Privacy Policy

Last updated: October 25, 2026

HugBear is a pair of connected teddy bears and an iPhone app. This policy explains what information HugBear collects, why, and what you can do about it. We keep it to what the bears and the app need to work.

What we collect

• Your account. When you sign in with Apple, we receive an account ID from Apple and, if you choose to share it, your email address (or Apple's private relay address).
• Your bear. Its name, a code that identifies it (stored only in scrambled, hashed form), which account owns it, which bear it's paired with, the name of the Wi-Fi network it uses, its battery level, its software version, and when it was last online.
• Hugs. When a bear is hugged and when the hug was answered, and how many times it was squeezed.
• Pairing invites. Who invited whom, and when the bears were paired. Invite codes are stored only in hashed form.
• Notifications. A notification token from Apple, so we can tell your phone when a hug arrives.
• Technical logs. Our servers keep short-lived logs of requests, such as IP addresses and times, to keep the service running and secure.

What we don't collect

• Your Wi-Fi password never reaches our servers. The app encrypts it and sends it straight to your bear, which keeps it.
• No location, contacts, photos, microphone or camera.
• No advertising, no tracking across other apps or websites, and we never sell your information.

How we use it

Only to run HugBear: deliver hugs between paired bears, show their status in the app, send hug notifications, update the bears' software, and fix problems.

Who else handles it

• Supabase hosts our database and servers.
• Apple provides Sign in with Apple and delivers notifications.

These providers may store information outside Quebec and Canada, including in the United States. We share information only with these providers, to run the service, or when the law requires it.

Your partner

The person you pair with sees your bear's name and when you hug or hug back. They don't see your email, your Wi-Fi, your bear's battery or whether it's online.

How long we keep it

We keep your information while your account exists. Battery readings are deleted after 30 days. When you delete your account, we delete your account and your bear's data, except where the law requires us to keep it.

Your rights

You can ask to see, correct or delete your information, or ask any question about it, by emailing alex@cafemonday.com. That address also reaches the person responsible for protecting personal information at HugBear.

Children

The HugBear app is not directed at children under 13, and we don't knowingly collect their information.

Changes

If we change this policy, we'll update the date above, and tell you in the app for important changes.