Privacy Policy

Last updated: 24 July 2026

This Privacy Policy explains how IsleWorks ("we", "us", "our") collects, uses, and protects your personal information when you use the Bub app ("App"). Bub is provided by IsleWorks from Australia and is available to users worldwide. We are committed to protecting your privacy in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) and, where they apply to you, other data protection laws including the European Union and United Kingdom General Data Protection Regulation (GDPR) and applicable United States state privacy laws. Wherever you live, we aim to give you the same core privacy rights, based on the GDPR standard.

1. Information We Collect

We collect the following information when you use Bub:

• Account information — your name, email address, and profile photo when you create an account
• App content — journal entries (including any mood or feelings you record), photos you add (such as bump and ultrasound photos), lists, appointments, baby names and notes, milestones, and shared couples-activity answers you create within the App
• Health, pregnancy and cycle information — if you choose to provide it: your estimated due date and pregnancy stage, and, in the pre-conception (trying-to-conceive) features, the start date of your last period, your average cycle length, a "getting ready" checklist, and — only if you turn on the optional intimacy log (which is off by default) — the dates you mark as being intimate. See Section 5 for how we treat this sensitive information.
• Usage data — how you interact with the App, including features used and session duration, and a "last active" timestamp used to keep your shared space in sync
• Device information — device type, operating system version, and app version for troubleshooting purposes
• Push notification token — a device token used to deliver push notifications to your device. This token is stored securely and used only to send you notifications from Bub.

If you sign in with Apple, we receive only the information Apple shares (name and email, at your discretion). If you sign in with Google, we receive your name, email, and profile photo from your Google account.

2. How We Use Your Information

We use your information to:

• Provide and maintain the Bub service
• Sync content between you and your partner's shared space
• Send important account and service notifications
• Improve and develop new features
• Respond to support requests

We do not sell your personal information to third parties.

Our legal bases for processing (where the GDPR applies). Where the EU or UK GDPR applies to you, we rely on the following legal bases to process your personal data:

• Consent — for health, pregnancy, and cycle information (special category data), which we process only if you choose to provide it. You can withdraw your consent at any time (see Section 9).
• Performance of a contract — to create and manage your account, provide the App, and sync your shared space.
• Legitimate interests — to keep the App secure, diagnose and fix problems, and improve our features, balanced against your rights and freedoms.
• Legal obligation — where we are required by law to process or retain certain information.

3. Shared Spaces

Bub is designed to be shared between two partners. When you create or join a shared space, the other member can see the content within that space. This includes journal entries, photos, lists, appointments, baby names, milestones, couples-activity answers, and any pregnancy or cycle information you add. Information you enter in a shared space is visible to the other member — if you do not want your partner to see particular information, do not enter it in the shared space.

You can use Bub on your own without creating an account. To share a space with a partner, each of you adds a login — Apple, Google, or email — so that your shared data stays recoverable and linked to a stable account. If you sign in with Apple, you can use "Hide My Email" to keep your real email address private from us.

4. Data Storage and Security

Your data is stored securely using Google Firebase. Your Firestore database and Cloud Functions are hosted in Australia (Sydney). File storage and authentication services are hosted by Google and may be processed in the United States. By using Bub, you consent to your data being stored and processed in accordance with this policy.

We take reasonable steps to protect your personal information from loss, misuse, and unauthorised access, including:

• Encryption — your data is encrypted in transit and at rest.
• Access controls — you must sign in to reach your data, and server-side security rules limit access to your content to you and the partner in your shared space.
• Least-privilege access — we limit access to personal data to only what is needed to operate and support the service.

Bub runs on Google Cloud and Firebase infrastructure, which is independently certified to international security and privacy standards, including ISO/IEC 27001 and ISO/IEC 27701. Bub itself does not hold these certifications. No method of transmission or storage is completely secure, and while we work hard to protect your information, we cannot guarantee absolute security.

International data transfers. Because Bub is offered from Australia and runs on Google's global infrastructure, your personal data may be transferred to and processed in countries other than your own — including the United States — whose data protection laws may differ from those where you live. Where we transfer personal data from the European Economic Area or the United Kingdom, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, which our infrastructure provider Google Cloud makes available under its data processing terms.

5. Sensitive Information

Some of the information you can enter in Bub is "sensitive information" under the Australian Privacy Act, and "special category data" under the GDPR — in particular, information about your pregnancy and reproductive health. This includes your estimated due date and pregnancy stage and, if you use the pre-conception features, the start date of your last period, your average cycle length, and your "getting ready" checklist.

