bubble
Privacy Policy
This describes exactly what Bubble collects, where it goes, and how to get rid of it. It was written against the actual code, not from a template.
What Bubble stores about you
Your account
- Your email address
- A display name and profile picture, if you signed in with Google or Apple
- A password hash if you signed up with email — never the password itself
- An identifier from Google or Apple if you used them to sign in
Your chats
- Every message you send and every answer you receive
- Chat titles, which are generated from your first message
- When each was created
Your subscription
- Whether it's active, when the period ends, and which provider handles it
- A customer or transaction id from Apple or Stripe
- How many free messages you've used
What Bubble does not store: your card number, your bank details, your password in readable form, your location, your contacts, your photos, or your device identifiers. There is no analytics SDK, no advertising, and no tracking across other apps or websites.
Where your messages go
This is the part that matters most, so it's stated plainly: the content of your messages is sent to OpenAI. There is no way to run Bubble without this — OpenAI's models are what write the answers.
Specifically, sent to OpenAI:
- The text of your message, and earlier messages in the same chat for context
- Relevant entries from Bubble's own reference knowledge base
- Your first message in a chat, to generate a title
- Your message text, to compute the numerical embedding used to search that knowledge base
If an answer needs current information, OpenAI's web search tool may send a search query derived from your question to search providers.
OpenAI's handling of that data is governed by their policies, not this one: openai.com/policies
Also contacted, and only for the purpose named:
accounts.google.comandgoogleapis.com— to verify a Google sign-inappleid.apple.com— to verify an Apple sign-inapi.storekit.itunes.apple.com— to confirm a subscription is genuine- Resend — to send your verification code when you sign up
- Stripe — only if you subscribe through Stripe rather than Apple
Your chats are never sent to any of those.
What Bubble does not do with your chats
- They are not sold, rented, or shared with advertisers.
- They are not used to train any model.
- They are not read by anyone except you, unless you ask for support and explicitly share something.
- They are not published, and they never enter Bubble's reference knowledge base.
On that knowledge base specifically: it is built entirely from questions the system generates for itself and researches on its own. Nothing you type ever goes into it. When you delete your account, it is unaffected — because there was never anything of yours in it.
Payments
If you subscribe through the App Store, Apple processes the payment. Bubble receives only a transaction identifier and whether the subscription is active. It never sees your card details.
If you subscribe through Stripe on the web, Stripe processes the payment under their own policy: stripe.com/privacy
How long it's kept
Your account and chats are kept until you delete them. There is no automatic expiry — a chat from a year ago is still there unless you remove it.
Expired login tokens are swept automatically.
Deleting your data
In the app: Settings → Delete account.
That erases your account, every chat, every message, and your subscription record immediately and permanently. There is no recovery period and no undo. You can also delete individual chats at any time by holding one in the list.
One thing to know: if you subscribed through Apple, deleting your Bubble account does not cancel the subscription — only you can, in Settings → Apple ID → Subscriptions. Cancel there first, or Apple keeps charging you for an account that no longer exists.
To request a copy of your data, or if deletion isn't working, email rylectric@gmail.com.
Security
Passwords are hashed with scrypt and a per-user random salt. Sessions use signed tokens that expire, and refresh tokens are single-use — a stolen one stops working once it's been used. Traffic to the server is over HTTPS.
No system is perfectly secure, and Bubble is a small operation. Don't put anything in a chat you would be seriously harmed by losing control of.
Children
Bubble is not intended for anyone under 13, and accounts are not knowingly created for them. If you believe a child has created an account, email the address above and it will be deleted.
Changes
If this policy changes in a way that affects what happens to your data, the date at the top changes and the app will say so before the change takes effect.