Privacy policy

Last updated 2 October 2026

bubbleclub AU (ABN 91 235 019 023) (“we”) runs BubbleClub, a members-only community app for residents of Teneriffe and New Farm (Queensland 4005) and Newstead (Queensland 4006), and the BubbleClub venue portal. This policy explains what personal information we collect, why, and your choices. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

What We Collect

• Account details: your first name, email address, and, if you use Sign in with Apple, an Apple identifier (Apple may give us a private relay email instead of your real one).
• Your address: street, suburb and postcode, to confirm you live in Teneriffe, New Farm or Newstead.
• Activity: what you buy from venues, when and where you use it (and how much, for credit), your points and Bubble credits, and any use you report as not you.
• Payments: when you buy something, you pay the venue through Stripe. Card or Apple Pay details go straight to Stripe; we never see or store your full card number. We keep the amount, status and Stripe reference for each payment.
• Venue staff: name, email, the venues you work at and your role, the codes you enter at the counter, the uses you mark (your first name is kept on each one, even if you leave), and the refunds you make. Venues sell through their own Stripe accounts; we only see whether a venue can take payments.
• Technical: a sign-in token stored securely on your device and, if you allow notifications, a push token for your device. We don't use advertising trackers, we don't track you across other apps or websites, and the app doesn't use your location.

How We Use It

• to run your membership: checking residency, processing purchases for venues, issuing codes, and adding points and Bubble credits
• to let venues see who's coming, mark purchases used and issue refunds, and to work out BubbleClub's fees
• to prevent fraud: telling you every time your code is used, looking into uses you report, spotting staff who enter many wrong codes, and checking uses made outside a venue's opening hours
• to answer your questions and send service messages, such as sign-in links and receipts
• to send push notifications: when your address is confirmed, reminders and cancellations for things you're going to, each use of your code, packages or credit about to expire, and, depending on your choices in Profile, new get-togethers and new packages or credit. Expo (our app platform) and Apple or Google deliver them. You can turn notifications off in your phone's settings at any time.

We don't sell your personal information or use it for third-party advertising.

Who We Share It With

• Venues: when you buy from a venue, its staff see your first name and the details of that purchase and its uses. They don't see your email or address. The venue's Stripe account processes your payment.
• Service providers: Supabase (database, sign-in and hosting), Stripe (payments), Apple (Sign in with Apple, if you use it), Expo, Apple and Google (push notifications) and our email provider. They handle data only to provide their services to us.
• Overseas: some providers may store or process data outside Australia, including in the United States. We choose providers with strong security and contractual privacy commitments.
• When required by law, for example to the Australian Taxation Office.

How Long We Keep It

We keep your account information while your account is open. If you delete your account, we delete your profile, address, points and Bubble credits. We keep records of past purchases, uses and payments, without your name or contact details, for at least 5 years, because Australian tax law requires us to keep financial records.

Deleting Your Account

In the app, go to Profile › Delete account. This cancels any checkout in progress. Anything you've bought and not used is forfeited, as the member terms explain. You can also email us to ask.

Access, Correction and Complaints

You can update your name and address in the app, or email privacy@bubbleclub.com.au to access or correct the information we hold about you. We'll respond within 30 days. If you have a privacy complaint, contact us first. If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Security

Data is encrypted in transit, access is limited by account role, and sign-in tokens are stored in your device's secure storage. No system is perfectly secure. If a data breach is likely to cause you serious harm, we'll tell you and the OAIC.

Changes

If we change this policy in a meaningful way, we'll let you know in the app before the change takes effect.

Contact

bubbleclub AU (ABN 91 235 019 023) · privacy@bubbleclub.com.au