Privacy Policy

This Privacy Policy explains how Bubble Bites Technologies LLC collects, uses, shares, retains and protects personal data when you use BUBLBITES. It also explains your choices and rights.

1. Controller and Contact Details

Bubble Bites Technologies LLC ("Bubble Bites Technologies", "BUBLBITES", "we", "us" or "our") is the controller responsible for personal data processed through BUBLBITES.

Company information:

Legal form: Egyptian limited liability company

Commercial Registration No.: 303052

Registered office: E38, Building 57, Hassan El-Sherif Street, Eighth District, Nasr City, Cairo, Egypt

Privacy contact: privacy@bublbites.com

General support: support@bublbites.com

Legal contact: legal@bublbites.com

Our Data Protection Officer can be contacted at privacy@bublbites.com.

2. Scope

This Policy applies to the BUBLBITES mobile application, consumer-facing websites, account and deletion pages, support channels and related services.

Restaurant subscriptions purchased through the website may involve additional business-account, billing and contractual information. Where a separate restaurant privacy notice or agreement is presented, it supplements this Policy.

This Policy does not govern independent restaurants, delivery platforms, map services, app stores, payment providers or other third parties that process data for their own purposes.

3. Data We Collect

3.1 Account and age data

We may collect your name, username, email address, authentication identifiers, password credentials in protected form through our authentication provider, country, date of birth or age band, gender if you choose to provide it, account status, language and consent records.

For a user under 18, we may collect the guardian's name, email address, relationship to the user, consent decision, verification information and records showing when, how and for what period consent was given. We collect only the verification data reasonably necessary for the applicable guardian-consent process.

3.2 Profile and social data

We collect information you add to your profile, such as profile photo, biography, area or city, followers, following, blocked users, saved posts and account preferences.

3.3 User Content

We collect photographs, captions, ratings, emojis, dish names, restaurant tags, food-experience descriptions, comments and other content you create. We also process likes, follows, reports, Bite Battle votes, post history and other interactions needed to provide the social features.

User Content and related profile information are generally public unless the App clearly states otherwise.

3.4 Location data

For users aged 18 or older, and only after device permission, we may collect approximate or precise device location to show nearby restaurants, content or local discovery features. Precise coordinates are not displayed publicly.

Adults may refuse location permission and select a city, area or restaurant manually. Location permission can be withdrawn through device settings.

BUBLBITES does not request or collect precise device location from users identified as under 18. Minor accounts use manually selected or privacy-preserving area information where location context is needed.

3.5 Photos, camera and device permissions

If you choose to create a Bite or profile image, we may access the camera or photographs that you select. We do not need access to your entire photo library where the operating system allows you to select individual items.

If you enable notifications, we process a notification token and preferences so that we can send account, social, safety and service messages.

3.6 Device, log and technical data

We may collect device type, operating system, App version, language, time zone, IP address, network information, application-instance identifiers, notification tokens, timestamps, crash data, diagnostics, security logs and information about how the service performs.

3.7 Usage and analytics data

For adult users, we may collect information about screens viewed, searches, feature use, interactions and broad engagement patterns to understand and improve BUBLBITES.

For users under 18, we do not use personal data to create behavioral profiles, behaviorally target promoted content or conduct tracking that classifies or monitors the minor's behavior. We limit processing to what is necessary to operate, secure and support the requested service and to produce non-identifying aggregate statistics.

3.8 Reports and communications

We collect information that you provide when contacting support, reporting content, appealing moderation, exercising privacy rights or responding to a safety inquiry. This may include correspondence, attachments and evidence necessary to address the matter.

3.9 Restaurant representative and payment data

If you act for a restaurant, we may collect your name, work contact details, authority, restaurant information, subscription tier, invoices, tax or billing details and transaction status.

Restaurant subscription payments are made through the website and an independent payment provider. BUBLBITES does not receive or store complete payment-card numbers or security codes; the payment provider processes those details under its own privacy notice. We may receive limited transaction references, payment status and billing records.

4. Sources of Data

We obtain data:

directly from you or your guardian;

automatically from your device when a feature is used and permission has been given;

from your interactions with other users and content;

from restaurants that verify or manage their business information;

from authentication, infrastructure, analytics, crash-reporting, messaging, payment and security providers; and

from lawful public sources where needed to create or verify restaurant information.

