Privacy Policy

Last updated: 10 February 2026

Bubbl ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use the Bubbl iOS application ("the App"). By using Bubbl, you agree to the practices described in this policy.

1. Information We Collect

Account Information

When you create an account, we collect:

• Email address – used for account creation and communication
• Display name – shown in the App and to Co-Pop partners
• Profile photo – optional, stored securely

You may sign in using Apple Sign-In, Google Sign-In, or email/password. When using third-party sign-in, we receive only your name and email address as authorised by you. We do not access your Apple or Google account passwords.

User Content

We store the content you create within the App:

• Bubble titles, notes, and checklist items
• Categories and their customisations
• Due dates and reminder settings
• Photos attached to bubbles and checklist items (compressed and stored as encoded image data within your cloud database)
• File attachments and their thumbnails

When you share a bubble with a Co-Pop partner, all content within that bubble — including attached photos and checklist items — is included in the shared data and visible to your partner.

Voice Data

When you use the voice input feature:

• Audio is recorded locally on your device
• Recordings are sent to our secure backend (Firebase Cloud Functions), which forwards them to OpenAI's Whisper API for transcription
• Audio recordings are deleted immediately after transcription – we do not store your voice recordings
• The resulting text transcription may also be processed by OpenAI's language model (GPT) to extract checklist items or generate a concise title from your speech
• Only the final text (title, notes, or checklist items) is retained as part of your bubble content

Usage Analytics

We collect analytics to improve the App:

• App usage events (e.g., bubbles created, completed, shared) linked to your account identifier
• Subscription status
• Crash reports with diagnostic context (e.g., bubble count, partner count, premium status)

Analytics data is processed by Firebase Analytics and Firebase Crashlytics (Google). Your account identifier is associated with analytics events to help us understand usage patterns and diagnose issues. We do not sell or share this data with third parties for advertising purposes.

Device Information

We collect limited device information for functionality:

• Push notification tokens – stored in your account to deliver notifications to your device, updated on each app launch
• Device type and OS version – included automatically in crash reports

Aggregate Statistics

When you complete (pop) a bubble, we record an anonymous event containing only the category and timestamp. No user identifier is attached to these events. This data is used solely to display community-wide statistics within the App.

2. How We Use Your Information

We use your information to:

• Provide and maintain the App's core functionality
• Sync your bubbles across your devices via cloud storage
• Enable Co-Pop partner sharing features
• Send you push notifications for reminders, sharing requests, and partner activity
• Process voice input into text via our secure backend
• Manage your subscription through Apple's payment system
• Analyse usage patterns to improve the App
• Diagnose crashes and technical issues
• Respond to your support requests

3. Data Sharing

We do not sell your personal information. We share data only in these limited circumstances:

Co-Pop Partners

When you share a bubble with a partner, they can see that bubble's content, including its title, notes, due date, checklist items, and any attached photos. Partners can only access content you have explicitly chosen to share. You can revoke sharing at any time.

Third-Party Service Providers

We use the following services to operate the App:

• Firebase (Google) – authentication, cloud database, push notifications, crash reporting, and analytics. Firebase Privacy Policy
• RevenueCat – subscription and in-app purchase management. RevenueCat processes transaction data through Apple's App Store. RevenueCat Privacy Policy
• OpenAI – voice transcription (Whisper API) and text processing (GPT) for checklist extraction and title generation. Audio is processed and immediately discarded. Text is processed and not retained by OpenAI. OpenAI Privacy Policy

We do not use your content for advertising, training AI models, or any purpose unrelated to delivering the service.

4. Data Storage and Security

Your data is stored in Google Cloud Firestore, hosted on Google Cloud infrastructure. All data is encrypted in transit (TLS/SSL) and at rest.

Photos attached to bubbles and checklist items are stored as compressed, encoded image data within your Firestore documents. Voice audio is transmitted to our backend over HTTPS and deleted immediately after processing.

5. Data Retention

• Account data – retained until you delete your account
• Bubble content – retained until you delete individual bubbles or your account
• Voice recordings – deleted immediately after transcription (not retained)
• Text transcriptions – retained as part of your bubble content until deletion
• Pairing codes – automatically expire and are deleted after 15 minutes
• Crash reports – retained for 90 days
• Analytics events – retained as per Google's Firebase retention policies
• Push notification tokens – updated on each app launch; removed on account deletion
• Aggregate pop statistics – retained indefinitely (no personal data attached)

6. Your Rights

You have the right to:

• Access your data – all your content is visible within the App
• Delete your account and all associated data through the App's settings
• Correct your profile information at any time
• Opt out of push notifications through your device settings
• Revoke microphone, camera, or photo library permissions through your device settings
• Unshare any bubble you've shared with a partner, revoking their access

When you delete your account, we remove all your data from our servers, including your profile, all bubbles, categories, shared bubble links, push notification tokens, and any stored attachments.

To request a copy of your data or ask questions about your privacy, contact us at support@bubblapp.com.

7. Children's Privacy

Bubbl is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@bubblapp.com and we will delete it promptly.

8. Cookies and Tracking

Bubbl does not use cookies, web beacons, or cross-app tracking technologies. We do not participate in advertising networks or share data for targeted advertising.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or via email. Your continued use of Bubbl after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

support@bubblapp.com