Privacy

What Cobuho is

Cobuho is a private, end-to-end encrypted home for family photo sharing. The photos and captions you and your family post are encrypted on your device before they ever leave it. We — the people who build Cobuho — can never read them.

What we collect

• Your email, used as the address for the one-time sign-in links we send when you log in.
• Your display name and (optional) profile photo, which are visible to other members and followers of any family you belong to.
• Encrypted blobs of your photos and captions. These are unreadable to us; only the people you have shared your family encryption key with can decrypt them.
• Metadata about the structure of your family — who is following whom, who is a member — so the product knows what to show to whom.
• Billing information, handled by Stripe. We receive a customer ID and a subscription status from Stripe; we never see your card number.
• Push subscription tokens, if you opt in to browser push notifications, so we can let your browser’s push service deliver a notification when one of your family members posts.

What we do NOT collect

• The contents of your photos or captions in any readable form.
• Your private encryption key. It is generated on your device and stays there.
• Tracking pixels, third-party advertising IDs, or behavioural ad data.

Who we share data with

• Supabase hosts our database, authentication service, and encrypted blob storage. They see your email and the encrypted blobs but cannot decrypt your content.
• Stripe handles subscription billing. They see your card details; we do not.
• Resend sends our invite emails. They see the recipient email and the invite link, not your photos.
• Vercel hosts the web application. They serve the code that runs in your browser.
• Browser push services (Apple, Google, Mozilla) relay push notifications. The notification payload they handle contains only the actor name and post type, never photo content.

We do not sell your data. We do not share it with advertisers.

How long we keep your data

Your account and the data attached to it persist until you delete your account. You can delete your account from Settings → Account → Delete account, which cascades through and removes your profile, your posts, your follows, your encryption key wrappers, and your encrypted photo blobs.

Your rights

You can export, correct, or delete your data at any time from within the app. If you live in a jurisdiction with a data protection law (GDPR in the EU, CCPA in California, etc.) you also have a right to request that data through us directly at privacy@cobuho.com.

Children

Cobuho is for adults who are sharing photos of their families. Account holders must be 16 or older (13 with parental consent in jurisdictions where that’s permitted). Photos of children are subject to the consent of their parents or guardians.

Contact

Questions about this policy or about your data: privacy@cobuho.com.