Legal

Privacy Policy

Last updated: August 24, 2026

This policy explains what Subo collects, how we use it, and the choices you have. Subo is a habit and reminder app where you post photo "proof" of tasks you complete and, if you choose, share it with friends and groups.

Information we collect

  • Account: your email, and — during onboarding — your phone number, username, and optional display name and profile photo.
  • Content you create: proof photos, task and reminder titles, and comments.
  • Social graph: your friends, friend requests, and group memberships.
  • Contacts (optional): only if you tap "Connect contacts," we read the phone numbers in your device address book to find which of your contacts already use Subo. The matching happens on our server; we do not store your address book, and you can skip this and still use the app.
  • Technical: a push-notification token, app version, and device platform, used to deliver notifications and diagnose problems.

We do not collect precise location — we strip GPS metadata from your photos before they leave your device — and we do not use third-party advertising or tracking SDKs.

How your proof photos are checked

When you submit a proof photo, we send the image to Anthropic (the maker of Claude) to check whether it matches the task you described. Anthropic processes the image to return that result and, per its commercial terms, does not use it to train its models and does not retain it any longer than needed to run the check and meet its own legal and safety obligations. This is a content check only — Subo does not perform facial recognition and does not create, extract, or store any face geometry or other biometric identifier from your photos.

How we use your information

To run the app: create your account, verify and store your proofs, power streaks and stats, deliver reminders and notifications, and show content to the friends and groups you choose. We use your email to secure your account and send account-related messages. Your phone number lets friends who have your number find you on Subo and matches the contacts you choose to connect; if we add account text messages (SMS) later, we'll ask for your consent first.

Legal bases (EU/UK). Our legal bases for processing are: performance of our contract with you (running the app you signed up for), your consent (optional choices like sharing proofs), and our legitimate interests (keeping the service secure and working). You can withdraw consent at any time.

Who we share it with

We use service providers who process data on our behalf:

  • Supabase — database, authentication, and file storage.
  • Anthropic — proof-photo checking (described above).
  • Expo / Apple / Google — push notifications and sign-in.

Other Subo users see only what you choose to share (your profile if public, and proofs you opt into friends/groups). We do not sell your personal information.

International transfers. We're based in the United States and our providers may process your data there. Where data is transferred out of the EU/UK, those providers' data-processing agreements rely on Standard Contractual Clauses to protect it.

How long we keep it

On the free plan, proof photos are retained for 30 days and then permanently deleted; Pro keeps them until you remove them. Account data is kept while your account is active. When you delete your account, your account, tasks, check-ins, and photos are removed.

Your choices and rights

You can edit your profile, make your account private, block other users, and delete your account (Profile → Delete account), which erases your data. Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your data, and to object to certain processing. To make a request, contact us at jkwak525@gmail.com. EU/UK users also have the right to lodge a complaint with their local data protection authority.

California residents: we do not sell or share personal information for cross-context behavioral advertising, and we do not discriminate against you for exercising your rights.

Children

Subo is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has used Subo, contact us and we will delete the account.

Security

Data is transmitted over encrypted connections and stored with our providers under access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Changes and contact

We may update this policy; we'll change the date above and, for material changes, notify you in the app. Questions or requests: jkwak525@gmail.com.