Privacy Policy

Last Updated: April 2026

At Bubble, we build products on a simple belief: a couple's digital space should be completely private. This Privacy Policy explains how we handle your data — specifically, how we architect our systems to process as little of it as possible.

1. Secure Encryption

The core of Bubble is privacy. Your messages, love letters, vault files, and gallery photos are secured using industry-standard encryption. Only you and your partner can view them.

  • We cannot read your messages.
  • We cannot view your files or photos.
  • We cannot read your scheduled letters.

2. Information We Collect

To operate the Bubble application, we collect the bare minimum necessary:

  • Account Information: A secure identifier (like your email from Sign in with Apple/Google) to authenticate you and connect you to your partner.
  • Diagnostic & Device Data: Crash reports and high-level device types so we can maintain stability. This data is fully anonymized.
  • Billing Information: All transactions are handled directly by Apple (App Store) or Google (Play Store). We do not store your payment information.

3. Location & Health Data

Some features like the interactive map and period tracking require sensitive permissions.

  • Location Data: Your live location is transmitted securely and exclusively to your partner. We do not sell, broker, or archive your location history to any third parties.
  • Health Data: Period Tracking syncs via Apple Health, Samsung Health, or Google Fit on-device. Health data never leaves your device in an unprotected form and is never uploaded to our servers in plaintext.

4. Data Retention and Deletion

You have total control. Bubble includes an "Absolute Deletion" option in the app settings. Initiating this immediately and permanently purges your data from our systems. It cannot be recovered.

5. Third-Party Services

We do not use advertising frameworks. There are no ads and no tracking pixels inside the app. We may use trusted third parties purely for essential infrastructure (e.g., Firebase for authentication routing).

6. Your Rights (GDPR & CCPA)

Whether you're in the EU, California, or anywhere else globally, we grant all users the same rights: the right to access, the right to deletion, and the right to privacy. Because your content is encrypted, any data access request will yield only unreadable ciphertext, protecting your privacy completely.

7. Contact Us

Questions? Email us at bubble.js.39@gmail.com.