5. Why We Use Personal Data

We use personal data to:

create, authenticate, administer and delete accounts;

verify age and obtain, record and manage guardian consent;

publish profiles and User Content at your direction;

operate Bites, Bubbles, search, ratings, follows, saves, notifications and Bite Battle;

provide nearby discovery to consenting adult users;

personalize ordinary service features for adults;

provide non-behaviorally targeted and age-appropriate service features for minors;

moderate content, investigate reports, block abuse and enforce the Terms;

detect fraud, bots, vote manipulation, security incidents and unauthorized access;

maintain, troubleshoot, analyze and improve performance;

deliver and measure clearly labelled promoted User Content;

administer restaurant subscriptions and provide aggregated or de-identified performance information;

communicate about service, account, consent, privacy and security matters;

send marketing communications where separate consent is required and obtained;

comply with legal obligations, regulatory requests and valid legal process; and

establish, exercise or defend legal claims.

6. Legal Grounds and Consent

Depending on the processing activity, we rely on:

your explicit consent or your guardian's explicit consent;

processing necessary to provide the service you request and perform our agreement with you;

compliance with legal and regulatory obligations;

protection of users, BUBLBITES and others from fraud, abuse and security threats; and

our legitimate rights and interests where they do not override your fundamental rights and freedoms.

Device location, optional profile information, direct electronic marketing and processing requiring special permission are based on consent where required. You may withdraw consent, but withdrawal does not affect lawful processing completed before withdrawal.

The submission of data needed to provide a requested core service is treated only as consent for that stated purpose. We will seek additional consent before using it for a materially different purpose where required.

7. Children and Teenagers

BUBLBITES is not intended for anyone under 13.

Before collecting data from a user aged 13 or 14, we require explicit electronic consent from a verified parent or legal guardian. The consent identifies the purpose and the period for which it is given and can be withdrawn or changed.

Users aged 15 to 17 must use BUBLBITES with guardian consent and complete the consent mechanism required during registration or later verification.

For users under 18:

we minimize account, profile and technical data;

we do not request precise device location;

we do not use personal data for behavioral advertising, behavioral profiling or tracking that classifies or monitors the minor;

promoted content is contextual or general rather than selected from a behavioral profile;

we restrict collection connected with Bite Battle and other activities to what is necessary to provide them; and

the guardian may request access, correction, restriction, withdrawal of consent or deletion through privacy@bublbites.com.

If we learn that a user is under 13 or that required guardian consent was not validly obtained, we will suspend the account and delete or restrict the data as required by law.

8. Public Information

Your username, profile photo, biography, Bites, ratings, emojis, restaurant and dish tags, comments, likes, follows and Bite Battle activity may be visible to other users and may be shared outside BUBLBITES by those users.

Do not include private information in public content. Deleting content removes it from our active service, but copies independently made by others or cached by search engines may remain outside our control.

Precise device coordinates, email address, date of birth, consent records, blocked-user list and private support communications are not displayed as public profile information.

9. Promoted User Content

Restaurants may purchase increased visibility for eligible User Content or restaurant pages. Sponsored or promoted placement is labelled and does not allow the restaurant to change the user's original rating.

We may use broad contextual factors such as the restaurant, food category, city or area selected by the user, language and current feature being viewed to place relevant promoted content.

We do not currently use an external behavioral advertising network in the App. We do not use a minor's behavioral profile to select promoted content. If our advertising model changes, we will update this Policy and seek consent where required.

10. Automated Processing and Ranking

BUBLBITES uses automated rules to rank, recommend, match, filter and moderate content; select Bite Battle pairings; detect spam or suspicious votes; and support search and discovery.

These processes affect content visibility and platform integrity. They do not make decisions producing legal or similarly significant effects about you.

You may contact support@bublbites.com if you believe an automated measure incorrectly restricted your account or content.

11. When We Share Data

We may share personal data with:

Google Firebase and related Google service providers supporting authentication, databases, storage, cloud functions, analytics, crash reporting, security and cloud messaging;

Apple and Google in connection with App distribution, device services, sign-in where enabled and store compliance;

hosting, content-delivery, email, customer-support, moderation, cybersecurity and professional-service providers;

payment and billing providers used for website restaurant subscriptions;

restaurants where you intentionally publish a tag or interaction, while limiting any non-public data shared with them;

competent authorities, courts, regulators or law-enforcement bodies where legally required or necessary to protect rights and safety;

advisers and counterparties involved in a financing, investment, merger, acquisition, restructuring or sale, subject to confidentiality and applicable law; and

another party with your direction or consent.

Participating restaurants generally receive public content and aggregated or de-identified performance information, not users' private contact details or precise device locations.

