Privacy at Bubbs

Short version: Bubbs keeps the emails you forward for a while and then deletes them (a booking goes a week after its trip), keeps the plans it read from them, shows them to you and the people you share a trip with, and deletes the lot when you ask (backups catch up within 7 days).

What Bubbs keeps

The emails you forward. When you forward a booking to your Bubbs address, Bubbs stores the email and its attachments (a PDF ticket, a screenshot) so it can read them, and so you can see where a plan came from.

What it read from them. From each email Bubbs pulls out the plan: what’s booked, where, when, the vendor, the confirmation code, and a few short quotes from the email that show where each detail came from. That’s what you see on your trip, and it stays after the email’s gone.

What you tell it. Your home, what you’ve said you like and don’t, notes you add, photos you pick for a trip’s cover, and the other addresses you’ve let send to Bubbs. If a cover photo is your own, its location and camera details are removed when you upload it.

Your sign-in email, so you can sign in, and a few basics like when you signed up.

Bubbs doesn’t read your inbox. It only ever sees what you choose to forward.

Who sees it

You. Everything above is yours.

People you share a trip with. They see that trip’s plans, notes and cover, the same as you. They never see the email behind a plan you forwarded, or anything from your other trips.

Anyone you send a view link to sees that trip’s timeline and map, without confirmation codes, ticket numbers, prices or names. You can turn the link off in one tap.

Nobody else. Bubbs doesn’t sell your data, and doesn’t share it with advertisers.

Who helps Bubbs do this

Anthropic’s model reads each forward to build your trip. Bubbs sends the email to Anthropic’s API, gets the plan back, and that’s it. Anthropic doesn’t train its models on it: their commercial terms say so ("Anthropic may not train models on Customer Content from Services"). Anthropic deletes what it’s sent within 30 days, unless it’s needed to deal with misuse of their service or the law says otherwise.

A few other services run parts of Bubbs:

• Postmark receives the emails you forward and passes them to Bubbs, and sends the emails Bubbs sends you, like your sign-in link.
• Supabase stores your account, your trips and your forwarded emails.
• Vercel runs the app.
• Maps and photo services (OpenStreetMap, Wikidata, Wikimedia Commons) get place names and venue addresses from your bookings, so Bubbs can put your plans on a map and find a picture of where you’re going. They never get your email address or your emails.

Bubbs stores your data in the United States (Oregon). Anthropic keeps what it’s sent in the United States, and may run its model in other countries.

Bubbs’s only cookies are the ones that sign you in and keep you signed in. No tracking or advertising cookies.

How long the emails are kept

Bubbs deletes the emails you forward, and their attachments, on a schedule. What it read from them (the plans, and the short quotes behind them) stays, so your trip still makes sense afterwards.

• A booking on a trip with dates: deleted 7 days after the trip ends. That week is there in case a late change or cancellation turns up.
• Anything that isn’t a booking (an ad, a newsletter, something that isn’t travel): deleted 30 days after it arrived.
• A booking on a trip with no dates yet, or one that never landed in a trip: deleted 90 days after it arrived. If the trip gets dates before then, the 7-days-after rule takes over.
• An email from an address Bubbs doesn’t know yet waits 30 days for someone to claim it, then it’s deleted.

How to delete everything

Settings → Delete my account, then confirm. Bubbs removes:

• your trips and every plan in them
• every email you’ve forwarded, and every file kept from them
• your cover photos
• your forwarding address, which stops working and is never given to anyone else
• the addresses that can send to Bubbs, what Bubbs knows about you, and your settings
• your sign-in

Then it tells you what went.

A trip you share isn’t yours alone, so it stays with whoever joined it first, with its plans. The emails behind your plans still go, and nobody can open them.

Bubbs keeps a count of how much it spent reading your emails, with nothing that says whose they were, so the bills still add up.

Bubbs’s database is backed up once a day, and each backup’s kept for 7 days. So within 7 days of deleting your account, it’s gone from the backups too. Photos you upload are also copied each night, and those copies are kept 7 days, so within 7 days of deleting your account they’re gone too.

Questions

Write to hello@heybubbs.com. A person reads it.

Last updated 25 September 2026