Privacy Policy

a) Account Information

When you register with an email address, we collect:

• Full name
• Email address
• Password (stored in hashed form — we never store your plain-text password)
• Province, City, and Area you select during signup

b) Google Sign-In

If you choose to sign in with Google, we receive from Google your name and email address only. We do not receive your Google password, contacts, files, or any other Google account data. Your Google ID is stored on our servers to link your Google account to your BubbleMake account.

c) Location Information

During account creation, you select your Province, City, and Area from a list we provide. This information is stored as part of your profile. The App does not access your device's GPS or precise real-time location at any point.

d) Merchant Information

If you register as a merchant, we additionally collect:

• Business/brand name
• Phone number
• Business description
• Brand logo or image you upload
• Offer details (title, description, pricing)

e) In-App Activity Data

To operate the BubbleMake platform, we record:

• Bubble balance and transaction history (support amounts sent and received)
• Queue position and queue history
• Interactions with brand offers

f) Device and Technical Data

To deliver push notifications, we collect:

• Firebase Cloud Messaging (FCM) device token

Our servers also process standard technical data such as IP address and request logs for security, abuse prevention, and reliability purposes.

g) Camera

The App requests access to your device camera solely to scan QR codes displayed by merchants. We do not capture, store, or transmit any photos or video. The camera is only active when you initiate a QR scan.

• To create and manage your account
• To operate the bubble support queue system
• To display your profile information to other users as required by the platform
• To verify and display merchant brand information to users
• To send push notifications about your queue status, received support, and platform updates
• To detect and prevent fraud, abuse, or violations of our Terms
• To respond to your support requests
• To comply with applicable legal obligations

Your data is stored on our backend servers running Node.js/Express with a MySQL database. Passwords are hashed and never stored in plain text. Authentication uses JSON Web Tokens (JWT) stored locally on your device. We apply reasonable technical and organisational security measures to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We do not sell, rent, or trade your personal information to third parties. We share data only in these limited circumstances:

• Firebase (Google LLC): We use Firebase Cloud Messaging to deliver push notifications. Firebase processes your FCM device token under Google's Privacy Policy.
• Legal requirements: We may disclose your information if required by law, court order, or to protect the rights and safety of our users or the public.
• Business transfers: If Blackzcode is acquired or merges with another entity, your information may be transferred as part of that transaction, subject to the same privacy protections.

We use Firebase Cloud Messaging to send you push notifications such as bubble received alerts, queue updates, and merchant approvals (for merchants). You can disable push notifications at any time through your device's notification settings. Disabling notifications does not affect your account functionality.

We retain your account data for as long as your account is active. Transaction history and queue records are retained to ensure platform integrity. If you delete your account, we will delete your personal information within 30 days, except where retention is required by law or necessary to resolve disputes.

You can request deletion of your BubbleMake account and all associated personal data at any time by contacting us at support@blackzcode.com with the subject line "Account Deletion Request". We will process your request within 30 days.

Please note that deleting your account will permanently remove your bubble balance, queue history, and profile information. This action cannot be undone.

BubbleMake is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us at support@blackzcode.com and we will promptly delete the account.

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate information
• Deletion — request deletion of your account and personal data
• Restriction — request that we restrict processing of your data
• Portability — request your data in a portable format

To exercise any of these rights, contact us at support@blackzcode.com. We will respond within 30 days.

The BubbleMake mobile app does not use browser cookies. We do not track your activity across third-party apps or websites.

The App may display merchant brand information that includes links to external websites. We are not responsible for the privacy practices of those websites. We recommend reviewing their privacy policies before providing any personal information.

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you through the App or by email. The revised policy will be posted on this page with an updated "Last updated" date. Continued use of the App after changes constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy, contact us:

• Company: Blackzcode
• App: BubbleMake
• Email: support@blackzcode.com
• Country: Pakistan