BUBBLEFIC / POLICIES & SUPPORT

Privacy Policy

Last updated: 17 October 2026

BubbleFic is a fiction reading and writing service for adults aged 18 and over. This policy explains how we handle personal information when you use the BubbleFic app and related services.

BubbleFic is operated by Daniil Bendik, individual entrepreneur, at 25 Krtsanisi, Tbilisi, Georgia. Daniil Bendik is responsible for deciding how personal information is used (the data controller). Contact us at support@bubblefic.app for privacy questions or requests.

Information we collect and why

We receive information you enter, information supplied by your chosen sign-in provider, and information generated when you use the service.

• Account and profile information: email address, account identifier, sign-in provider identifiers, authentication information, and profile details you choose to provide, such as your display name, handle, biography, avatar and cover image. We use these to sign you in, secure your account, synchronize your work and display your author profile. Apple or Google may supply your name and email, including an Apple private relay address, when you use their sign-in services.
• Stories and creative work: drafts, published stories, titles, descriptions, characters, scenes, images, GIF references, and saved AI conversations, requests and results. We use these to provide editing, storage, synchronization, publication, AI assistance and safety review. Unpublished work is not made available to other readers merely because you save it; authorized service providers may process it as described below.
• Reading and search activity: saved stories, reading position, completions, likes, story views, share actions, recent searches, discovery selections and reading preferences. We use this information to maintain your library, resume reading, synchronize devices and recommend stories. Guest activity can be stored on your device; supported guest history may be linked to your account when you sign in.
• Service usage and analytics: app activity, story impressions and opens, reading outcomes, story creation activity, paywall views and subscription state. We use account-linked events to understand how BubbleFic is used and improve discovery and features. Reports shown to administrators may be aggregated; this does not make the underlying account-linked events anonymous.
• Purchases and AI usage: App Store product and transaction identifiers, purchase and renewal dates, subscription status, refunds, credit balances, and AI request status and usage measurements. We use these to deliver purchases, reconcile credits, prevent duplicate grants, handle refunds and support customers. Apple handles payment details; we do not receive your full payment card information.
• Safety and support information: reports, moderation decisions, support correspondence, feedback, bug descriptions and screenshots you choose to send. Bug reports may include an account or guest identifier. We use these to investigate problems, enforce our Content Guidelines and respond to requests.
• Technical information: network information such as IP addresses, request times, error information, and app, operating system or device details available through service operation or a bug report. We use necessary technical information to deliver and secure the service and diagnose failures.
• Age and consent records: a device-local confirmation that you are 18 or older, and permission records for optional processing choices. The app and App Clip each store their age confirmation locally. We do not collect your date of birth for this confirmation. Older accounts may retain age-declaration and reading-preference records from the retired Mature setting until their normal retention or deletion process applies.

Information needed for account creation, saving work online or delivering purchases is required for those functions. You can decline optional profile fields, photo selection, voice input and AI assistance. Declining a permission limits the relevant feature; it does not authorize additional collection.

Public information and private work

Your public author profile and published stories are visible to other readers and may be accessible through shared links and previews. Other people may save or redistribute content you make public. Avoid publishing private information about yourself or others.

Account email addresses, unpublished drafts, AI conversations, recent search history and individual reading history are not public profile information. Authorized personnel and providers may access relevant information to operate the service, investigate safety reports or provide support. Do not use BubbleFic to store secrets or sensitive personal records.

AI processing and safety review

BubbleFic uses OpenAI through its backend for AI writing, image generation and editing, transcription, content moderation and story discovery. A request can include your instructions, relevant story or character text, conversation context, and selected or reference images. Publication review can process the complete story and its media. Uploaded profile or story images can also undergo automated review. Public story information may be converted into numerical representations to support search and recommendations.

We disclose the relevant provider, purpose and information involved and obtain explicit permission before sharing personal information with third-party AI. Acceptance of the Terms of Use alone is not that permission. You can decline optional AI tools and write manually. If you decline processing needed to review an upload or publication, that upload or publication cannot proceed through that review path; existing reading and manual writing remain available.

BubbleFic stores saved creative work and AI conversation state needed for the feature, together with usage and credit records. Processing by a provider is separate from publication to readers. This policy does not promise that providers retain nothing or that every model has identical data controls.

