Privacy policy

Effective 8 October 2026

Bubble is a private location-sharing app for family and friends. This policy explains what information the developer of Bubble (“we”) processes, why it is used, how long it is kept, and the choices available to you.

Information we process

• Account and profile information: your email address, your name, the display name other members see, your profile colour, and an optional profile picture.
• Location information: when you enable sharing, your latest precise location, accuracy, recording time, battery level, and—when available—speed and heading. Bubble also records whether your device is inside a saved place.
• Bubble content: bubble memberships and roles, saved places, alert choices, invitations, check-ins, and arrival or departure activity.
• Tracking health: so that sharing keeps working and problems can be fixed, your phone sends a short report: its make, model, operating system and app version, whether location and background location are allowed and tracking is running, when it last updated, its battery level and charging state, and any error. Only the latest report is kept.
• Diagnostic log (only if you turn it on): in Settings you can ask Bubble to keep a log for your account: each location update and how it was handled, place alert decisions, and changes to places. It is off unless you turn it on.
• Device information: a push-notification token when you enable notifications, plus basic technical information processed by our hosting providers to operate and secure the service.

How we use it

We use this information only to provide and secure Bubble: to authenticate you, show permitted members on the map, manage saved places and invitations, detect arrivals and departures, deliver requested notifications, provide support, and diagnose service problems. We do not sell personal information, show advertising, or use your information for cross-app tracking.

Who can see your information

Your current location, battery level, profile, check-ins, and relevant activity are visible only to authenticated members of bubbles you have joined. Bubble administrators can manage membership and saved places, and can also see whether your phone is tracking properly, but they cannot change your location-sharing choice. Settings shows who can see you, bubble by bubble. The diagnostic log, if you turn it on, can be read only by the developer of Bubble.

Service providers

We use service providers to run Bubble: Supabase for authentication, database, realtime updates, and private image storage; Expo for app builds, updates, and push-notification delivery; Google for maps and place suggestions; Resend for account email; and Cloudflare for the public website, domain, and email forwarding. These providers may process technical data such as IP addresses as part of delivering and protecting their services.

How long we keep it

• Location: only each member’s latest reported location is kept, not a route history, and only while you share.
• Activity (your arrivals and departures): 30 days by default. In Settings you can shorten this to 7 days or turn it off, in which case events are kept for one day so alerts can be delivered. Shortening it deletes older entries straight away.
• Invitations: removed 30 days after they are used or expire.
• Diagnostic log: 14 days, and deleted at once if you turn it off.
• Copies of your data: a copy you request is available by email link for 24 hours and then deleted.
• Everything else (your profile, memberships and saved places) is kept while needed to provide the service, until you delete your account.

Your choices and rights

In the app, under Settings, you can:

• pause location sharing, or turn place alerts and notifications off;
• choose how long your activity is kept, and turn the diagnostic log on or off;
• see who can see you;
• download your data: we email a link to your own address that includes your profile, bubbles and their places, latest location, activity and devices;
• leave all your bubbles and erase what Bubble holds about where you have been, keeping your account;
• delete your account, which permanently removes your account, memberships, latest location, activity, push tokens and profile pictures. Because this cannot be undone, it asks you to confirm with a fresh code sent to your email, and if you are the only administrator of a bubble that has other members, you first appoint another administrator or choose to delete that bubble.

Your device settings give you further control over location, background location, photos, and notifications. You can also contact us for help with any of this, or to ask about your information.

Security and children

Bubble uses authenticated access, encrypted network connections, and access controls intended to limit information to the appropriate bubble members. No online service can guarantee absolute security.

Bubble is for people aged 13 and over. Anyone under 18 should have Bubble set up by a parent or guardian, who decides whether it is appropriate, creates or supervises the account, and manages the device’s location and notification permissions. We do not knowingly collect information from children under 13. If you believe a child under 13 has an account, contact us and we will delete it.

Changes and contact

We may update this policy as Bubble changes. The effective date above will be updated when material changes are published. Questions, privacy requests, or deletion requests can be sent to support@bubbleapp.online.