Privacy
Short version: Bubblance stores your email and the bubbles you make, on servers in the EU, and nothing else. It never connects to your bank, does not use trackers and does not sell or share your data.
What we store
| What | Why |
|---|---|
| Your email address | It is your sign-in, and how we send confirmation and password-reset messages. |
| Your password, as a one-way hash | To check it when you sign in. The hash cannot be turned back into your password, so nobody, including us, can read it. |
| Your bubbles, payments, savings, goals and settings | They are the app. Everything you type into Bubblance is kept so you can see it again. |
| Dates of sign-up and of each change | To show your history in order and to keep things in sync between your devices. |
That is all. Bubblance does not ask for your name, your bank, your location or anything about your device beyond what a web browser sends to any website.
What we do not do
We do not connect to your bank or any financial institution. We do not run analytics or advertising trackers. We do not sell, rent or share your data with anyone. There are no third-party ads at the moment; if that ever changes, this page will say so first and you will be able to turn ads off in Settings.
Where it is kept
Accounts and bubbles are stored with Supabase in Frankfurt, Germany (EU). The page itself is served by Netlify, which, like any web host, may keep short-lived server logs with IP addresses for security. Sign-up confirmations and password-reset emails are sent through Resend. Fonts are loaded from Google Fonts and the sign-in library from the jsDelivr CDN; loading them sends your IP address to those services, as it does on most websites. The sign-in page runs a bot check from Cloudflare (Turnstile), which sees your IP address and browser details while that page is open. Export to Excel loads the spreadsheet library from the cdnjs CDN (run by Cloudflare) the first time you export; nothing about your bubbles is sent to it.
Access to your data in the database is limited by rules on the server: only your own sign-in can read or change your bubbles, and only the people you have shared a bubble with can see that bubble.
Sharing a bubble
When you share a bubble with a code, everyone who enters the code can see that bubble, its payments and the display names of the people in it. The rest of your board stays private. You can leave a shared bubble at any time.
Cookies and browser storage
Bubblance keeps your sign-in session in your browser's local storage so you stay signed in. If you use Bubblance without an account, your bubbles are kept only in your browser's local storage and never leave your device. There are no advertising or tracking cookies.
Your rights
You can see and change everything you have entered from inside the app. You can export all of it to an Excel file from Settings. You can delete your account from Settings, under Delete account: this removes your account, your bubbles, your history and your sign-in for good, usually within minutes. If you would rather we do it for you, or you want a copy of your data in another form, email us and we will sort it out within 30 days.
If you are in the EU or UK, these are your rights of access, rectification, erasure and portability under the GDPR. The legal basis for storing your data is that it is needed to provide the service you signed up for.
Children
Bubblance is not meant for children under 16. If you believe a child has made an account, email us and we will remove it.
Changes
If this page changes in a way that matters, the date at the top changes and the app tells you in What's new.
Contact
Questions about your data: support@bubblance.com.