We have disabled OpenAI's optional sharing of API inputs and outputs, model feedback, and evaluation/fine-tuning data. Under OpenAI's published API data policy, API content is not used to train its models unless the customer opts in. This does not mean that no content is retained.

OpenAI's standard abuse-monitoring logs for text generation, image generation/editing and embeddings can contain inputs and outputs and are generally retained for up to 30 days, with longer retention possible for legal or safety reasons. OpenAI's published endpoint table lists no abuse-monitoring or application-state retention for audio transcription. Images flagged as possible child sexual abuse material can be retained for manual review. Additional storage can result from API call logging, stored features and model-specific caching. See OpenAI's API data controls.

We have disabled optional API call logging for the BubbleFic OpenAI project. This is separate from OpenAI's required abuse-monitoring, safety handling and model caching described above. Disabling the setting does not delete content previously stored, or prevent storage explicitly requested through a different API feature. We do not claim Zero Data Retention.

Voice, photos and device permissions

Microphone access is used when you choose voice input. Apple Speech may process audio on your device or on Apple's servers, depending on availability. Enhanced Voice sends your recording through BubbleFic to OpenAI to create a transcript, after your first-use permission. BubbleFic does not retain the raw Enhanced Voice recording after transcription; temporary recordings are removed after processing or fallback. The transcript can remain in an input field and become part of saved work or AI conversation history when used or saved. Provider handling is covered by the verified data terms above.

Choose Apple Speech in Profile > AI Models to stop future Enhanced Voice processing. This stops cloud voice use while that mode is selected; it does not itself erase prior transcripts or clear the saved first-use permission. Contact support to request deletion or help withdrawing a saved consent. When cloud transcription is unavailable, authorized Apple Speech may be used as a fallback.

When you select a photo, we receive the selected image for the requested upload or edit. Selecting a photo does not give us general access to your photo library. You can change microphone and speech-recognition permissions in iOS Settings. Local preferences, authentication state and caches also support app operation.

Who receives information

• Supabase and its infrastructure providers host authentication, databases, file storage and backend functions.
• OpenAI processes relevant inputs for the AI and safety functions described above.
• Apple and Google sign-in services process authentication requests when you choose them. Apple also handles App Store purchases and subscription management.
• GIPHY receives GIF search queries and network requests when you search or load its GIFs, including requests for media in stories. The service can receive IP addresses and standard request information. Do not enter confidential information into GIF searches.
• Authorized support and moderation personnel, and service providers used for support delivery, receive information needed to answer requests and review abuse.
• Legal recipients may receive information when required by law or necessary and lawful to address fraud, security incidents or threats to safety. A business transfer may involve information under appropriate safeguards and any legally required notice.

We require providers processing information on our behalf to use it only for authorized purposes and protect it to the same or an equivalent standard described in this policy and required by applicable App Store rules. Services you use directly, such as Apple payments, sign-in services and external websites, also have their own privacy terms. We disclose their roles here rather than treating their separate practices as our own.

We do not sell personal information or share it for cross-company targeted advertising. BubbleFic does not use an advertising identifier to track you across other companies' apps or websites. First-party usage measurement and recommendations still involve processing information as described above.

Retention and deletion

We keep account information and saved work while your account is active and the information is needed to provide the service, unless you delete it earlier. Reading state and recent searches are retained to support your library and synchronization until replaced, cleared or deleted with your account. We retain personal usage records only for the documented service and analytics purposes.

Our Supabase Pro database has daily backups covering the most recent seven days. These database backups contain database records and file metadata, but do not include the actual files stored through Supabase Storage. Deleting a database record from the active service does not immediately remove it from an existing daily backup. Backup copies remain until they leave the backup retention window. See Supabase's database backup documentation.

Account-linked reading/discovery analytics and AI usage and credit records are retained while your account exists, unless removed earlier in response to an applicable request. These records do not currently have a routine automatic expiry based solely on their age; account deletion removes them from active account tables. Recent story searches are capped to the newest 20 terms and can be cleared through the app.

In-app support and moderation reports remain until removed following a request, administrative review or relevant account/story deletion. Reports made as a guest and email correspondence may not be identifiable from an account-deletion request alone. Contact support with identifying information if you want those records located and assessed for deletion. Retention depends on whether the issue remains unresolved, whether follow-up is needed, and any legal or safety obligation requiring preservation.

