Privacy Policy
Effective date: 31 October 2026 · Version 0.3.0
Bubi Family lets families share their location with each other from their own devices and by their own choice. There is no hidden monitoring: everyone who shares their location can see the app, gets a persistent notification while sharing is on, can pause sharing at any time and can leave a circle. We show no ads, we do not work with ad networks and we do not sell your personal data.
This policy explains what data we process and why when you use the Bubi Family mobile app and the family.bubiapps.com pages. Users in Türkiye can find the detailed notice in the KVKK Notice; the rules for using the app are in the Terms of Use and subscription rules in the Subscription Terms.
1. Data controller
Bubiapps Bilgi Teknolojileri ARGE Ltd. Şti. (Bubiapps Information Technologies R&D Ltd.), Gribucak Mah. Alkaya Sk. No: 9/5, Melikgazi / Kayseri, Türkiye ("BubiApps", "we"). For any privacy question or request: privacy@bubiapps.com or in writing to the address above.
2. What data we process
| Category | Data | When |
|---|---|---|
| Account | Display name, e-mail address, sign-in provider (Google, Apple, e-mail), user ID, profile photo (optional), language and time zone, year of birth (age check) | Sign-up and profile |
| Precise location | Latitude/longitude, accuracy, speed, heading, time of recording | While location sharing is on; if you allow it, also when the app is closed or not in use |
| Location history | Location points and stops during the day | While sharing is on |
| Device status | Battery level, charging state, activity type (walking, in a vehicle, etc.; with the optional activity permission) | Together with location |
| Circle content | Circles, memberships, places (home, school, etc.), arrival/departure events, check-in and SOS records | When you or circle members create them |
| Messages | Text and photos in circle chat | When you send them |
| Device | Notification token (FCM), platform, app version | When you open the app |
| Purchases | Subscription status, product, store, renewal/expiry date (we never receive card details) | When you subscribe |
| Diagnostics | Crash reports, performance measurements | While the app runs |
| Usage measurement | In-app events (e.g. screen opened, place added) | Only if you consent to measurement |
We do not access your contacts, photo library or microphone. We do not collect advertising identifiers (AAID/IDFA).
3. Why we process it and legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Creating your account, signing in, creating circles and inviting people | Account, device | Performance of a contract |
| Showing your location only to members of the circles you choose; arrival/departure, low battery, SOS and check-in notifications | Precise location, history, device status, circle content | Performance of a contract; you start sharing and can stop it at any time |
| Chat | Messages | Performance of a contract |
| Managing subscriptions and circle premium | Purchases | Performance of a contract; legal obligation for tax and accounting records |
| Security, abuse prevention, debugging | Diagnostics, device, rate-limit records | Legitimate interest |
| Usage measurement to improve the product | Usage measurement | Consent (Explicit Consent Notice); without consent no measurement happens |
| Age check | Year of birth | Legal obligation and legitimate interest |
We do not use your data for automated decisions or profiling that produce legal effects concerning you.
4. Who sees your location
- Your location is visible only to members of the circles you belong to and share with.
- The "Who sees me" screen in the app lists, per circle, who sees which data.
- You can pause sharing with one tap, turn it off per circle or leave a circle. These controls are free.
- While sharing in the background, a persistent notification is shown on your phone.
5. Service providers (processors)
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Google (Firebase: Authentication, Firestore, Cloud Functions, Storage, Cloud Messaging, Crashlytics, Performance, Remote Config, App Check; Google Analytics for Firebase only with consent) | Hosting, sign-in, notifications, diagnostics | The data in this policy | Database and functions in the EU (eur3, europe-west1); support and some services in other countries including the US |
| Google Maps Platform | Map display | Location and device data needed to show the map | US and other countries |
| RevenueCat, Inc. | Subscription status management | User ID, purchase data | US |
| Apple App Store / Google Play | Payment and subscription | The store processes the payment; we never receive card details | The store's country |
| Transistorsoft (location library) | Collecting location on the device | Runs on your device; sends no data to us or to Transistorsoft | Your device |
Providers process data only on our behalf and on our instructions. We do not disclose your data to third parties for advertising or marketing. We may disclose information to competent authorities where the law requires it.
6. International transfers
Our main database is in the EU, but some of the providers above process data outside Türkiye and the EU, including in the US. These international transfers rely on safeguards under Article 9 of Turkish Law No. 6698 and, where applicable, Chapter V of the GDPR (e.g. standard contractual clauses). Details: KVKK Notice.
7. Retention
| Data | Period |
|---|---|
| Location history | Free: visible for 24 hours, automatically deleted within 48 hours. Premium: 30 days. Never kept longer than 30 days. |
| Latest location | Updated while sharing; deleted when you leave the circle or delete your account |
| Arrival/departure and other events | 30 days |
| Circle membership | Until you leave the circle, are removed from it or delete your account |
| Messages and photos | Until you delete them or the circle is deleted. Leaving the circle does not delete them; the remaining members can still see them. When you delete your account, your messages and photos in circles with other members are not deleted; they are anonymized by removing the author information |
| Places | Until a circle member deletes them or the circle is deleted. Leaving the circle does not delete them |
| Device record | 60 days after last use |
| Subscription event summaries | 90 days; accounting records for the statutory period |
| Account deletion request | Until you cancel it or your account is deleted 7 days later |
| Account deletion audit record | Record without identity, 1 year |
You can delete your location history from the app at any time.
8. Your rights
You have the right to access, correct and delete your data, to restrict or object to processing, to receive a copy of your data and to withdraw consent. Your rights in Türkiye are listed in the KVKK Notice. Send requests to privacy@bubiapps.com; we reply within 30 days at the latest. You may also complain to the Turkish Personal Data Protection Authority or the data protection authority where you live.
9. Deleting your account
You can delete your account in the app with Delete my account on the Me tab or on the family.bubiapps.com/delete-account page. Your request is recorded and your account is permanently deleted after 7 days (deletion runs once a day, so at the latest on day 8). Within those 7 days you can cancel the request by signing in to the app or by writing to privacy@bubiapps.com, and you can keep using your account. After the 7 days, deletion can't be undone. Deletion covers your sign-in account, profile, location data, device records and your customer record at the subscription provider. Your chat messages and photos in circles with other members are not deleted; they are anonymized by removing the author information. The chat of a circle where you are the only member is deleted with the circle. Circles you own are handed over to another member, or deleted if no members remain. If you have an active subscription, deleting your account does not cancel the store subscription; cancel it in the store (Subscription Terms).
10. Children
Bubi Family is for users aged 13 and over. We do not allow anyone under 13 to create an account and we do not keep their data. Users aged 13–17 should use the app with the knowledge and approval of a parent or guardian. If you learn that a child under 13 has created an account, write to privacy@bubiapps.com and we will delete it.
11. Security
Data is encrypted in transit; access is limited by server rules that allow only members of the same circle. Our staff access user data only for support and security, and only as far as needed. If a data breach occurs, we notify the authority and you within the periods required by law.
12. Regional notes
- EU/EEA and UK: The bases above are GDPR Art. 6(1)(b), (c), (f) and (a) for consent. No EU representative has been appointed.
- United States: Precise location is sensitive data under some state laws; we process it only to provide the service. We do not sell personal data and do not share it for targeted advertising.
13. Changes
When we change this policy we update the version number and date; we announce material changes in the app and ask for your approval again where required.
14. Contact
Bubiapps Bilgi Teknolojileri ARGE Ltd. Şti. (Bubiapps Information Technologies R&D Ltd.) · Gribucak Mah. Alkaya Sk. No: 9/5, Melikgazi / Kayseri, Türkiye · privacy@bubiapps.com