CUBBY — PRIVACY POLICY
Effective June 16, 2026

Cubby ("Cubby", "the app", "we", "us") is a personal expense tracker developed by Luka Global Limited. This Privacy Policy explains what information the app handles and how. By using Cubby, you agree to the practices described here.

1. Information in the App
Cubby works with the data you create: expense records (amounts, currencies, dates, categories, payment methods, optional notes and "spent on" tags), monthly budgets, and any receipt photos you choose to capture or upload. If you create an account to enable Cloud Sync, we also process your email address (sign-in is handled by Apple, Google, or email/password through our backend provider).

2. Where Your Data Is Stored
By default, everything stays on your device in a local database and local image files — it is not transmitted anywhere. If you enable Cloud Sync (a paid feature) and sign in, your expenses, budgets, and receipt images are backed up to our cloud provider (Supabase) so you can sync across devices. Synced data is tied to your account and protected so that only you can access it.

3. Camera and Photos
Cubby accesses your camera or photo library only to add receipt images you select. For free users, text recognition (OCR) on receipts is performed entirely on your device. Images are stored locally and, if Cloud Sync is on, uploaded to your private cloud storage.

4. AI Receipt Scanning (Pro)
If you are a Pro subscriber and signed in, you can use AI-assisted receipt scanning. When you do, the receipt image is sent securely through our backend (Supabase) to Google's Gemini API, which reads the image to extract details such as the merchant, total, date, and currency. Google processes the image under its own API terms and privacy policy. This feature is optional — free users' receipts are read only on-device, and if the AI service is unavailable Cubby falls back to on-device OCR.

5. Advertising
Cubby displays banner ads served by Google AdMob (the Google Mobile Ads SDK). To serve ads, AdMob may collect device information and a device advertising identifier, and may use approximate (IP-based) location and ad-interaction data, as described in Google's privacy policy. You can reset or limit ad personalization in your device settings. We never share your expense records, receipts, budgets, or account information with advertisers.

6. Third-Party Services
Depending on the features you use, Cubby may interact with: Supabase (cloud database, file storage, and authentication — only if you sign in); Sign in with Apple and Google Sign-In (only if you choose them); Google AdMob (to display ads); Google's Gemini API (only for Pro AI receipt scanning, to read receipt images you submit); and the Frankfurter service (European Central Bank reference rates) to convert between currencies. For currency conversion we send only currency codes and dates — never your personal or expense data.

7. Data Retention and Deletion
Local data is removed when you delete an expense or uninstall the app. If you use Cloud Sync, deleting an expense removes it from your synced data as well. To request deletion of your account and associated cloud data, contact us at lukaglobalhk@gmail.com.

8. Security
We use industry-standard safeguards such as encrypted transport and per-user access controls to protect synced data. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Children
Cubby is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal data from them.

10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected here with a new effective date.

11. Contact
If you have questions about this policy, contact us at lukaglobalhk@gmail.com.

Luka Global Limited — lukaglobalhk@gmail.com