Privacy Policy
Effective date: September 23, 2026 · Version 1.4
Bubble Watch (“the App”, “we”, “us”) is published by Stormylab LLC. This policy explains what the App does and does not collect. The short version: the App has no accounts, asks for no personal information, and keeps your choices on your device.
What we do NOT collect
- No account, no login, nothing that identifies you. You can use the App without signing in. We do not ask for your name, email, phone number, or any identifier.
- No financial account access. The App never connects to your bank or brokerage. When you tell the App which funds you hold (the “Your Holdings” feature), those selections are stored only on your device and are never transmitted to us. We never see balances, account numbers, or credentials — there is no such connection to make.
- No advertising and no cross-app tracking. The App does not use an advertising identifier (Apple’s IDFA or Android’s Advertising ID), does not present App Tracking Transparency prompts, and does not track you across other apps or websites. (
NSPrivacyTracking = false.)
Data the App reads
The App displays impersonal, published market and government data (see the App’s in-app About & Legal screen for source attributions). It requests this data anonymously from our backend. These requests are not tied to your identity and contain no personal information.
On-device data
The following is stored on your device only and is removed when you delete the App:
- Your fund/holding selections (used to personalize the exposure view).
- Your preference for whether to show the launch disclaimer again.
- A locally cached copy of the public data so the App works offline.
Third-party service providers
The App uses the service providers below, each for one job. Crash reporting and usage analytics are on for everyone who uses the App — there is no in-app switch for them — and each provider receives only what its job needs. We do not sell data to anyone.
| Provider | When it applies | What it receives |
|---|---|---|
| Apple | If you buy on iPhone or iPad | The purchase transaction (a one-time unlock), handled entirely by the App Store. We never see your payment details. |
| Google Play | If you buy on Android | The purchase transaction (a one-time unlock), handled entirely by Google Play. We never see your payment details. |
| RevenueCat | Purchase management | Your purchase status and an anonymous app-user identifier and device identifier, used to unlock what you paid for, restore purchases, and count sales. |
| Sentry | Crash & error reporting | Crash reports and technical diagnostics (device model, OS version, app version, stack traces, performance timings), grouped by a random identifier for this installation. Used only to fix bugs. We run Sentry with personally-identifying data collection turned off (sendDefaultPii: false), and we additionally strip the contents of your interactions before a report leaves the device — console output is dropped entirely, and the text of taps and on-screen actions is removed, so anything you typed in the App cannot reach us. |
| PostHog | Product analytics | Anonymous usage events only, grouped by a random identifier for this installation — which screens are viewed, feature interactions (opening the paywall, a purchase started / completed / restored, accepting the disclaimer, selecting a company, applying an app update), and non-identifying aggregate counts (e.g. how many holdings you have selected — never which ones, which stay on your device). No name, email, account, or advertising identifier; events are never tied to you (we do not call identify()). Used only to understand usage and improve the App. PostHog also uses the network address each event arrives from to work out an approximate location (country and city); we don’t use it, and an upcoming app update turns it off. |
| Expo | App updates | When the App checks for an update: the app version, the platform, and a random identifier for this installation, used to deliver updates and roll them out gradually. |
The App does not send push notifications and collects no push token. There is no notification permission prompt, because there is nothing to ask for.
Each provider maintains its own privacy practices. We configure them for the minimum data necessary and, where offered, with tracking disabled.
Children
The App is for adults aged 18 and over, and is offered only in the United States. It is not directed to children, and we do not knowingly collect information from anyone under 18. (In any case the App collects nothing that identifies anyone personally.)
Your choices
- Delete the App to remove all on-device data (selections, preferences, cache).
- Contact us to ask questions about this policy.
Changes
We may update this policy as the App evolves. Material changes will be reflected by a new effective date at the top of this page.
Contact
Questions about privacy: support@bubblewatch.app.