Privacy Policy

Bubble: daily show & tell. Last updated 11 August 2026.

Bubble is a private photo app for small groups. Everyone in a Bubble answers the same daily prompt with a photo and a caption, and you only see the others' answers once you have posted your own.

This policy explains what the app collects, where it is kept, and how to get rid of it. Bubble is run by Marie VandenBosch, who is responsible for the data described here.

What Bubble collects

• Your email address — used to sign you in and nothing else. Bubble has no passwords; you receive a one-time code by email.
• Your display name — chosen by you, and shown to the other people in your Bubbles.
• Your photos and captions — the responses you post to daily prompts.
• Which Bubbles you belong to, and when you joined them.

What Bubble does not collect

• No analytics or usage tracking.
• No advertising, and no advertising identifiers.
• No location data, contacts, or address book access.
• Nothing is sold or shared for marketing, by anyone, ever.

Bubble asks for camera and photo library access only when you choose a photo to post. It does not read your photo library otherwise.

Who can see your photos

Only the members of the Bubble you posted to. This is enforced by the database rather than by the app: for the current day, other members' photos are not sent to your device at all until you have posted your own.

Photos are stored privately and served through links that expire. They are not public, not indexed by search engines, and not viewable by anyone outside your Bubble.

Where your data is kept

Bubble uses Supabase for its database and photo storage, hosted in the United States (AWS, us-east-1), and Resend to send sign-in emails. Those two providers process data on Bubble's behalf and are not permitted to use it for anything else.

If you are outside the United States, your data is transferred there when you use Bubble. During the beta, Apple's TestFlight also processes your email address in order to send you the invitation.

How long it is kept

Your responses stay in a Bubble's archive so the group can look back at them. There is no automatic expiry — data is kept until you delete it.

Deleting your data

Profile → Delete account. This permanently removes your account, your display name, every photo and caption you have posted, and your membership of every Bubble. It cannot be undone.

If you own a Bubble, deleting your account also deletes that Bubble and everything in it, including other members' photos and captions. The app tells you how many people that affects before you confirm.

You can also leave a single Bubble from its settings. Leaving removes your response to the current day; earlier responses stay in that Bubble's archive.

Your rights

You can ask for a copy of your data, ask for it to be corrected, or ask for it to be deleted, by writing to privacy@bubbleshowandtell.com. Requests are answered within 30 days.

Bubble processes this data in order to provide the app you asked for. If you are in the UK or the EU and think it is being handled improperly, you can complain to your national data protection authority.

Children

Bubble is for people aged 13 and over. It is not directed at children under 13, and accounts are not knowingly created for them. If you believe a child under 13 has an account, write to the address above and it will be removed.

Security

Data is encrypted in transit. Access to photos and responses is restricted at the database level, so the rules apply to every request rather than only to the app's screens. No system is perfectly secure, and Bubble is a small independent project — please do not use it for anything you could not bear to lose.

Changes

This policy will change as Bubble does. The date at the top always reflects the current version, and anything significant will be announced in the app.