Privacy Policy

1. Who We Are

Bubbel is a hyperlocal community app operated by Bubbel Pop UK Ltd. This Privacy Policy explains how we collect, use, and protect your personal data when you use the App. It applies to all users and is compliant with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

When you use Bubbel we may collect:

• Identity data: first name, last name, username
• Contact data: email address
• Profile data: bio, profile photo, area and interests you choose to share
• Location data: approximate area (city/district) if you set it; precise location only when you actively post a location-tagged event or request
• Content data: posts, comments, messages you send within the App
• Usage data: pages visited, features used, timestamps
• Device data: device type, operating system, push notification token

3. How We Collect Data

We collect data:

• Directly from you when you register, complete your profile, or post content
• Automatically as you interact with the App (usage and device data via Firebase Analytics and Crashlytics)

4. How We Use Your Data

We use your data to:

• Create and manage your account
• Display your profile and content to other users in your area
• Power community features: feeds, events, messaging, and Connect recommendations
• Send push notifications you have opted in to
• Improve the App through aggregated, anonymised analytics
• Detect and prevent fraud, abuse, or safety violations

5. Legal Basis for Processing

Under UK GDPR, we process your data on the following lawful bases:

• Contract: processing necessary to provide the App you have signed up for
• Legitimate interests: improving the App, preventing abuse, and providing local community features
• Consent: where we ask for specific permission (e.g. push notifications)

6. Data Sharing

We do not sell your personal data. We may share data with:

• Firebase / Google (cloud hosting, authentication, analytics, crash reporting) under Google's data processing terms
• Other users: your public profile, posts, and community activity are visible to other Bubbel users in accordance with your privacy settings

We will disclose data to law enforcement if required by law.

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required by law to retain it longer.

8. Your Rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request erasure of your data ("right to be forgotten")
• Object to processing or request restriction
• Data portability

To exercise any of these rights, use the "Send Feedback" option in Settings or contact us directly. We will respond within 30 days.

9. Cookies & Tracking

Bubbel is a mobile app and does not use browser cookies. We use Firebase SDKs which may generate anonymised device identifiers for analytics and crash reporting purposes.

10. Children's Privacy

Bubbel is not intended for children under 18. We do not knowingly collect data from anyone under 18. If you believe an underage user has registered, please contact us immediately.

11. Security

We implement appropriate technical and organisational measures to protect your data, including encrypted data transmission (TLS), Firebase Authentication for account security, and restricted access to production data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via in-app notification. Your continued use of the App after any change constitutes acceptance.

13. Contact & Complaints

If you have concerns about how we handle your data, please use the feedback option in Settings. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.