Launch draft
This page is a working draft for launch preparation. The operator's formal legal name, registered address, governing jurisdiction, and final contact mailbox still need to be confirmed before this becomes the definitive legal notice.
Fluture · Bubbles
Privacy Policy
How Bubbles handles account, tour, purchase, and website information while you build and share virtual tours.
Last updated: October 1, 2026 · 2026-10-01
1. Scope
This draft applies to the Bubbles mobile application, the Bubbles landing website, and the optional Bubbles cloud-publishing service operated by Fluture ("Fluture", "we", "us", or "our"). It does not replace the privacy notices of Apple, Google Play, RevenueCat, Supabase, Fly.io, or other services that process information under their own terms.
2. Information processed
Account information. When you create an account, we process the email address, account identifier, and authentication/session data needed to create and secure your Bubbles account.
Tour and publishing information. A cloud publish may include your tour title, 360° scene images, hotspot links, tour and scene identifiers, publish identifier, status, and server-calculated expiry. When signed in, Bubbles automatically backs up your properties and full tours, including scene images and hotspot graphs, to private account storage. They restore on another device signed into the same account; newest edits win and deletions propagate. These private backups are separate from public cloud links. Listing photos and videos are device-only and are not synced. At registration we also record your consent to the Terms and Privacy Policy, policy version, and acceptance timestamp.
Purchase and entitlement information. Bubbles uses RevenueCat and the relevant app store to process purchases and determine whether a Bubbles Pro subscription or cloud-link purchase is available. Bubbles does not receive or store your payment-card number. The backend may process RevenueCat customer, product, entitlement, and transaction identifiers to validate a cloud publish. When you are signed in, the app also shares your account email, account identifier, sign-in method, app version, device operating system version, app language, and number of tours with RevenueCat so we can find your purchases and help you when you contact support.
Technical information. Bubbles and its service providers may process ordinary operational information such as IP address, request time, device/browser information, and error or security logs when needed to operate, protect, and troubleshoot the service. The app uses Google Firebase Crashlytics to report crashes and serious errors; a report includes device and app details, the error, recent app events (never tour titles, passwords, or session tokens), and your account identifier when you are signed in. The app also keeps a short diagnostic log on your device, which leaves the device only if you choose to send it to us. The final version of this notice will document the precise logging and retention configuration.
3. Information on the landing website
The landing website is a static marketing and download surface. In its current implementation, it has no account form, tour upload, or Bubbles-owned advertising tracker. App-store links open the relevant third-party store when those listings are configured. The hosting provider may process standard web-request information under its own policies.
4. How information is used
We use information to:
- create and authenticate accounts;
- validate cloud-publishing access and prevent reuse of one-shot purchases;
- store, display, expire, and delete cloud-published tours at your request or under the published tier rules;
- provide customer support, maintain security, and diagnose failures; and
- comply with applicable law and enforce our terms.
5. Local tours and public cloud links
Tour editing, preview, and local .zip export run on your device after tour setup. Creating a tour beyond the bundled sample requires an online account claim. Capture and stitching run on your device; captured images are not sent to a remote stitching service. The .zip export itself is created locally and is not uploaded by Bubbles. Cloud publishing uploads the tour bundle to Bubbles by your choice.
A cloud-published link is intended to be shareable. Anyone who obtains the link may be able to view the published tour and its scene images until the link is deleted or expires. Basic Links are server-tracked for 90 days, Annual Links for one year, and Bubbles Pro links remain live while the subscription is active plus the applicable seven-day grace period.
Signing out runs a final account backup and then removes tours, listing photos and videos, property records, and exports from this device. The sample tour is restored. Listing media is not backed up: export or share it before signing out. Files you already shared outside Bubbles remain where you saved them.
6. Service providers
Depending on the feature you use, information may be processed by: Supabase for authentication, database, and storage; Fly.io for backend hosting; RevenueCat and Apple or Google for purchase and entitlement services; Google Firebase for crash reporting and remote app configuration; and GitHub Pages or its supporting infrastructure for the landing website. These providers process information according to their own agreements and privacy notices.
7. Retention and deletion
Local data remains until you remove it, uninstall the app, or sign out. Private account backups remain in your account until you delete the content or account. Cloud-published content is retained while its publish is active, then removed as part of expiry or deletion processing. Account and support records may be retained as needed for security, dispute handling, legal obligations, and service integrity.
To ask about access, correction, deletion, or other privacy requests, emailcontact@homs.com.co. The final policy will add the confirmed process and any jurisdiction-specific rights.
You can delete your account in Bubbles: Account → Delete account, then confirm your password or sign in again with Apple or Google. Completed deletion permanently removes your account, cloud-published tours and stored files, private tour backups, synced properties, ownership records, and consent records. A revoked-account identifier is retained to reject old sessions; optional deletion feedback is stored without an account identifier. Deletion does not cancel store subscriptions: cancel through Apple or Google Play. See the account-deletion page for instructions and a request contact.
8. Children
Bubbles is a professional creation and publishing tool and is not directed to children. Do not use the cloud account features if you are not legally able to agree to the applicable terms in your location.
9. Security and changes
We use reasonable technical and organizational measures for the service, but no storage or transmission method is completely secure. We may update this policy as Bubbles changes. We will update the date above and, where required, provide additional notice.
Questions or requests
Contact contact@homs.com.co. For the final publication, this address must be confirmed as a monitored support and privacy contact.
