Privacy Policy
Last updated: February 23, 2026
Bobbles ("we", "us", or "our") operates the Bobbles mobile application. This Privacy Policy explains what information we collect, how we use it, and your choices.
Information We Collect
Account Information
When you create an account, we collect your name, username, profile photo, bio, school, and class year. We use Apple Sign In (or Google Sign In) to authenticate you — we do not store your Apple ID or Google password.
Location Data
Bobbles collects your precise location, including in the background, to show your position on the map to your friends and to display nearby activities. You control who sees your location through in-app settings (friends only, everyone, or off). You can enable Ghost Mode to hide your location entirely.
Contacts
If you grant permission, we access your phone contacts solely to help you find friends already on Bobbles. Phone numbers are hashed (using SHA-256) before being sent to our servers — we never store your contacts' raw phone numbers.
Messages
Messages you send in activity group chats are stored on our servers to deliver them to other participants.
Usage Data
We use PostHog to collect anonymous usage analytics (e.g., app opens, features used) to improve the app. We do not engage in cross-app tracking.
Device Information
We collect your push notification token to send you notifications about friend requests, activity updates, and messages.
How We Store Your Data
Your data is stored on Supabase (cloud-hosted PostgreSQL). Profile photos are stored in Supabase Storage. Local caches on your device are temporary and limited in size.
All data is transmitted over HTTPS/TLS encryption.
How We Use Your Information
- To provide and maintain the app's features (location sharing, activities, chat, friend network)
- To find friends from your contacts
- To send you push notifications
- To improve the app through aggregated analytics
We do not sell your personal information to third parties.
Your Choices and Controls
- Location sharing: Choose who sees your location (friends only, everyone, or off) or enable Ghost Mode
- Contacts: You can deny or revoke contact access at any time in your device settings
- Notifications: You can disable push notifications in your device settings
- Account deletion: You can delete your account from within the app, which permanently removes all your data from our servers
Data Retention
We retain your data for as long as your account is active. When you delete your account, all associated data (profile, messages, location history, friendships, activities) is permanently deleted.
Children's Privacy
Bobbles is not directed at children under 13. We do not knowingly collect personal information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy within the app.
Contact Us
If you have questions about this Privacy Policy, contact us at support@bobbles.app.