Privacy
Pubby is an alarm, not a service. There is no account, no sign-in, no analytics, no advertising and no tracking. Nothing about you is collected, because there is nothing we would do with it.
We take your privacy seriously — seriously enough that Pubby is built to hold almost nothing about you in the first place.
What stays on your phone
Your settings — the siren you picked, how long it waits, your webhook address if you set one, whether your trial has started. They sit in the app's own private storage, are never sent anywhere, identify nobody, and go when you uninstall the app.
What Pubby asks permission for
Notifications, so it can show that guarding is on and so you can stop the alarm. Vibration. Permission to keep running while the screen is off, because a guard that sleeps is not a guard. And internet access — used only by a shared watch, or by a webhook you set up yourself. Guarding and the siren need no network at all.
Pubby never asks for your location, your contacts, the camera, the microphone, your photos or files, your phone number, or any advertising identifier.
The shared watch
This is the only part of Pubby that sends anything anywhere, and it runs only when you start it.
A shared watch puts the same alarm on a friend's screen. Your phone reports whether guarding is on or the alarm is sounding, when that last changed, and how full the battery is — and it scrambles all of it before sending. The key that unscrambles it travels only in the tail end of the link, the part browsers never send to a server. So our relay passes along something it cannot read. Whether you are being robbed is not our business.
The four words are the key. Anyone who holds the link, photographs the code or overhears the words can watch, so treat them like a spare key rather than something to say across a room you do not know.
Twelve hours after a watch ends or falls silent, everything about it is deleted and the link stops meaning anything. There is no history and no archive.
Notifications for whoever is watching with you
A phone puts a browser tab to sleep within a minute of the screen going off, so your friend can accept a notification instead. Their browser gives us an address to knock on, and we keep it for the length of the watch and no longer.
The notification is empty — a buzz and nothing else, with everything it means fetched only after they tap it. So their browser's notification service, run by Google, Mozilla or Apple, is told that something happened but never what.
Accepting also saves the watch link in their own browser, key and all, so that a tap minutes later opens the right watch. It stays on their device and goes when they clear this site's data.
Who else is involved
- Cloudflare runs the relay for us and sees what any website sees, including IP addresses. We use them for one thing — stopping anyone from opening watches in a loop — and we do not keep them.
- Google Play handles anything you buy. We are told only whether this install has been paid for, never your card, your name or your address.
- Your own webhook, if you set one up, is told which event happened and when. Nothing else, and nothing about you. You chose where it goes; what happens at the far end is between you and whoever runs it.
This website
No cookies, no analytics, no tracking. The only thing any page here stores in your browser is the watch link described above, and only if you asked for notifications.
Your rights
You can ask what we hold about you, have it corrected or deleted, object to how it is used, or ask for a copy of it.
Honestly, there is very little to ask for. We hold no name, no email address and no account. The only thing that exists outside your phone is a shared watch you started yourself, and ending it — or waiting twelve hours — erases it.
If you think we have handled something badly, write to us.
Who we are
Pubby is made by AquaSoup. For anything on this page, or anything you would rather ask than guess: aquasoup@aquasoup.com.
Changes
If this policy changes in a way that matters, the date below changes with it and the app's release notes will say so. Old versions do not quietly start doing something new.
Last updated 25 August 2026.