Subby Sync · encrypted end to end

One log for everyone who helps.

Share your baby’s log between your phone, your partner’s, a grandparent’s and the nanny’s. Every entry is locked on the phone before it’s sent, so our server only passes along boxes it can’t open.

You’ll be able to run the sync server yourself: its code goes public, under AGPL-3.0, before launch. Our hosted one at sync.subby.baby opens when the app reaches the stores.

Your phones hold the keys. Our server holds locked boxes.

Your family shares one key, and only your family’s phones have it. The server passes the boxes along and keeps them safe, but it has nothing to open them with.

What the server sees

Random ids, public keys, signatures and version numbers. Whether a box holds a child’s profile, a log entry or a phone, which phone sent it, when it arrived and how big it is. That’s what it needs to pass the right boxes to the right phones.

What it never sees

A feed, a nap, a diaper, your baby’s name, a note or a photo. Photos travel as locked boxes too.

Everything the server sees, in detail

How it works

  1. Turn on sync

    The first phone makes a family key. It’s only ever shared with phones you add.

  2. Add a phone

    Scan the QR code on a family phone, then check that both screens show the same 6-digit code.

  3. Log as usual

    Entries and photos show up on the other phones live. Android also gets a nudge to sync, with none of your log in it. iOS push is still to come.

  4. Remove a phone

    Any time. The family key changes, so a removed phone can’t read anything new.

Who’s in the family

Every phone checks the guest list.

The list of family phones is signed and chained together, entry by entry, and each phone checks it for itself. The server keeps a copy, but it can’t quietly add a phone of its own.

Recovery key · optional

Lost every phone?

Make a 24-word recovery key and keep it somewhere safe, on paper is fine. It gets your family’s log back on a new phone. We can’t do that for you, because we never had the key.

  • 1 harbor
  • 2 velvet
  • 3 orbit
  • 4 lantern
  • … 24

Our server or yours

The encryption is the same either way. The only difference is who looks after the boxes.

And you can change your mind. Move your family between our server and your own at any time, in either direction, under Sync › Move to another server. The other phones follow by themselves, nobody pairs again, and the recovery words keep working.

Hosted by us · sync.subby.babyOpens at launch
€6.99 per phone, once

We run the server, so you don’t have to think about it.

  • A 14-day free trial for the whole family. No card needed, nothing renews
  • After that, each phone that syncs needs an unlock. No subscription
  • Up to 2 GB of photos per family
  • The price isn’t final until the app is in the stores
Self-hosted · your machineAGPL-3.0
Free, no limits

Run the server yourself with Docker, on a home server, a NAS or a small VPS.

docker compose --profile https up -d --build
Self-host guide

How paying for hosted sync works

The app itself
Free and complete on one phone, with every feature and any number of children. A single parent never needs the server.
The trial
14 days per family, from when you set up sync. Every phone syncs. No card needed, and nothing renews on its own.
After the trial
A phone without an unlock keeps syncing for 48 more hours (counted from the trial’s end, or from when it joined if that’s later). After that it still gets the family’s entries and still logs on the phone, but what it logs isn’t shared until it’s unlocked. Nothing is lost: it all goes up once the phone is unlocked.
Buy its own unlock
€6.99, once. It’s tied to your store account, so you can restore it on a new phone. It stays with that store: an Android unlock doesn’t carry over to an iPhone.
Or get one as a gift
Anyone in the family can buy an unlock for another phone, say a parent for the grandparents. That unlock belongs to the family and passes on if the phone is removed.
Photos
Up to 2 GB per family on our server.
Families that stop syncing
If no phone in a family syncs for 12 months, we delete the family from our server. The app warns you from month 11. The phones keep everything.

Questions parents ask

Can you read our log?

No. The server only gets locked boxes, and the key stays with your family’s phones.

Do we need an account?

No. Phones join each other in person with the QR code. There’s no email or password.

What about photos?

They’re locked on the phone and synced like everything else.

Does it work on iPhone?

Yes, with live updates while the app is open. Push notifications to sync in the background are Android only for now.