Service providers may process data only for documented purposes and must provide protection consistent with this Policy and applicable law.

12. International Processing and Transfers

Some technology providers, including Google Firebase, may process or store data outside Egypt. Consequently, personal data may be transferred to or accessed from countries in which our providers operate.

We will undertake cross-border transfers only after obtaining the consent, licence or permit and other safeguards required by Egyptian law. We will identify the relevant destinations, storage locations, purposes, categories, retention periods and security measures in our regulatory records and provider contracts.

If required approvals are not available for a processing activity, we will not enable that activity or will use an approved alternative.

13. Data Retention

We retain personal data only for as long as reasonably necessary for the stated purpose and applicable legal requirements. Our intended maximum periods are:

account and profile data: while the account is active, then deletion or anonymization from active systems normally within 30 days after a verified deletion request;

User Content and social activity: until you delete it or delete the account, subject to moderation evidence, legal holds and independent copies made by others;

guardian-consent and Terms-acceptance records: for the life of the minor's account and up to five years after closure where needed to demonstrate compliance;

reports, appeals and support records: normally up to two years after closure, or longer for serious safety, fraud or legal matters;

security and access logs: normally up to 12 months;

identifiable adult analytics data: normally up to 14 months;

invalid notification tokens: removed when detected or when the associated account is deleted; and

backup copies: isolated from ordinary use and overwritten or deleted through the backup cycle, normally within 90 days after removal from active systems.

We may retain limited records longer where required by tax, accounting, litigation, fraud-prevention, child-safety or other law. Where possible, retained data will be restricted, de-identified or made unreadable and deleted when the legal reason ends.

14. Account and Data Deletion

You can initiate account deletion in the app under Settings → Delete Account, or follow the account-deletion instructions at the top of this page. To request deletion by email, write to privacy@bublbites.com with the subject “Delete my BUBLBITES account” from the email associated with your account. If you cannot access that email, contact us at the same address so we can explain how to verify your request.

Account deletion removes or de-identifies the account and associated data from active systems, including profile information, posts, photographs, text, ratings and other User Content, unless limited retention is legally necessary.

We may verify the request to prevent unauthorized deletion. We will confirm completion using the contact method associated with the account where practicable.

A guardian may request deletion of a minor's account by contacting privacy@bublbites.com.

Deleting the App from a device does not delete the account.

15. Your Rights

Subject to applicable law, you or an authorized guardian may:

be informed about processing and obtain access to personal data;

request a copy of personal data;

correct, complete or update inaccurate data;

request deletion or erasure;

withdraw consent;

restrict processing to a specified scope;

object to processing or to certain outcomes of processing;

manage location, photos and notification permissions;

opt out of direct electronic marketing; and

be informed of a personal-data infringement where required.

Send requests to privacy@bublbites.com. We may verify identity and authority before acting. We will respond within the period required by applicable law and explain any lawful limitation or refusal.

You may also complain to the Egyptian Personal Data Protection Center or another competent authority once the applicable complaint channels are operational.

16. Security

We use technical and organizational measures designed to protect personal data, including access controls, authentication, security rules, encrypted transmission, provider encryption at rest where supported, logging, backups, staff confidentiality and incident-response procedures.

No system is completely secure. You should use a strong, unique password, protect your device and notify us promptly if you suspect unauthorized access.

If a personal-data infringement occurs, we will investigate, mitigate and provide regulatory and user notifications as required by law.

17. Communications and Notifications

Service messages include verification, security, moderation, account, consent and material policy notices. Some are necessary to operate the account.

Social notifications, such as likes, follows and Bite Battle results, can be managed through App or device settings where available.

We will send direct electronic marketing only with the consent required by law. Marketing messages will identify the sender and purpose and provide a clear method to opt out. Withdrawing marketing consent does not prevent necessary service or safety communications.

18. Third-Party Choices

Your device and operating system provide controls for photos, camera, notifications and location. Restricting a permission may limit the related feature but will not prevent use of unrelated features.

Third-party services may offer their own privacy controls. Requests concerning data controlled independently by a restaurant, app store, map provider, delivery platform or payment provider should be directed to that party.

19. Changes to This Policy

We may update this Policy to reflect changes in law, technology, providers or the service. We will publish the updated version and revise the effective date.

Where a change materially affects the processing of personal data, we will provide reasonable notice and obtain renewed consent where required. Earlier versions may be requested from privacy@bublbites.com.

20. Contact Us

Bubble Bites Technologies LLC

Commercial Registration No. 303052