed out on every device and cannot sign in again.
What happens to the photos depends on who else is an admin. If you are the only admin of a family album, that album is deleted for everyone in it, photos and videos included, so tell them first. If another parent is also an admin, the album is theirs too: photos you added stay with the family, because deleting them would take away half of someone else's album. Your comments are removed either way.
Children
You must be 13 or older to hold a HeyBub account, including as an invited family member. Buying a subscription requires being 18 or older.
Children are the subject of the photos, not users of the app. We do not knowingly collect anything from a child under 13, and if we learn that someone under 13 holds an account we will close it and delete what it holds.
Your rights
You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email heybubapp@proton.me and we will respond within 30 days.
Changes
If we change this policy in a way that matters, we will tell you in the app before the change takes effect.