Privacy policy.

Last updated: 01/01/2026

This Privacy Policy explains how Bubblio (“we”, “us”, “our”) collects, uses, and protects personal data when you use the Bubblio mobile application and related services (the “App”).

Bubblio is a family and group organisation app designed to help users manage shared tasks, calendars, lists, and communications. We are committed to protecting your privacy and complying with applicable data protection laws, including the UK GDPR and EU GDPR.

1. Who We Are

Data Controller

Bubblio Ltd

Registered in: United Kingdom

Contact email: privacy@bubblioapp.com

Support email: support@bubblioapp.com

2. Data We Collect

We apply a data-minimisation by design approach. We only collect what is necessary to operate the App.

2.1 Data You Provide

  • Email address

  • Name or nickname

  • Profile photo (optional)

  • Language and app preferences

  • Content you create or upload:

    • tasks, lists, events, messages, notes

  • Invitations sent to other users (email or link)

  • Communications with support

2.2 Data Collected Automatically

  • Device type and operating system

  • App version

  • Anonymous usage analytics (feature usage, interactions)

  • Crash and diagnostic logs

  • IP address (used for security and abuse prevention)

2.3 What We Explicitly Do Not Collect

  • No health data

  • No biometric data

  • No precise location tracking

  • No contact list harvesting

  • No advertising profiles

3. How We Use Your Data

Your data is used strictly to:

  • Create and manage accounts and groups (“Bubbles”)

  • Enable shared features (tasks, calendars, lists, chat)

  • Sync data across users and devices

  • Send service-related notifications

  • Improve performance and user experience

  • Provide customer support

  • Ensure security and prevent misuse

  • Meet legal obligations

We do not sell personal data.

4. Legal Basis for Processing (GDPR)

We process data based on:

  • Contractual necessity – to provide the App

  • User consent – for optional features (notifications, AI features)

  • Legitimate interest – security, service improvement

  • Legal obligation – compliance and record-keeping

You may withdraw consent at any time via app settings.

5. AI-Powered Features

Bubblio may offer optional AI-powered features (e.g. task suggestions, list generation).

  • AI features are opt-in

  • Inputs are processed only to provide the requested functionality

  • No user content is used to train AI models

  • AI outputs are generated automatically and should not be considered advice

Third-party AI providers are contractually bound to GDPR-compliant data handling.

6. Data Sharing & Processors

We only share data with trusted service providers, including:

  • Cloud hosting & databases (e.g. Firebase, Supabase)

  • Authentication services

  • Analytics and error monitoring

  • Payment processors (for subscriptions)

All providers operate under data-processing agreements and GDPR safeguards.

7. International Data Transfers

If data is processed outside the UK/EU, we ensure:

  • Adequate protection mechanisms

  • Standard Contractual Clauses or equivalent safeguards

8. Data Retention

  • Data is retained while your account is active

  • You may delete your account at any time

  • Deleted accounts trigger data deletion or anonymisation unless retention is legally required

9. User Roles, Families & Children

Bubblio is designed for families and shared groups.

  • Accounts are created and managed by adults

  • Children access data only via roles assigned by an adult

  • Responsibility for child-related data rests with the account holder

  • We do not knowingly collect data directly from children outside adult-managed accounts

10. Your Rights

You have the right to:

  • Access your data

  • Correct inaccurate data

  • Request deletion

  • Restrict or object to processing

  • Data portability

  • Withdraw consent

Requests can be made at: privacy@bubblioapp.com

11. Security Measures

We implement:

  • Encryption in transit and at rest

  • Role-based access controls

  • Secure authentication

  • Regular monitoring and logging

No system is risk-free, but security is built into the product design.

12. Third-Party Services

The App may integrate with external services. Their privacy policies apply independently.

13. Changes to This Policy

We may update this policy. Material changes will be communicated via the App or email.

14. Contact

privacy@bubblioapp.com

support@bubblioapp.com