Privacy Policy

Last updated October 18, 2026

The short version

Who we are

Stubby is an independent project run by a small team ("we", "us"). Questions about this policy: [email protected].

What we collect

WhatWhy
Your phone number or Apple ID emailTo know which conversation is yours and to reply.
Messages you send Stubby and its repliesSo it can follow the conversation. Stubby reads recent messages each time it replies, and can look back at older ones when you bring something up.
Receipt photos and expense details (merchant, amount, date, category, notes)To keep your spending log and answer questions about it.
Facts you tell Stubby about yourself (your line of work, vehicle, tools you pay for, how you like things categorized)So you don't have to repeat yourself.
Group chats you add Stubby to: the group's messages, members' numbers and the names they give, and the group's shared tabTo keep track of who paid for what and who owes who. Stubby only replies when someone says its name, and never brings up anyone's personal records in a group.
Voice memos and phone calls: the text of what you said and a short summary of each callSo Stubby can answer and remember the call alongside your texts. We don't keep call recordings.
Basic technical logs (when a message arrived, errors)To keep the service running and fix problems. These don't contain your message text.

We don't ask for bank logins, card numbers, or your Social Security number, and you shouldn't text them to Stubby.

Who processes your data

To answer you, your messages pass through these providers. Each only gets what it needs to do its job.

ProviderWhat it does
LoopMessageDelivers messages between you and Stubby: iMessage on Apple devices, regular texts (SMS/RCS) on other phones.
AnthropicRuns Claude, the AI model that writes Stubby's replies. Anthropic doesn't train its models on data sent through its API.
SupabaseHosts the database where your messages, expenses and saved facts are stored, encrypted at rest.
RenderRuns the server that connects everything.
VapiHandles phone calls to Stubby: turns speech into text and Stubby's replies into speech.

When Stubby searches the web for you, the search query (not your conversation) goes to a search provider through Anthropic.

How we protect it

Data is encrypted in transit (HTTPS) and at rest. Access to the systems that hold it is limited to the people who run Stubby, protected by two-factor sign-in, and used only to operate, secure, and fix the service. Each person's records are separated, and Stubby never shares one person's information with another.

How long we keep it

We keep your expenses and saved facts for as long as you use Stubby, because keeping your records is the point of the service. We keep conversation messages for the life of your account, so Stubby can remember what you told it months ago. If you ask us to delete your data, we erase your messages, expenses and saved facts from our database within 2-3 business days and confirm by email. Copies in backups expire within 30 days after that.

Your choices

Not financial, tax or legal advice

Stubby shares general information about money and taxes. It isn't your accountant or lawyer and can't see your whole situation, so confirm anything important with a qualified professional.

Children

Stubby isn't meant for anyone under 13 (or the minimum age in your country). If we learn a child under 13 has used it, we'll delete their data.

Changes

If we change this policy in a way that matters, we'll update the date above and tell you by text before the change applies to you.