Supabase's standard Pro platform-log retention is seven days. This applies to its platform logs, not to the analytics or AI usage records stored in BubbleFic's database. Separately exported logs, manual backups and support correspondence are assessed under their applicable purpose and legal-retention requirements; they are not covered by the platform's seven-day window.

Minimal purchase identifiers and deletion-recovery records can remain after account deletion to prevent duplicate purchase grants, handle outstanding refunds or disputes and ensure that late-arriving files are removed. These safeguards do not have an automatic expiry in the current service. Their continued necessity depends on outstanding transaction obligations and the need to prevent replay or reappearance of deleted data. They are restricted to those purposes and remain subject to applicable privacy rights and lawful retention limits.

You can request account deletion inside the app through Profile > Delete Account. This starts removal of your account, public profile, stories, drafts, saved AI conversations, associated files and account-linked reading, search and usage records from active systems. File cleanup can continue after the request is accepted. We do not require you to email support to start this process.

Limited records may remain when necessary for legal obligations, financial reconciliation, fraud prevention, preventing purchase replay or completing deletion. Any retained personal information must be restricted to that purpose and kept only for the applicable retention period. Backup copies expire according to the schedule above. Truly anonymous statistics may remain. Deletion cannot guarantee removal of copies independently saved by other people; we take additional steps where legally required.

Deleting your account or uninstalling the app does not cancel an Apple subscription. Manage or cancel it in your Apple account. Purchase rights, refund requests and any undelivered purchases are handled as described in our Terms of Use.

Your choices and rights

You can edit your profile, remove your work, manage recent searches and request account deletion through the available app controls. To request access, a copy, correction, deletion, restriction or portability of your personal information, or to object to processing, email support@bubblefic.app. We may ask for proportionate information to verify your identity, and respond within the period required by applicable law. You can use an authorized representative where local law allows.

You may withdraw consent for consent-based processing without affecting the lawfulness of earlier processing. Use available feature and device controls or contact support. Withdrawing optional consent does not require deleting your whole account. If you object to account-linked analytics or personalization, contact support; we will assess and honor your request as required by law. We do not claim there is an in-app analytics toggle unless one is available in your installed version.

You can complain to the privacy regulator where you live or another competent authority. We do not discriminate against you for exercising applicable privacy rights.

International users and legal grounds

BubbleFic is operated from Georgia. Our primary Supabase database is hosted in North Virginia, United States. Our OpenAI project is configured with Global residency, so we do not promise that AI processing is confined to the EU or another single region. Providers and their authorized subprocessors may process information in other countries, whose privacy laws may differ from yours.

Supabase's published Data Processing Addendum incorporates EU standard contractual clauses and a UK addendum for transfers to which those safeguards apply, and imposes protection obligations on its subprocessors. You can contact support for information about the safeguards relevant to your information.

OpenAI's Data Processing Addendum provides for EEA/Swiss transfers using standard contractual clauses or applicable adequacy decisions, and UK transfers using the clauses with the UK addendum. These contractual safeguards apply to processing within their scope and do not mean that all data is stored in Europe. Contact support to request information or a copy of the safeguards relevant to your data.

Where European or similar privacy rules apply, we process information to perform our agreement with you for account access, storage, synchronization and purchases; with consent for optional processing requiring consent; to meet legal obligations; and for legitimate interests in security, abuse prevention, support and service improvement where those interests do not override your rights. These grounds do not replace an explicit permission required for third-party AI sharing. We explain a new purpose before using information for it and obtain any permission required by law.

Recommendations use your reading preferences and activity to rank stories. Automated moderation can prevent publication or reject an image. You can ask for human review by contacting support with the affected story or request details.

Adults only, security and changes

BubbleFic is not intended for anyone under 18. If we learn that an underage person has an account, we restrict access and take steps to delete their personal information, subject to lawful retention requirements. Report an underage account to support.

We use reasonable technical and organizational safeguards to protect information. No system is completely secure. Contact support if you believe your account or information has been compromised.

We publish updates to this policy with a new effective date and provide additional notice of material changes where required. A policy update does not by itself authorize new consent-based processing.