Privacy Policy

Last updated: 20 October 2026

This policy explains what Bubbleverse collects, why, and the choices you have. It covers our website (bubbleverse.co) and our WhatsApp service. Bubbleverse is operated by Bubbleverse Labs ("we", "us").

1. What Bubbleverse does

Bubbleverse helps you understand your credit-card debt. It estimates what you owe, how much interest you are paying and whether you are at risk of a debt trap, then suggests a repayment plan. We are not a bank or a lender. We do not move money, collect card payments on your behalf, or offer credit.

2. What we collect

When you use WhatsApp

  • Your WhatsApp phone number and profile name, as shared by WhatsApp.
  • Your consent choices, with the date and time you made them.
  • The card details you choose to tell us: card issuer (for example HDFC), outstanding balance, credit limit, interest rate, minimum due, due date, and payments you report.
  • Records of the messages we send you and their delivery status.

When you use the website

  • Your email address, or your Google account name and email if you sign in with Google.
  • The debt details you enter, statements you choose to upload, and your answers to the Trap Detector quiz.
  • If you subscribe to a paid plan, your subscription status. Card payments are handled by our payment provider; we never see or store your card number.
  • A cookie that recognises your browser, and basic visit data (pages viewed, time of visit).

What we never ask for. We never ask for your full card number, CVV, PIN, passwords or bank OTPs. Never share these with anyone claiming to be Bubbleverse.

3. How we use it

  • To calculate your balances, interest cost, risk score and repayment plan.
  • To reply to you and, if you agree, to send reminders.
  • To check it's you: we send a one-time code by SMS before showing stored financial details on WhatsApp.
  • To keep the service secure, prevent abuse and fix problems.
  • To understand, in aggregate, how the service is used so we can improve it.

We do not sell your data, and we do not use it for advertising.

4. Message content

We read your WhatsApp messages only to respond to them. The text of your messages is deleted as soon as it has been processed, and in any case within 24 hours. We keep only the facts you confirm (for example, "balance ₹70,000 on 11 Oct").

5. Who we share it with

We share data only with service providers that help us run Bubbleverse, and only as needed:

  • Meta (WhatsApp), to deliver messages between you and us.
  • Our hosting and database providers, to run the service and store data.
  • An SMS provider, to send verification codes.
  • An email provider, to send sign-in codes.
  • Google, if you sign in with Google, or to read a statement you upload.
  • Stripe, to process subscription payments.

We may also disclose data if the law requires it, or to protect the rights and safety of our users.

6. Where your data is stored

Your data is stored on servers that may be located outside India (currently Singapore). We take reasonable steps to protect it wherever it is processed.

7. How long we keep it

  • While your account is active, we keep the card details and history you've given us so your estimates stay accurate.
  • If you decline when we first ask for consent on WhatsApp, we delete your contact record within 30 days; if you never reply, within 7 days.
  • Copies of messages we send are cleared within 7 days of delivery.
  • When you ask us to delete your data, we erase it within 24 hours, except anything we must keep by law.

8. Your choices and rights

  • Stop messages: reply STOP on WhatsApp at any time. Reply START to turn them back on.
  • Delete your data: reply "delete my data" on WhatsApp (we'll confirm it's you first), or email us.
  • Access or correct: view and fix your details in the chat ("summary", "fix") or on the website, or email us.
  • Withdraw consent: you can withdraw consent at any time. This doesn't affect anything we did before.

These rights are provided in line with India's Digital Personal Data Protection Act, 2023.

9. Security

We use encryption in transit, access controls, and verification codes before showing stored financial details. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

10. Children

Bubbleverse is for people aged 18 and over. We do not knowingly collect data from children.

11. Changes to this policy

If we change this policy, we'll update the date above. If the change is significant, we'll tell you on WhatsApp or by email.

12. Contact and grievances

Questions, requests or complaints: aayush@bubbleverse.co.

Grievance Officer: Aayush Khandelwal, Bubbleverse Labs, aayush@bubbleverse.co. We aim to respond within 7 days.