Privacy policy — Safe-Bubble

The short version: we collect only what is needed to show your family on a live map, to alert you when a child leaves the perimeter you set, and to tell you when Safe-Bubble launches. We never sell your data, never show ads, and location data stays tied to your account.

Who is responsible for your data

The data controller is BOGOR AI, an SAS with share capital of €1,000, whose registered office is at 145 chemin de Dessus, 38960 Saint-Étienne-de-Crossey, France, registered with the Grenoble Trade and Companies Register under number 105 225 825 (RCS Grenoble 105 225 825). Safe-Bubble is a trading name of BOGOR AI.

For any question about this policy or your data, write to privacy@safe-bubble.com.

What this policy covers

It applies to the Safe-Bubble app for iPhone (and the Android version when it launches), the Safe-Bubble tracker worn by your child, and the safe-bubble.com website, including the early-access form.

What we collect

Information you give us

Account details — your email address and sign-in credentials, so you can sign in and we can secure your account.
Children and trackers you add — a first name or label you choose for each child, and the identifier of any Safe-Bubble tracker you pair.
Perimeter settings — the mobile-bubble radius, fixed zones, danger zones and protected routes you configure.
Early-access sign-up — your email address, the type of phone you use (iPhone or Android) and the language of the page you signed up from.
Support messages — anything you send us when you ask for help.

Location data

Your phone’s location — used as the centre of the mobile bubble, so that “close” means close to you. It is processed to calculate the distance to each child.
Each child’s location — GPS positions sent by the Safe-Bubble tracker over its built-in SIM card, or by an iPhone used as a child unit. While it is moving, the tracker sends its position about every 3 seconds, with the time, satellite count, fix quality, speed and battery level our alert engine needs to decide whether to alert you.

Information collected automatically

Device and diagnostic data — device model, OS version and basic crash logs, to keep the app reliable.
Connection data — technical metadata needed to deliver live positions and push notifications.
Website logs — IP address, browser and pages requested, kept by our hosting provider for security. The site sets no advertising or analytics cookies. Fonts are loaded from Google Fonts, which receives your IP address when the page loads.

Why we use your data, and on what legal basis

To show your family on a live map and run the alert engine (distance, speed and trajectory analysed every 3 seconds) — performance of the contract you entered into when you subscribed.
To send critical alerts, SOS alerts and notifications — performance of the contract, and your consent to notifications, which you can withdraw in iPhone Settings.
To guide you to your child — performance of the contract; directions are provided by Apple Maps on your phone.
To tell you when Safe-Bubble launches — your consent, given when you submit the early-access form. We send one email at launch. You can withdraw consent at any time using the unsubscribe link in that email or by writing to privacy@safe-bubble.com. Your phone type is used only to measure demand for the Android version.
To operate, secure, troubleshoot and improve the service — our legitimate interest in running a reliable safety service.
To answer your support requests — performance of the contract and our legitimate interest.
To meet our legal obligations — for example accounting, and responding to lawful requests from authorities.

We do not use your data for advertising or profiling, and we make no automated decisions with legal or similarly significant effects about you.

Children’s privacy

Safe-Bubble is a tool operated by a parent or guardian: account holders are adults. A child’s device — the Safe-Bubble tracker or an invited iPhone — shares its location only with the parent accounts on your subscription. There is no child account, no advertising identifier and nothing to browse on the child view: it is a map and nothing else.

As the parent, you control which devices are on your subscription and can remove any of them at any time. We process a child’s location solely to provide the safety features you have asked for, and only for as long as the device remains on your subscription.

Who we share data with

We do not sell personal data and never share it for advertising. We share it only with the following recipients:

Within your family — a child’s location is shown to the parent accounts on your subscription.
Hosting, infrastructure and email — Amazon Web Services EMEA SARL (38 avenue John F. Kennedy, L-1855 Luxembourg), including Amazon SES to send the launch email; our servers are located in the European Union (Ireland).
Push notifications — Apple Push Notification service (Apple Inc.) for iPhone. On Android, alerts are delivered directly by our own servers, with no third-party notification service.
Tracker connectivity — 1NCE GmbH (Germany), which supplies the SIM card in the tracker and carries its position reports to our servers.
Payments — Stripe Payments Europe, Limited (Ireland), which processes card, Apple Pay and Google Pay payments; we never see your full card number.
Navigation — Apple Maps on your device, under Apple’s own privacy policy.
When legally required — to comply with the law or protect the rights and safety of users.

Each provider acts under a contract that limits it to processing data on our instructions. Where a provider processes data outside the European Economic Area (for example Apple or Stripe, in the United States), the transfer relies on the European Commission’s standard contractual clauses or on an adequacy decision.

Security

Data is transmitted over encrypted connections.
Invited phones receive scoped, expiring credentials — never a shared password.
A child invite link can be redeemed exactly once, then it is spent.
Location data is tied to your account and access is restricted to the parent accounts on your subscription.

How long we keep your data

Account data — for as long as your account is active, then 1 year after you close it.
Location history — 12 months at most, on a rolling basis. The aggregated data used for history in the app is kept for 6 months.
Early-access emails — up to 6 months after the launch email is sent, or until you unsubscribe if that is sooner.
Support emails — 3 years after your request is closed.
Website and service logs — 1 month.

You can ask us to delete your data at any time; see your rights below.

Your rights

Under the GDPR and French data-protection law you have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time without affecting earlier processing. You may also give instructions on what happens to your data after your death.

To exercise any of these rights, email privacy@safe-bubble.com. We reply within one month. You can also disable location and notification permissions at any time in your iPhone Settings.

If you believe your rights have not been respected, you have the right to lodge a complaint with the CNIL (Commission nationale de l’informatique et des libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr), or with the supervisory authority of the EU country where you live.

International transfers

Safe-Bubble is operated by BOGOR AI from France and your data is hosted in the European Union. Some of the providers listed above may process data outside the EU; the safeguards used are described in “Who we share data with”.

Changes to this policy

We may update this policy as the service evolves. We will revise the “last updated” date above and, for material changes, notify you in the app or by email.

Contact

Questions, requests or concerns? Email privacy@safe-bubble.com or visit our support page.