Privacy Policy

1. Overview

Bubbles (“we,” “our,” or “us”) operates a shared contact-group service that lets people swap contact information at gatherings by scanning a QR code. This Privacy Policy explains what personal information we collect, how we use it, and the choices you have.

2. Information We Collect

• Name — your display name, as entered during sign-up or profile setup.
• Email address — used for account authentication and transactional notifications.
• Phone number — collected when you add it to your profile. Used to send SMS/MMS messages on your behalf (e.g., group join confirmations) and to include in vCard contact exports shared with other group members at your direction.
• Contact card (vCard) data — any additional contact details you optionally add (e.g., social handles, job title) that you choose to share with group members.
• Usage data — basic analytics such as page views and feature interactions, collected in aggregate and not tied to your identity.

3. SMS / MMS Messaging

By providing your phone number and completing sign-up, you expressly consent to receive SMS and MMS messages from Bubbles. These messages are event-driven and may include:

• Group join confirmations and contact-share notifications
• One-time verification codes for phone number confirmation
• Occasional service-related updates (e.g., security alerts, policy changes)

Message frequency: Messages are sent only in response to actions you take. We do not send unsolicited marketing messages.

Message and data rates may apply depending on your carrier plan.

To opt out: Reply STOP to any message at any time. You will receive a one-time confirmation and no further messages will be sent.

For help: Reply HELP to any message or email us at hello@bubbles.fyi.

4. How We Use Your Information

• To provide and operate the Bubbles service
• To deliver SMS/MMS notifications you have consented to receive
• To share your contact card with other group members — only when you explicitly join a group
• To verify your identity and secure your account
• To improve service reliability and user experience

5. Sharing of Information

We do not sell, rent, or trade your personal information to third parties.

We may share data only in these limited circumstances:

• With other group members — your contact card is shared only with people in groups you joined voluntarily.
• Service providers — we use infrastructure providers (e.g., Supabase for database, Twilio or similar for SMS) that process data solely on our behalf under data processing agreements.
• Legal compliance — if required by law, court order, or to protect the safety of users or the public.

6. Data Retention & Deletion

We retain your data for as long as your account is active. You may delete your account and associated data at any time from your profile settings. Upon deletion, your personal information is removed from active systems within 30 days, except where retention is required by law.

7. Security

We use industry-standard security measures, including encrypted connections (TLS/HTTPS) and access controls, to protect your information. No method of transmission over the internet is 100% secure, but we take reasonable precautions to protect your data.

8. Children's Privacy

Bubbles is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new effective date. Continued use of Bubbles after changes constitutes acceptance of the updated policy.

10. Contact Us

For privacy questions, requests to access or delete your data, or to opt out of messaging, contact us at: hello@bubbles.fyi