Privacy Policy

The short version

Bubble is private by design. Only the people in your bubble see your posts — there's no public feed and no scraping. We collect the bare minimum to run the service, and we let you take everything with you or delete it on request. Bubble is supported by ads served by Google AdMob; what AdMob sees (and, more importantly, what it doesn't) is described in "Advertising" below.

What we collect

When you sign up, we collect your email, display name, and password (stored hashed — we can never read it). When you use Bubble, we store the photos, captions, and comments you post, the bubbles you join, and who you're friends with. We also keep technical logs of errors and abuse signals for a short period.

What we don't collect

We don't read EXIF metadata from your photos. We don't run third-party analytics SDKs to profile how you use the app. We don't have a public feed, so what you post isn't indexed by search engines. The one third-party SDK we do embed is Google AdMob, which serves the ads — see "Advertising" below for what it collects and how to limit it.

Who sees your content

Posts go to the people in the bubble you posted to — nobody else. Comments default to bubble-visible; you can mark a comment private so only the post author sees it. Photos are served from our backend over signed URLs; they aren't publicly indexable. We never share the content of your posts, comments, or photos with advertisers or AI training pipelines.

Advertising

Bubble shows ads served by Google AdMob (operated by Google Ireland Limited and Google LLC). To deliver and measure those ads, AdMob receives technical signals from your device: your IP address, your device's advertising identifier (IDFA on iOS, Android Advertising ID on Android), device and OS information, the ad units shown, and your interactions with them. Google uses these signals as a separate data controller under its own privacy policy — see How Google uses information from sites or apps that use our services.

What AdMob does not receive from us: your email address, your display name, your friends list, the contents of your posts, comments, or photos, or which bubbles you're in. We don't share that data with any advertiser, and we don't use it to target ads.

If you're in the UK, EEA or Switzerland, the first time the app loads ads we'll show you a Google-provided consent prompt where you can accept or reject personalised advertising — non-personalised ads still run if you decline. On iOS, Apple's App Tracking Transparency prompt also applies: if you choose "Ask App Not to Track", AdMob will only show non-personalised ads. You can change your choice or reset your advertising identifier at any time in your device settings (iOS: Settings → Privacy & Security → Tracking; Android: Settings → Google → Ads).

How we use what we collect

Email: sign-in, password reset, verification, and important service notices. Display name + avatar: shown to your friends and the people in your bubbles. Posts + comments: shared only with the bubble you chose. Error logs: diagnosing crashes and abuse.

How long we keep it

Posts and photos are automatically deleted at the end of each bubble's cycle, with copies kept only in your personal memories archive on your device. Notifications are deleted 24 hours after you read them. Account details and your friends list persist until you delete your account, at which point everything we hold about you is removed.

Your rights

Under UK / EU data protection law you have the right to access, correct, delete, or take a portable copy of your data, and to object to how we use it. You can edit your profile and delete your account from Settings; for an export or anything else, email hello@bubbleapp.org and we'll respond within 30 days.

Where your data lives

Our backend runs on a VM hosted in the EU. Backups go to Cloudflare R2, also in the EU. Transactional email is sent via Resend. We don't transfer your data outside the regions these vendors operate in.

Children

Bubble is not intended for users under 13. If you believe we've collected information from a child under that age, please email us and we'll delete the account.

Changes

If we change this policy in a material way, we'll prompt you to review the new version on next sign-in. You can always read the current version inside the app under Settings → Privacy Policy.

Contact

Questions? Want a data export, correction, or deletion? Email hello@bubbleapp.org. We aim to respond within 30 days.