Optional intimacy log. If you are trying to conceive, you can turn on an optional log to record the nights you are intimate. This is information concerning your sex life — among the most sensitive categories of data — so we treat it with particular care. It is off by default and collected only if you deliberately turn it on, it is stored privately in your shared space and visible only to you and your partner, and it is used solely to help you see intimacy alongside your fertile-window estimate. You can turn it off at any time, which immediately deletes the logged dates, and clearing your cycle data removes it too.

We collect this information only if you choose to enter it, and we use it solely to personalise your experience within the App — for example, to calculate your pregnancy week, or to show a general, estimated guide to your cycle and fertile window. By entering this information you consent to us collecting and handling it as described in this policy.

Bub does not provide medical advice. The cycle and fertile-window estimates are approximate, are based only on the dates you enter, and are not a diagnostic, contraceptive, or family-planning tool. They should not be relied on to achieve or avoid pregnancy. Always consult a qualified healthcare professional for medical advice.

This information is stored within your shared space and is visible to your partner (see Section 3). We do not use it for advertising, we do not sell it, and we do not share it with third parties other than the service providers listed in Section 6 who store it securely on our behalf. You can remove your cycle and pre-conception data at any time in the App using the "Clear my cycle data" control on the cycle screen, and all of your data is deleted when you delete your account (see Section 7).

6. Third-Party Services

Bub uses the following third-party services:

• Google Firebase — authentication, database, file storage, push notifications, and crash reporting
• Google Analytics for Firebase — pseudonymous usage and diagnostic analytics (such as which screens are opened, tied to an app-instance identifier rather than your name) to help us improve the App. We do not send your health, cycle, journal, or other content to analytics.
• Firebase Crashlytics — crash and error reporting to help us fix issues
• Google Sign-In — optional account sign-in method
• Apple Sign-In — optional account sign-in method
• RevenueCat — subscription management
• Google Fonts — fonts loaded on our website from Google's servers

Each of these services has their own privacy policy and data practices. By using Bub, you acknowledge that your data may be processed by these third parties.

We do not use your data for advertising purposes.

7. Data Retention

We retain your data for as long as your account is active. When you delete your account, your personal data and app content are permanently deleted from our systems within 30 days. You can export a copy of your data at any time from within the App under Profile → Export my data.

8. Data Breach Notification

In the event of a data breach that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches (NDB) scheme. We will notify you as soon as practicable via email or through the App.

9. Your Rights

You have the following rights over the personal data we hold about you. We make these rights available to all Bub users, wherever you live:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Remove specific sensitive data yourself — for example, clear your cycle and pre-conception data at any time using "Clear my cycle data" on the cycle screen
• Export your data (data portability) — available directly in the App under Profile → Export my data, in a structured, machine-readable format
• Object to our processing of your personal data, including processing based on our legitimate interests
• Ask us to restrict processing of your personal data in certain circumstances
• Withdraw your consent at any time — for example, by clearing your cycle data or deleting your account. Withdrawing consent does not affect processing we carried out before you withdrew it

You can delete your account at any time from within the App under Profile → Delete Account. For other requests, contact us at isleworks.com.au/support.

If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection authority. If you are elsewhere, you may have the right to complain to your local privacy regulator.

We do not send marketing emails. You may receive transactional notifications (such as account-related messages) and push notifications related to your use of the App. You can manage push notification preferences in your device settings.

10. Children's Privacy

Bub is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with their information, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or by email. Your continued use of Bub after changes are posted constitutes your acceptance of the updated policy.

12. Complaints

If you believe we have not handled your personal information in accordance with the Australian Privacy Principles, you may contact us first at isleworks.com.au/support. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

13. Contact

If you have any questions or concerns about this Privacy Policy, please contact us at isleworks.com.au/support.

14. United States — State Privacy Rights

If you live in the United States, you may have additional rights depending on your state. Under laws such as the California Consumer Privacy Act (as amended by the CPRA) and similar laws in states including Virginia, Colorado, and Connecticut, you may have the right to know about, access, correct, and delete the personal information we hold about you, and to opt out of the "sale" of personal information or its use for "targeted advertising." Bub does not sell your personal information and does not use it for targeted advertising, so there is nothing for you to opt out of.

Washington's My Health My Data Act and Nevada's consumer health data law give you specific rights over "consumer health data," which can include reproductive and cycle information. We collect this information only with your consent, we do not sell it, and you can delete it at any time using "Clear my cycle data" in the App or by deleting your account.

To exercise any of these rights, contact us at isleworks.com.au/support. We will not discriminate against you for exercising your privacy rights.