Security

Effective Date: 1/1/2025
Last Updated:  7/20/2025

Kubby was built with security at its core. We understand that you’re trusting us with sensitive information—like your account data, shopping activity, and delivery details—and we take that responsibility seriously.

Our platform is designed to minimize what we store, limit access to what we must, and build in smart protections at every step.

What We Don’t Store (By Design)

No Card Info Stored. All payments are processed through Stripe, a PCI-compliant provider. Kubby never sees or stores your full card details.

OAuth-Based Access Only. When connecting services like email, Kubby uses OAuth or other secure authorization flows ensuring we never see your login credentials and can only access the specific data you approve (like tracking numbers or order confirmation metadata).

No Store Passwords Stored. When you access your online store accounts through Kubby, your credentials stay on your iPhone using Apple’s secure system. Kubby never stores or accesses them.

Minimal Kubby Data Stored. We only store what’s essential for your experience: encrypted Kubby account credentials (e.g., password , name, email, order history (online and local), support requests, chat history, and tracking info from email. Nothing more.

Data Protection

All user data is encrypted during transmission and securely stored.

We only access the data necessary to provide core services—such as tracking numbers from your email—and we never retain full email content.

Questions?

For questions or concerns:

Email: privacy@kubby.io
BTG, Inc. - 8 The Green, Dover, DE 19901