Privacy Policy

1. Introduction

Bubbas (“we,” “us,” or “our”) operates the Bubbas mobile application and the teambubbas.com website (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

Information you provide

• Account information (email address, name)
• Dog profile information (name, breed, age, training goals)
• Training session data and progress
• Payment information (processed securely by Apple/RevenueCat — we do not store card details)

Information collected automatically

• Device information (device type, operating system version)
• Usage data (screens visited, features used, session duration)
• Crash reports and performance data (via Sentry)
• Analytics data (via Statsig, anonymized)

3. How We Use Your Information

• Provide, maintain, and improve the Service
• Personalize your training plan and recommendations
• Process transactions and manage subscriptions
• Send service-related communications (e.g., plan reminders, progress updates)
• Monitor and analyze usage trends to improve the app
• Detect and prevent fraud or abuse

4. Data Sharing

We do not sell your personal information. We may share data with:

• Service providers who help us operate the app (Supabase for data storage, RevenueCat for subscriptions, Sentry for error tracking, Statsig for analytics)
• Legal authorities when required by law or to protect our rights

5. Data Security

We use industry-standard security measures to protect your information, including encryption in transit (TLS) and at rest. Your data is stored on secure servers managed by Supabase with row-level security policies.

6. Lawful Bases for Processing (GDPR)

We process personal data only when we have a lawful basis under the GDPR. Depending on the context, our lawful bases include:

• Contract: to provide the app and services you request (e.g., account creation, subscriptions, support)
• Consent: where you choose to provide optional information or opt in to marketing communications. You can withdraw consent at any time.
• Legitimate Interests: to improve our product, prevent fraud, secure our services, and understand how people use Bubbas (we balance these interests against your rights)
• Legal Obligation: to comply with applicable laws, lawful requests, and regulatory requirements

7. Data Retention

We keep personal data only as long as necessary for the purposes described in this policy:

• Account data: while your account is active and for a reasonable period after deletion to handle support requests and legal compliance
• Billing/subscription records: as required by financial and tax laws
• Support communications: up to 24 months to improve support quality and resolve repeat issues
• Analytics data: up to 12 months, then aggregated or deleted

You can request deletion of your account at any time (subject to legal retention requirements).

8. Your Privacy Rights (GDPR / EEA & UK)

If you are in the EEA or UK, you may have the right to: access, correct, delete, restrict processing, object to processing, and data portability. You may also have the right to lodge a complaint with your local data protection authority.

To exercise your rights, contact us at support@teambubbas.com.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you may have the right to:

• Know the categories of personal information we collect, use, and disclose
• Request access to or deletion of your personal information
• Correct inaccurate personal information
• Opt out of the “sale” or “sharing” of personal information (as defined under California law)

We do not sell personal information. To submit a request, contact us at support@teambubbas.com with the subject line “California Privacy Request.”

10. Security & Breach Notification

We use reasonable administrative, technical, and organizational safeguards designed to protect personal data, including encryption in transit (TLS) and at rest. Your data is stored on secure servers managed by Supabase with row-level security policies. No method of transmission or storage is 100% secure. If we become aware of a security incident affecting your personal data, we will take steps to investigate, mitigate harm, and notify you when required by applicable law.

11. Children’s Privacy

Bubbas is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal data to us, contact us and we will delete it. If you are under 18, please use Bubbas only with the involvement of a parent or guardian.

12. International Data Transfers

If you access Bubbas from outside the country where our servers or service providers are located, your information may be transferred across borders. Where required, we use appropriate safeguards for international transfers, such as standard contractual clauses or other lawful mechanisms.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last updated” date.

14. Contact Us

If you have questions about this Privacy Policy, contact us at support@teambubbas.com.