Escarcha Beheer B.V. · Version 2 · Effective date: 6 October 2026, together with version 2 of the Terms of Service and the Privacy Policy. This policy explains those documents; in the event of a difference, they prevail.

BUBLE is a messaging app for children aged 6 to 15, built so that children can learn to use messaging and social media safely, under the supervision of their parent. This policy explains how BUBLE protects children. It summarises what is set out in full in the Terms of Service (sections 1, 3, 5 and 11) and the Privacy Policy (sections 2, 4 and 6).

1. Core principles

The protection of children comes first in every design decision.
We act on every report. Harmful behaviour towards a child leads to removal of the content and, depending on its seriousness, a warning, suspension or termination of the account.
Privacy and safety are enforced together: we collect as little data as possible, and what we keep for safety has a fixed retention period.
Parental involvement is essential. BUBLE is a tool for parents, not a substitute for them.

2. Prohibited behaviour

The following is strictly prohibited in messages, calls, moments and comments (Terms of Service, section 5):

Bullying, threats, intimidation or discrimination.
Sexual, violent, hateful or otherwise child-inappropriate content.
Grooming or any predatory behaviour towards a child.
Collecting or sharing another person’s personal data without permission, or impersonating another person.
Using a child account as an adult, other than as the child’s parent through the parent account.

3. How BUBLE protects children

A closed network. A child can only message people the parent has approved. Before approving a contact request, the parent sees the name and e-mail address of the requester (or of the requesting child’s parent), so they can check who is asking for access to their child. There is no public profile, no search for strangers, no public timeline and no algorithmic feed. This also applies in groups: a child is only in a group with contacts the parent has approved, unless the parent turns on “may join groups with strangers” (off by default); parents are notified of every group and can remove their child from it. The exceptions are class groups set up by a linked teacher and siblings with the same parent.
Game leaderboards. The Global and Regional leaderboards show the display name, profile photo and score of adults to all signed-in users. A child appears on them only if the parent turns on “visible in leaderboards” (off by default), and never with a username or any other way to make contact.
Age groups. Every child account has an age group (6-8, 8-10 or 10+), chosen by the parent. Children aged 6-8 can only send ready-made sentences and cannot share their location. For every child, GIF and sticker searches always use the strictest content filter of our provider; parents can turn GIFs off entirely, and for ages 6-8 they are off by default.
The shield. Every child has a safety button. The child says what happened and chooses who is told: their parents, a teacher or their trusted person. The report is delivered as a notification, a push message and an e-mail. If the child names someone in the app, the conversation between them is held for 90 days so it can be reviewed, and the parents of both children can message each other through BUBLE to discuss the situation.
Blocking. A child can block an adult (other than their own parents). Adults can report and block in every one-to-one conversation.
Parental supervision. A parent can read along with the child’s conversations and follow the child’s live location. Both are off by default, the child is notified when they are turned on or off, everyone in a conversation can see when a parent has read a message, and the child has a log of every view. Parents also set a daily time limit and can turn off calling, location sharing and posting moments.
Reports and review. A moment or comment reported three times by people who can see it is hidden automatically until a member of staff has reviewed it. Deleted messages are kept for 30 days so a report can still be assessed. When an adult reports a person from a one-to-one conversation, the last 10 messages are attached to the report.
No advertising, no tracking. BUBLE shows no advertising, sells no data and does not profile children.

4. Reporting and enforcement

Adults report through the report button in the app or at info@buble.app. Children use the shield, which goes to the adults they choose, not to BUBLE.
Every report is reviewed by a member of staff. Decisions to remove content or restrict an account are always taken by a person; automatic hiding after three reports is temporary.
Where we take a measure, the adult concerned, or for a child every linked parent, receives an e-mail stating the measure, the reason, the rule that was breached and how to object. An objection is reviewed within 14 days by someone who was not involved in the original decision (Terms of Service, section 11).
Where we suspect sexual abuse, exploitation or other serious danger to a child, we report it to the competent authorities.

5. What BUBLE cannot do

We do not read conversations unless a report or a legal obligation requires it.
We cannot prevent every instance of misuse, and we do not guarantee that unwanted contact, inappropriate content or bullying will always be prevented or detected.
We cannot retrieve screenshots or copies saved outside the app.
BUBLE gives no access to emergency services. In danger, call 112.

6. Continuous improvement

We keep improving BUBLE’s safety features and review these policies whenever the app changes. Questions or concerns: info@buble.app.