Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

We collect information you provide when you create an account, use the Platform, or communicate with us:

• Account Information: Name, email address, phone number, password, profile photo.
• Profile Information: Interests, neighborhood/location, bio, preferred activities.
• Identity Verification: If identity verification features are introduced, we may collect government-issued ID and selfies (processed by Stripe Identity).
• Payment Information: If payment features are introduced, we may collect credit/debit card details and billing address (processed by Stripe).
• Content: Group posts, comments, photos, event descriptions, messages.
• Communications: Emails, support requests, feedback you send to us.

1.2 Information Collected Automatically

When you use the Platform, we automatically collect certain information:

• Device Information: Device type, operating system, unique device identifiers, browser type.
• Usage Data: Features used, pages viewed, events browsed, search queries, time spent.
• Location Data: Approximate location based on IP address; precise location if you grant permission.
• Log Data: IP address, access times, app crashes, system activity.

1.3 Information from Third Parties

• Stripe: If these features are introduced, we may receive payment processing and identity verification results (verified/not verified status, not raw ID images).

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide the Platform: Create and maintain your account, match you with local Bubbles and events, process bookings and RSVPs.
• Process Payments: If payment features are introduced, we will use your data to collect Seat Fees, process refunds, and send payouts.
• Safety and Verification: Verify identity, prevent fraud, enforce Community Guidelines, investigate safety concerns.
• Communications: Send booking confirmations, event reminders, cancellation notices, and important account updates.
• Improve the Platform: Analyze usage patterns, fix bugs, develop new features, improve search and recommendations.
• Legal Compliance: Comply with applicable laws, respond to legal requests, protect our rights.

Important: We do not sell your personal information. We do not use your data for third-party advertising. Your information is used to power your Bubble experience — nothing more.

3. How We Share Your Information

3.1 With Other Members

When you join a Bubble or RSVP to an event, other group members may see your name, profile photo, and relevant profile information. Bubble Leaders can see the members of their group and RSVP lists for their events.

3.2 With Venue Partners

If venue partnership features are offered, when you book a venue time slot, the Venue Partner receives your name and the details necessary to confirm your booking (such as group size and arrival time). Venue Partners do not receive your full profile, payment details, or identity verification data.

3.3 With Service Providers

We share information with third-party service providers who perform services on our behalf:

• Stripe: If payment or identity features are introduced, for payment processing and identity verification.
• Analytics (Amplitude/Firebase): Platform analytics and performance monitoring.
• Cloud Hosting: Data storage and infrastructure.
• Communication Services: Email delivery, push notifications.

These providers are contractually required to use your information only for the services they provide to us.

3.4 For Legal Reasons

We may disclose your information if required by law, legal process, or government request, or if we believe disclosure is necessary to protect the rights, property, or safety of Bubble, our Members, or the public.

3.5 Business Transfers

If Bubble is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4. Your Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request what personal information we have collected about you, including categories and specific pieces of data.
• Right to Delete: You can request that we delete the personal information we have collected from you, subject to certain exceptions.
• Right to Opt-Out: You have the right to opt out of the sale of your personal information. Note: Bubble does not sell personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
• Right to Correct: You can request that we correct inaccurate personal information we maintain about you.

To exercise any of these rights, contact us at privacy@trybubble.io or through your account settings. We will respond to verified requests within 45 days.

5. Location Data

Bubble is a hyperlocal platform, and location data is central to how it works. Here's how we handle it:

• Approximate Location: We use your IP address to determine your general area for showing relevant Bubbles and events near you.
• Precise Location: If you grant permission, we use your device's GPS to provide more accurate results. You can revoke this permission at any time in your device settings.
• Neighborhood Matching: We use location data to match you with Bubbles and events in your neighborhood. We do not share your precise location with other Members.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Specific retention periods:

• Account Data: Retained while your account is active; deleted within 30 days of account deletion request.
• Payment Records: If payment features are introduced, records will be retained for 7 years for tax and legal compliance.
• Identity Verification: Verification status retained; raw ID images are not stored by Bubble (processed by Stripe).
• Usage/Analytics Data: Retained in aggregated, anonymized form indefinitely for product improvement.
• Communications: Support communications retained for 2 years after resolution.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Secure payment processing through Stripe (PCI DSS compliant) when payment features are available.
• Access controls limiting employee access to personal data on a need-to-know basis.
• Regular security assessments and monitoring.

No system is completely secure. While we strive to protect your information, we cannot guarantee absolute security. If we become aware of a data breach that affects your personal information, we will notify you as required by applicable law.

8. Children's Privacy

The Platform is not intended for anyone under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe a child under 18 has provided us with personal information, please contact us at privacy@trybubble.io.

9. Third-Party Links and Services

The Platform may contain links to third-party websites or services that are not owned or controlled by Bubble. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and, where appropriate, by sending you an email notification. Your continued use of the Platform after changes become effective constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, you can reach us at:

• Email: privacy@trybubble.io
• For CCPA requests: privacy@trybubble.io