Privacy Policy

Last updated: March 31, 2026

1. Who We Are

Kubo ("we," "us," "our") operates the Kubo mobile application and website (kubo.so). Here's how we handle your data.

2. What We Collect

Information you provide

• Account information: Email address (via OAuth), display name, date of birth
• Profile information: Photos, bio, identity chips, looking-for preferences, stats (all optional except one photo and age)
• Location: GPS coordinates for proximity-based discovery. We never store or share your exact location. Distance is always shown in fuzzy buckets.
• Messages: Text messages, photos, and videos you send to other users
• Albums: Photos and videos you upload to albums you create

Information collected automatically

• Device information: Device type, OS version, app version
• Usage data: Feature usage patterns, crash reports, performance metrics
• Authentication tokens: Session management data

3. How We Use Your Data

• To provide the service: showing you nearby profiles, delivering messages, managing albums
• To maintain safety: content moderation, abuse prevention, spam detection
• To improve the app: crash reporting, performance monitoring, usage analytics
• To communicate with you: account notifications, safety alerts, service updates

4. What We Never Do

• We never sell your data to third parties
• We never share your exact GPS coordinates with other users or third parties
• We never use behavioral tracking for targeted advertising
• We never store message content after both parties delete a conversation
• We never retain expired or view-once media after expiration

5. Location Privacy

Your location is used solely to calculate distance between you and other users. We apply location fuzzing by default: distances are shown in approximate buckets (e.g., "under 1 mi," "about 2 mi"), never as exact GPS coordinates. Your raw GPS data is never transmitted to other users or stored in logs.

6. Data Retention

• Account data: Retained while your account is active. Deleted within 30 days of account deletion.
• Messages: Stored until deleted by the user. View-once media is deleted after viewing. Timed media is deleted after expiration.
• Albums: Stored until deleted by the creator. Revoked grants immediately remove viewer access.
• Location: We store only your most recent location. No location history.

7. Data Security

We use industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest, and secure authentication via OAuth providers. We conduct regular security audits and follow OWASP guidelines. We use Sentry for crash reporting, Google Cloud Platform for hosting and infrastructure, and Cloudflare for CDN and media delivery.

8. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and all associated data
• Export your data in a portable format
• Withdraw consent for data processing

9. Children

Kubo is for adults only. You must be at least 18 years old to create an account. We do not knowingly collect data from anyone under 18.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via the app or email. Continued use of the app after changes constitutes acceptance.

11. Contact

Questions about this policy? Email us at privacy@kubo.so.