Legal

Privacy Policy

This policy explains how S-K-S LLC processes personal data in connection with the Bubble Team application and messaging service.

Effective date:01092026
Contact: work@s-k-s.com.ua

1. Who operates Bubble Team

Bubble Team is operated by S-K-S LLC, 4n Velyka Kiltseva Street, Petropavlivska Borshchahivka, Kyiv Region, 08130, Ukraine. Bubble Team is a communication application based on the open Matrix protocol and connects to the Bubble Team homeserver at matrix.pokivbub.top.

This policy covers the application and infrastructure operated by S-K-S LLC. Independent third-party services and external Matrix homeservers have their own privacy practices.

2. Information we process

Account and profile

We may process a Matrix user identifier, username, display name, email address if provided, profile image, authentication information in protected form, device identifiers and information about devices signed in to an account. Passwords are not stored in readable form.

Messages and user content

To provide messaging, the service processes text messages, room names and descriptions, membership information, files, photos, videos, voice messages, reactions, polls and other content shared in rooms. Content is associated with the account that sends it.

Encryption

In end-to-end encrypted rooms, content is encrypted on the sender’s device and can normally be decrypted only by authorized participants. The homeserver still processes delivery metadata such as user, room, event and device identifiers, timestamps, encrypted payloads and synchronization information. Content in unencrypted rooms may be accessible to the homeserver operator as required to operate and administer the service.

3. Calls

To establish audio and video calls, the application and call infrastructure may process user and device identifiers, room and call identifiers, participant IP addresses, call timestamps, call type and technical connection information. Call content is not used for advertising or analytics.

4. Push notifications

Bubble Team uses Apple Push Notification service. The service may process a push token, device identifier, room or event identifiers and delivery information. Apple processes notification data under its own privacy terms. Where possible, encrypted notification content is decrypted locally by the Bubble Team notification extension.

5. Technical information

When a device connects, servers may process IP address, connection time, application and operating-system versions, request and error information, and security or abuse-prevention information. This is used to operate, protect and troubleshoot the service. Technical server logs are retained for 7 days, unless longer retention is required for a security investigation or by law.

6. What we do not collect

The current Bubble Team application does not collect device location, provide location sharing, display advertising, track users across apps or websites, use data brokers, use PostHog or Matomo analytics, automatically submit Sentry crash reports, or process in-app payments. Local diagnostic logs are not automatically uploaded.

7. Permissions

Bubble Team does not request access to device location or the iOS address book. Permissions can be changed in iOS Settings.

8. Purposes and legal bases

Data is processed to create and maintain accounts, deliver messages and calls, synchronize conversations, provide notifications, protect the service, prevent abuse, answer support requests and meet legal obligations. Depending on the circumstances, processing is based on performance of a contract, legitimate interests in operating and securing the service, legal obligations, or consent where required.

9. Sharing

We do not sell personal data. Limited data may be processed by Apple for push notifications, hosting and network providers, call relay providers, or public authorities where legally required. Providers may use data only as necessary to deliver their services.

10. Retention

Account information is retained while an account remains active. Messages and files are retained according to Bubble Team homeserver settings. Server logs are retained for 7 days. Backups may retain deleted information for up to 21 days before deletion or overwrite.

11. Account deletion

Users can initiate deletion in Settings → Account → Delete account. Deletion is irreversible and may disable the account, remove room membership, remove or anonymize profile data, request redaction of messages and remove associated encryption backup data where supported. Copies already delivered to other participants may remain in their room history. Information may be retained where required by law or necessary for security and integrity.

12. Your rights

Subject to applicable law, users may request access, correction, deletion, restriction, objection, portability or withdrawal of consent. Requests should be sent to work@s-k-s.com.ua. We may verify identity before fulfilling a request.

13. Children

Bubble Team is not intended for children below the minimum age required to consent to data processing in their country. We do not knowingly collect children’s data without legally required authorization.

14. Security

We use encrypted network connections, end-to-end encryption where enabled, protected credentials, access controls, device verification, encrypted key backup where configured, and restricted administrative access. No storage or transmission method can be guaranteed completely secure.

15. International transfers

Data is processed in Columbia. Where applicable, appropriate safeguards are used for international transfers.

16. Changes and contact

We may update this policy when the service, law or our practices change. The effective date identifies the latest version. Questions and requests may be sent to S-K-S LLC at work@s-k-s.com.ua.