This policy explains how Kubo processes information in its Android parent and child apps, on this website, and in related support services. Kubo is operated by Kunal Mehrotra, based in Uttar Pradesh, India ("Kubo," "we," "us," or "our"). Kubo is designed for transparent, parent-authorized family safety—not covert monitoring. A parent or legal guardian must set up and manage a child profile and must tell the child, in an age-appropriate way, that Kubo is installed and which features are enabled.

Information we collect and why

• Account, profile and authentication data: email address, sign-in credentials or tokens, parent and child profile details, paired-device information, and settings. We use these to create, authenticate, secure, and administer family accounts and pair parent and child devices.
• Foreground app and screen-time telemetry: installed or configured apps, the app currently in the foreground, app-open events, usage duration, screen-time totals, schedules, allowed/blocked-app rules, and device activity needed to enforce limits. Parents can view relevant activity and manage rules for linked child devices.
• Location data: when enabled by the parent or guardian, precise location (including while the child app is in the background), time-stamped location updates, last known location, location history, and geofence entry/exit events. We use this information for family location, geofence, and safety features. It is shared with the authenticated parent account(s) linked to that child profile and, when an SOS feature is used, with the parent/guardian recipients selected for that child. It is not sold or disclosed to unrelated advertisers.
• Accessibility-service data: Android AccessibilityService may detect the active app and screen changes so Kubo can apply parental-control rules, including app blocking, child lock, and screen-time enforcement. Kubo does not use AccessibilityService to record keystrokes, read password fields, or capture the contents of messages, photos, or other unrelated app content.
• VPN and web-filtering data: when web filtering is enabled, Kubo's on-device VPN service processes requested domains, URLs or network metadata, filtering decisions, timestamps, browser/app context, and custom block-list rules to block unsafe or parent-selected sites. It is not a consumer VPN service and is not used to inspect or sell the content of encrypted communications. Filter activity needed for the parent dashboard may be sent to the linked parent account.
• Device, diagnostics, and advertising data: device model, operating-system version, app version, IP-derived region, device identifiers, advertising identifiers where available, push-notification tokens, crash reports, performance data, and security or fraud signals. We use this information to deliver notifications, prevent abuse, troubleshoot, measure reliability, and serve or measure ads where ads are shown.
• Purchases: subscription status, product and transaction identifiers, and purchase or restore events. Payment-card details are processed by Google Play and are not received by Kubo.
• Support and communications: the information and attachments you choose to send us when you contact support.

Permissions and feature controls

Kubo requests permissions only for the feature that needs them. Camera access is used to scan pairing QR codes; we do not store photos or video from the camera. Location, background location, notifications, AccessibilityService, and VPN access are optional at the operating-system level, although a feature that relies on them will not work without the corresponding access. The parent can review or change Kubo settings, and the device owner can revoke permissions, in Android Settings at any time.

How we use and share information

We use the information above to operate the app, enforce family rules, provide location and SOS features, process subscriptions, send service notices, provide support, keep the service secure, comply with law, and improve reliability. We do not sell personal information or use child data for behavioral advertising.

We share data only as needed with: linked parent accounts and selected SOS recipients; service providers that process data for us; Google Play for app distribution and billing; advertising and measurement providers when an ad-supported experience is used; and authorities or other parties when required by law or needed to protect people, rights, or service security. Providers may process device identifiers, push tokens, purchase events, ad data, crash reports, or performance data to provide their services. Third- party SDK and platform providers include Google LLC and its services, such as Google Play, Google Play Billing, Firebase Cloud Messaging for push delivery where enabled, Google Mobile Ads where ads are shown, and Google Analytics for this website. Their processing is governed by their own policies as well as applicable contracts.

Legal bases and children’s data

Where privacy law requires a legal basis, we process account and feature data to perform our agreement with the parent or guardian; process safety, diagnostics, fraud-prevention, and service-improvement data for our legitimate interests where those interests are not overridden; process required records to meet legal obligations; and rely on consent for permissions and other processing where consent is required. Kubo is intended to be configured by a parent or legal guardian. By creating or linking a child profile, the parent or guardian represents that they are authorized to do so and consents to the child-data processing described here. We do not knowingly collect children’s data directly from a child without that authorization.

Retention and deletion

We keep account, pairing, and rule data while the family account is active. Location history, geofence events, app-activity, screen-time, and web-filter activity are retained for up to 30 days unless the parent deletes them sooner or a longer period is needed for a support request, security investigation, or legal obligation. When an account is deleted, we delete or de-identify associated personal data within 30 days, except that transaction and tax records may be retained for up to 7 years where required by law. Backups may persist for up to 90 days before being overwritten. You may request access, correction, or deletion by contacting us below.

Security

We use reasonable administrative, technical, and organizational safeguards, including encryption in transit, access controls, and measures intended to limit access to authorized people and providers. No system is completely secure; please protect your credentials and contact us promptly if you believe your account has been accessed without authorization.

Cookies & website analytics

Our website (thekuboapp.com) uses Google Analytics to understand how visitors find and use the site. Google Analytics sets cookies and collects standard, aggregated information such as pages visited, approximate location, device and browser type, and referring source. This helps us improve the site and our content.

This analytics applies to our website only — not to the Kubo app's core functionality. You can opt out by installing the Google Analytics Opt-out Browser Add-on or by blocking cookies in your browser settings. For more information, see Google's Privacy Policy.

Your choices and privacy rights

• Parents can review and change linked-device rules and location, SOS, filtering, and notification settings.
• Update or delete your account, or request access, correction, portability, restriction, or deletion of personal data, by contacting support.
• Adjust Android permissions in device settings at any time. Disabling a permission disables features that depend on it.
• Opt out of website analytics cookies as described above.

Contact

For privacy questions or requests, contact Kubo at support@thekuboapp.com. You may also write to Kunal Mehrotra, 152 Brahaman Puri Chowk Bazar, Bulandshahr, Uttar Pradesh 203001, India. We may update this policy as our practices or legal obligations change; the date above shows when it was last revised.