Privacy Policy

The short version

We collect the minimum needed for Bublee to work: your first name, a way to recognise you, the things you organise or answer, and the people you explicitly choose to invite.

• No advertising, no data brokers, no profiling.
• No third-party analytics or advertising SDK inside the app.
• To show which of your contacts already use Bublee, the app checks the phone numbers of your address book — numbers only, never names, in batches of 100. Those numbers are compared and then discarded: never stored, never logged.
• Your phone number is never stored in a readable form.

Your phone number is never stored in clear

When you sign up with a phone number, we do not keep the number itself. We store two irreversible fingerprints: a bcrypt hash, and a keyed blind index used only to tell that two people mean the same number — so an invitation reaches the right person and a duplicate account cannot be created.

Neither value can be turned back into your number: not by us, and not by anyone who could read the database.

What we collect

• Account: your first name, plus either an irreversible fingerprint of your phone number, or the identity you signed in with (Apple or Google) and, if you have one, your email address.
• Profile photo, if you choose to add one — taken with the camera or picked from your photo library, only with your permission.
• What you organise: your Bubbles, your actions (participation, carpool, volunteers, task assignment, information), your moments, and the answers given to them.
• What you add to an action: attached files (photos, PDF documents) and the comments written in answers.
• Addresses you choose to save: your home, your children’s school, and the addresses saved in a Bubble.
• People you invite: for each person you pick, the display name you give them and an irreversible fingerprint of their number. The numbers of the rest of your address book are only checked to show who is already on Bublee, and are never kept.
• People who answer through a public link without the app: their first name, their last name if they give it, and an irreversible fingerprint of their phone number, which is required to answer. Their own browser also keeps these details, number included, so they do not have to type them again next time.
• Children profiles you create: first name and, optionally, a photo.
• Notifications: a device token issued by Apple or Google, so a notification can reach your phone, and the history of the notifications you received and of the actions you have read.
• Technical records: server request logs (including the IP address, the type of device and the content of the request), error traces and a technical account reference, used to run and secure the service.

Why we use it

• To run the service: deliver each action to the right people and count the answers.
• To notify you when something needs your answer, and to remind you before a moment.
• To keep your account usable: recognise you when you come back, and prevent duplicate accounts for the same number.
• To operate, debug and secure the service.
• To meet our legal obligations.

What we never do

• We never sell, rent or share your data for advertising.
• We embed no advertising or analytics SDK in the app.
• We read no private messages — Bublee has no messaging at all.
• We never keep your address book (names are never sent, numbers are only checked), and we never contact people you did not pick.
• On a public invitation link, progress is shown as numbers only — never who answered what.

Who processes data for us

We rely on a small number of providers, who act only on our instructions and only for what is described here.

• Supabase — sign-in and database hosting.
• Microsoft Azure — application hosting, storage for the photos you upload, and technical records.
• Apple Push Notification service and Google Firebase Cloud Messaging — delivery of notifications to your device, nothing else.
• Resend — delivery to our team of the emails sent when someone reports an action.
• Some of these providers may process data outside Israel, in particular in the United States for the delivery of notifications.

International data transfers

Bublee is used in Israel, but some of the providers listed above process data outside Israel. We chose where our data lives: everything we store is hosted in the European Union.

These transfers are covered by the standard data protection terms of each provider, which commit them to protect your data and to use it only on our instructions. They do not change the Israeli privacy law Bublee is operated under, or your rights described below.

• European Union (Ireland and France): hosting of your account, what you organise, your photos and technical records (Supabase and Microsoft Azure).
• United States: delivery of notifications by Apple and Google. They only receive a device token and the short notification text, never the content of your actions or your answers.

How long we keep it

• Your account and what you organise: until you delete your account.
• Notification history: 90 days.
• Server request logs: 3 days. Error traces: a limited period, with no reference to your account.
• Database backups: erased automatically after 30 days at most. A deleted account therefore disappears from them within that period.

Your rights

You can access and correct your information directly in the app, and you can delete your account at any time — deletion is immediate and permanent.

In the app, the Me tab › Privacy lets you download a copy of your data (Export my data) and delete your account (Delete my account).

Bublee is operated under Israeli privacy law (Protection of Privacy Law and the Data Security Regulations). You may also object to a specific use of your data by writing to us.

If you are in the European Union, the GDPR also gives you these rights, and you can lodge a complaint with the data protection authority of your country.

Children

Bublee is meant for adults who coordinate a group: you must be at least 18 to create an account. A parent can create a profile for their child (first name, optional photo) so the child can be attached to an outing or a carpool.

A child profile is visible only to the parent who created it and to the members of the Bubble it was shared with. It is deleted together with the parent account.

Security

All traffic between the app and our servers is encrypted in transit. Phone numbers are kept only as irreversible fingerprints. Access to content is restricted by Bubble membership, and the database enforces row-level security as a second line of defence.

Changes to this policy

If we change how we handle your data, we will update this page and change the date at the top. Significant changes will be announced in the app.

Contact

For any question about your data, or to exercise your rights, write to us: