Skip to content

Privacy Policy

Last updated: February 14, 2026

1. Introduction

Bubbas (“we,” “us,” or “our”) operates the Bubbas mobile application and the teambubbas.com website (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

Information you provide

  • Account information (email address, display name)
  • Dog profile information (name, breed, age, photos, training goals)
  • Training session data and progress notes
  • Photos and images (dog photos during onboarding and training sessions)
  • Audio recordings (voice input during training sessions, used for transcription)
  • Video recordings (training session videos you choose to upload)
  • Chat messages and text input with the AI training coach
  • Training wins you optionally share publicly
  • Payment information (processed securely by Apple/RevenueCat — we do not store card details)

Information collected automatically

  • Device information (device type, operating system version)
  • Usage data (screens visited, features used, session duration)
  • Crash reports and performance data (via Sentry)
  • Analytics data (via Statsig, anonymized)

3. How We Use Your Information

  • Provide, maintain, and improve the Service
  • Personalize your training plan and recommendations
  • Power the AI training coach with context about your dog’s progress
  • Transcribe audio recordings to track training sessions
  • Detect your dog’s breed from photos during onboarding
  • Generate pixel art avatars of your dog
  • Process transactions and manage subscriptions
  • Send service-related communications (e.g., plan reminders, progress updates)
  • Monitor and analyze usage trends to improve the app
  • Detect and prevent fraud or abuse

4. Data Sharing

We do not sell your personal information. We may share data with:

  • AI providers — Anthropic (powers the AI training coach with your chat messages and dog profile context) and OpenAI (processes photos for breed detection, audio for transcription, and prompts for avatar generation). These providers process data to deliver features and do not use it to train their models.
  • Video hosting — Mux (stores and streams training session videos you upload)
  • Infrastructure and operations — Supabase (data storage and authentication), RevenueCat (subscription management), Sentry (error tracking and crash reports), Statsig (anonymized analytics and feature flags)
  • Household members — if you join a household, all members share access to dogs, training sessions, progress, memories, and AI coach conversations within that household
  • Public display — if you opt in, your training wins (text, dog breed, and display name) may be shown on our public website
  • Legal authorities when required by law or to protect our rights

5. Data Security

We use industry-standard security measures to protect your information, including encryption in transit (TLS) and at rest. Your data is stored on secure servers managed by Supabase with row-level security policies.

6. Lawful Bases for Processing (GDPR)

We process personal data only when we have a lawful basis under the GDPR. Depending on the context, our lawful bases include:

  • Contract: to provide the app and services you request (e.g., account creation, subscriptions, support)
  • Consent: where you choose to provide optional information or opt in to marketing communications. You can withdraw consent at any time.
  • Legitimate Interests: to improve our product, prevent fraud, secure our services, and understand how people use Bubbas (we balance these interests against your rights)
  • Legal Obligation: to comply with applicable laws, lawful requests, and regulatory requirements

7. Data Retention

We keep personal data only as long as necessary for the purposes described in this policy:

  • Account data: while your account is active and for a reasonable period after deletion to handle support requests and legal compliance
  • Billing/subscription records: as required by financial and tax laws
  • Support communications: up to 24 months to improve support quality and resolve repeat issues
  • Analytics data: up to 12 months, then aggregated or deleted

You can request deletion of your account at any time (subject to legal retention requirements).

8. Your Privacy Rights (GDPR / EEA & UK)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the GDPR:

  • Access: request a copy of the personal data we hold about you
  • Rectification: request correction of inaccurate or incomplete data
  • Erasure: request deletion of your personal data, subject to legal retention requirements
  • Restriction: request that we limit how we process your data in certain circumstances
  • Objection: object to processing based on legitimate interests or direct marketing
  • Portability: receive your data in a structured, commonly used, machine-readable format
  • Lodge a complaint: file a complaint with your local data protection authority (DPA) if you believe your rights have been violated

To exercise any of these rights, contact us at privacy@teambubbas.com. We will respond within the timeframes required by applicable law.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you may have the right to:

  • Know the categories of personal information we collect, use, and disclose
  • Request access to or deletion of your personal information
  • Correct inaccurate personal information
  • Opt out of the “sale” or “sharing” of personal information (as defined under California law)

We do not sell personal information. To submit a request, contact us at support@teambubbas.com with the subject line “California Privacy Request.”

10. Do Not Sell or Share

We do not sell or share your personal information as those terms are defined under the California Consumer Privacy Act (CCPA) or other applicable privacy laws. If you would like to exercise your right to opt out, you may contact us at privacy@teambubbas.com with the subject line “Do Not Sell or Share.”

11. Security & Breach Notification

We use reasonable administrative, technical, and organizational safeguards designed to protect personal data, including encryption in transit (TLS) and at rest. Your data is stored on secure servers managed by Supabase with row-level security policies. No method of transmission or storage is 100% secure. If we become aware of a security incident affecting your personal data, we will take steps to investigate, mitigate harm, and notify you when required by applicable law.

12. Account Deletion

You can delete your account at any time from within the app (Settings → Delete Account). When you delete your account, we permanently remove your profile, training data, conversations, photos, and videos. If you are the sole member of a household, all household data is also deleted. Data is not recoverable after deletion.

13. Children’s Privacy

Bubbas is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal data to us, contact us and we will delete it. If you are under 18, please use Bubbas only with the involvement of a parent or guardian.

14. International Data Transfers

If you access Bubbas from outside the country where our servers or service providers are located, your information may be transferred across borders. Where required, we use appropriate safeguards for international transfers, such as standard contractual clauses or other lawful mechanisms.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last updated” date.

16. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:

← Back to home