Privacy Notice

Operator and contact

Scalar Pty Ltd operates Unbubble. Contact support@unbubble.cc for privacy questions, complaints, access or correction requests, or deletion problems. This notice describes the information handled by the currently available service. Feature availability is shown in your account.

Information we use

We use account and verified email details to register members, secure accounts and send service notices. Passwords are stored as hashes. Session identifiers and login activity secure account access. We process IP addresses for request rate limits and security checks; local rate-limit identifiers are hashed. We use member-provided profile choices, profile information, birth details and saved calculation information to provide the features you choose, including discovery and compatibility indicators. Birth details stored in your Unbubble account are encrypted at rest and are not made available to other members simply because they pay for membership.

If you save a phone number, we store it encrypted for the phone controls. SMS verification is currently unavailable; saving a number does not verify it or make it an account recovery method.

We receive the information you send to support when asking for help, a refund, a privacy response or a moderation appeal. Send only what is necessary for your request; do not send passwords or verification tokens.

We handle connection requests, consent and visibility choices, messages and uploaded media to provide member interactions. We keep security, moderation, block and report records to protect members and enforce restrictions. We record Terms versions and acceptance times. Billing identifiers, invoices, charges, refunds, disputes and associated operation records support payments, cancellation, reconciliation and legal obligations. The separate referral ledger records necessary attribution, commission balances and financial adjustments. Your own referral benefit can indicate that an invited member’s first payment was confirmed; a commission amount and recording time can reveal the qualifying payment amount and timing. The referral panel does not disclose that member’s billing details, scores or verification evidence.

Facebook account-control verification

When Facebook verification is available in your account, it verifies control of a Facebook account, not real-world identity, account age or friend count. Only link an account you control. Facebook supplies its basic public-profile permission; Unbubble requests only your app-scoped account ID and never fetches your name, photo, email, friends, birthday, posts or contacts. While your link is active, we keep the Meta app ID, a keyed digest of your app-scoped Facebook ID, your linked Unbubble account, verification time, policy version and validity state. Codes, tokens and raw Facebook replies are discarded after validation.

A valid link adds 30 identity and 15 profile points while it remains valid. One Facebook account may be linked to only one active Unbubble account at a time. Unlinking, revoking access on Facebook or deleting your Unbubble account removes the binding and those points; later fresh linking is permitted. Facebook verification has no role in referral reward or commission eligibility, and previously earned referral benefits are preserved. Verification evidence and OAuth state are excluded from new recovery backups. Other protected recovery copies follow the deletion safeguards and rolling 30-day expiry described below.

Initially, linking may be limited to designated reviewer accounts outside referral relationships. Your account shows whether linking is available.

Visibility and service providers

Your available visibility and consent choices control what other members can access. A connection or purchase does not grant access for every purpose. Blocking, withdrawal of consent and block-and-report separation restrict access. Saved users remain private.

Stripe processes purchases and subscription payments. Unbubble retains the necessary transaction and customer identifiers; payment processing also involves Stripe’s own handling and retention. Email delivery uses the configured mail infrastructure. Cloudflare Turnstile runs browser security checks to distinguish people from automated traffic and validates the resulting security token. Unbubble’s calculation and passport services process the information necessary to provide their features. We do not publish private inputs as part of compatibility indicators. These indicators assist discovery and do not guarantee a relationship.

Your account, content and deletion

You can use account controls to update supported information, change visibility, withdraw available grants, delete uploaded media, export your own information and permanently delete your account. Account deletion requires password and explicit confirmation. Contact support if a control fails or you need help with an access or correction request.

Deletion removes private account data, birth records and current verification bindings; ends sessions, connections and permissions; and queues related passport and calculation retirement. Unauthorised or connection-dependent shared records are removed. Previously permitted shared records may remain redacted, attributed to a deleted profile, only while an authorised remaining member retains them or they serve an active shared feature. We remove them when that purpose ends. We cannot remove copies independently saved outside Unbubble.

Deletion initiates stopping subscription renewal. A provider failure may leave this operation pending for administrator resolution. The Stripe customer is deleted after pending billing obligations are resolved. Deletion does not confirm a cancellation or refund has completed. Necessary financial records follow their separate schedule below.

Retention

Retained recovery copies use a rolling 30-day retention period and then securely expire. We do not currently create scheduled routine backups. Before a restored recovery copy serves members, deletion records are applied to prevent deleted information being restored.

Ordinary security and operational logs are retained for 90 days. These logs exclude raw birth details, message content, secrets and verification tokens.

Ordinary general support correspondence is retained for 30 days after the request closes. Correspondence needed as moderation evidence or for a financial obligation follows the applicable moderation or financial schedule below. Documented applicable holds may extend retention.

Moderation evidence is retained for 24 months after case closure and is restricted to authorised staff. Moderation records linked to an unresolved refund or renewal operation are kept until that operation is resolved. Minimal block and report restriction records remain while needed to enforce the restriction. Unnecessary supporting content is removed under the moderation limit.

Erasure records contain only identifiers needed to prevent restoration. We retain them until the last retained recovery copy capable of restoring the deleted data expires, plus 30 days. We inspect all retained restore-capable copies and preserve deletion protection while an older copy remains.

Permitted redacted shared records remain only for their continuing authorised member or shared-feature purpose, as described above.

Necessary minimal financial records and identifiers, including moderation-related refund and renewal operations and referral financial records, are retained for seven calendar years after covered transactions complete, with extensions for unresolved obligations or documented legal holds. Account deletion does not restart this period. Expired financial details and identifiers are purged after applicable holds end. This schedule does not apply to birth records, social profiles or verification evidence. Stripe may retain historical transactions under its own obligations.

Documented incident or legal holds may extend a relevant retention period. We review holds and delete expired records after the hold ends.

Changes

We publish each new privacy notice with its version and actual effective date on this page. Material changes to Terms are notified and require fresh acceptance before they apply. Your statutory rights remain available.