Privacy Policy
Bubbla — bubbla.ai
Last updated: March 2026
1. Who we are
Bubbla Ltd ("we", "us", "our") operates the website and platform at bubbla.ai. Bubbla is a social scheduling platform that helps families discover, plan, and coordinate activities.
For the purposes of UK data protection law, Bubbla is the data controller — meaning we decide how and why your personal data is used.
Contact: privacy@bubbla.ai
Bubbla Ltd, Grosvenor House, 3 Chapel Street, Congleton, CW12 4AB.
2. What this policy covers
This policy explains what personal data we collect, why we collect it, how we use it, who we share it with, and what rights you have. It applies to everyone who uses the Bubbla website and platform.
We've written this policy in plain English because we want you to actually read it. If anything is unclear, email us at privacy@bubbla.ai.
3. What data we collect
Data you give us directly
When you create a Bubbla account, we collect:
- Your name
- Your email address
- Your postcode (used to show distances to activities)
When you use the platform, we may also collect:
- Activities you browse, save, or mark yourself as going to
- Friends and connections you add within Bubbla
- Preferences and settings you choose
- Optional child profiles you add (first name, date of birth, school) to help you plan — held under your account
Data collected automatically
When you visit bubbla.ai, our hosting platform automatically collects:
- Your IP address
- Browser type and version
- Device type
- Pages visited and time spent
- Referring website (how you found us)
This data is collected through essential cookies required for the platform to function (see our Cookie Policy for details).
Data we don't collect
- Children do not have accounts.Only parents and guardians create accounts on Bubbla. Children do not have login credentials. Any child profile is held under, and controlled by, the parent's account.
- We do not collect phone numbers, payment card details, precise GPS location, or contact list/phonebook data.
- We do not currently use any third-party analytics or advertising tracking tools.
4. Children's data
Bubbla is designed for families, but only adults (parents and guardians) hold accounts. We do not knowingly collect personal data directly from anyone under 18.
Where a parent adds a child profile (for example, to plan activities by age or coordinate with friends), that information is associated with and controlled by the parent's account. A child's name is shown to a connection only if the parent has chosen to make that child visible.
If you believe we have inadvertently collected personal data from a child, please contact us immediately at privacy@bubbla.ai and we will delete it.
5. Why we use your data and our legal basis
Under UK GDPR, we need a lawful basis for processing your personal data. Here's what we use and why:
| What we do | Why | Legal basis |
|---|---|---|
| Create and manage your account | So you can use Bubbla | Performance of a contract |
| Show you relevant local activities | Core platform functionality | Performance of a contract |
| Enable social features (friends, Bubbles, shared plans) | Core platform functionality | Performance of a contract |
| Send essential service emails (sign-in links, notifications) | To operate the platform | Performance of a contract |
| Send product updates and feature announcements | To keep you informed about Bubbla | Legitimate interest (with opt-out) |
| Monitor platform performance and fix issues | To keep Bubbla running smoothly | Legitimate interest |
| Respond to your support requests | To help you | Performance of a contract |
| Comply with legal obligations | Where required by law | Legal obligation |
We will never use your data to build advertising profiles, sell to third parties, or make automated decisions that significantly affect you.
6. Who we share your data with
Other Bubbla users
When you use Bubbla's social features, certain information is visible to other users you connect with — such as your name, the activities you've shared, and your group memberships. You control who you connect with.
Activity providers
Bubbla is not a booking platform and does not process payments. If you choose to book an activity, you do so directly on the provider's own website — Bubbla does not share your details with the provider.
Service providers (data processors)
We use the following third-party services to operate Bubbla:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database and authentication | AWS London (eu-west-2), UK |
| Vercel | Application hosting and content delivery | EU / global edge |
| Resend | Email delivery (sign-in links and notifications) | EU / USA |
| Google Maps Platform | Converting postcodes to map coordinates | USA |
| Anthropic | Extracting activity details from a URL you choose to import | USA |
These providers act as data processors on our behalf and are contractually required to protect your data. Where a provider processes data outside the UK, that transfer is covered by Standard Contractual Clauses (SCCs) or an equivalent safeguard.
Law enforcement
We may share data if required by law, court order, or to protect the safety of our users.
We never share your data with
- Advertisers
- Data brokers
- Marketing platforms
- Any third party for their own marketing purposes
7. International data transfers
Your account data is stored with Supabase on Amazon Web Services infrastructure in the UK (London / eu-west-2). Some processors we rely on (such as email delivery and the URL-import service) may process limited data outside the UK.
Where data leaves the UK, those transfers are protected by:
- Standard Contractual Clauses (SCCs) — legally binding agreements approved by the UK and EU for international data transfers
- Encryption in transit and at rest — your data is encrypted both in storage and as it moves between your device and our servers
8. How we protect your data
We take the security of your data seriously. Our platform includes:
- Encryption at rest — your data is encrypted in the database using strong, industry-standard encryption
- Encryption in transit — all data between your browser and Bubbla is protected via HTTPS/TLS
- Row-level security— access controls at the database level ensure users can only see data they're authorised to access
- Automated backups — your data is backed up with point-in-time recovery
- No passwords to steal — we use magic-link sign-in, so there are no passwords stored that could be leaked
No system is 100% secure, but we continuously monitor and improve our security measures.
9. How long we keep your data
We keep your personal data for as long as you have an active Bubbla account. If you delete your account, we will delete your personal data within 30 days, except where we need to retain it for legal or regulatory purposes.
10. Your rights
Under UK GDPR, you have the following rights over your personal data:
- Access — You can request a copy of the personal data we hold about you.
- Rectification — You can ask us to correct inaccurate data.
- Erasure— You can ask us to delete your data (the "right to be forgotten").
- Restriction — You can ask us to limit how we use your data.
- Portability — You can request your data in a machine-readable format.
- Objection — You can object to us processing your data based on legitimate interest.
- Withdraw consent — Where we rely on consent, you can withdraw it at any time.
To exercise any of these rights, email privacy@bubbla.ai. We will respond within one month.
If you're not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113
11. Cookies
Bubbla uses essential cookies required for the platform to function (such as keeping you logged in). We do not currently use any analytics, advertising, or tracking cookies. For full details, see our Cookie Policy.
12. Changes to this policy
We may update this policy from time to time. If we make significant changes, we'll notify you by email or through a notice on the platform. The "last updated" date at the top of this page will always show the most recent version.
13. Contact us
If you have any questions about this policy or how we handle your data:
Email: privacy@bubbla.ai
Bubbla Ltd, Grosvenor House, 3 Chapel Street, Congleton, CW12 4AB.