Privacy Policy
Last updated: 3 August 2026
Bublee helps families and groups coordinate without a group chat: one question, one tap. This policy explains, in plain words, what we collect, why we need it, and what we never do. It covers the Bublee mobile app and this website.
The short version
We collect the minimum needed for Bublee to work: your first name, a way to recognise you, the things you organise or answer, and the people you explicitly choose to invite.
- No advertising, no data brokers, no profiling.
- No third-party analytics or advertising SDK inside the app.
- We never upload your address book — only the contacts you pick, one by one.
- Your phone number is never stored in a readable form.
Your phone number is never stored in clear
When you sign up with a phone number, we do not keep the number itself. We store two irreversible fingerprints: a bcrypt hash, and a keyed blind index used only to tell that two people mean the same number — so an invitation reaches the right person and a duplicate account cannot be created.
Neither value can be turned back into your number: not by us, and not by anyone who could read the database.
What we collect
- Account: your first name, plus either an irreversible fingerprint of your phone number, or the identity you signed in with (Apple or Google) and, if you have one, your email address.
- Profile photo, if you choose to add one.
- What you organise: your Bubbles, your actions (participation, carpool, volunteers, task assignment, information), your moments, and the answers given to them.
- People you invite: for each person you pick, the display name you give them and an irreversible fingerprint of their number — never your whole address book.
- Children profiles you create: first name and, optionally, a photo.
- Notifications: a device token issued by Apple or Google, so a notification can reach your phone.
- Technical records: timestamps, error traces and a technical account reference, used to run and secure the service. Personal details are masked before anything is written down.
Why we use it
- To run the service: deliver each action to the right people and count the answers.
- To notify you when something needs your answer, and to remind you before a moment.
- To keep your account usable: recognise you when you come back, and prevent duplicate accounts for the same number.
- To operate, debug and secure the service.
- To meet our legal obligations.
What we never do
- We never sell, rent or share your data for advertising.
- We embed no advertising or analytics SDK in the app.
- We read no private messages — Bublee has no messaging at all.
- We never upload your address book, and we never contact people you did not pick.
- On a public invitation link, progress is shown as numbers only — never who answered what.
Who processes data for us
We rely on a small number of providers, who act only on our instructions and only for what is described here.
- Supabase — sign-in and database hosting.
- Microsoft Azure — application hosting, storage for the photos you upload, and technical records.
- Apple Push Notification service and Google Firebase Cloud Messaging — delivery of notifications to your device, nothing else.
How long we keep it
- Your account and what you organise: until you delete your account.
- Technical records: kept for a limited period to operate and secure the service. When you delete your account, the reference to it is removed from those records.
Your rights
You can access and correct your information directly in the app, and you can delete your account at any time — deletion is immediate and permanent.
Bublee is operated under Israeli privacy law (Protection of Privacy Law and the Data Security Regulations). You may also object to a specific use of your data by writing to us.
Children
Bublee is meant for adults who coordinate a group. A parent can create a profile for their child (first name, optional photo) so the child can be attached to an outing or a carpool.
A child profile is visible only to the parent who created it and to the members of the Bubble it was shared with. It is deleted together with the parent account.
Security
All traffic between the app and our servers is encrypted in transit. Phone numbers are kept only as irreversible fingerprints. Access to content is restricted by Bubble membership, and the database enforces row-level security as a second line of defence.
Changes to this policy
If we change how we handle your data, we will update this page and change the date at the top. Significant changes will be announced in the app.
Contact
For any question about your data, or to exercise your rights, write to us:
privacy@bublee.app