BubbleTab BrowserPrivacy Policy
The short version. BubbleTab has no account and no sync. Your history, bookmarks, tabs and passwords live only on your phone. We don’t use third-party analytics, ad SDKs or crash reporters, and we never sell your data. Two things, and only two, send anything to us: anonymous usage counts that are off until you turn them on, and the free Pro trial, which sends a one-way identifier so each phone gets one trial. Everything else that leaves your phone is you visiting the web.
Who we are
BubbleTab Browser (“BubbleTab”, “the app”) is made by Kuarasoft (“we”, “us”). The app’s package name on Google Play is com.kuarasoft.bubbletabbrowser. This policy explains what the app does with information. For privacy questions or requests, contact privacy@kuarasoft.com.
What we collect
By default, nothing. BubbleTab has no account, no sign-in and no sync. There is only one thing we ever receive from your phone that you have not turned on yourself: the one-time message that starts your free Pro trial (described below). Beyond that, we collect data only if you switch on anonymous usage counts.
Anonymous usage counts (opt-in, off by default)
You can turn on anonymous usage counts during onboarding, from a one-time card on the activity page, from the Privacy card, or in Settings › Privacy & security. While they are on, the app counts how often features are used, how many tabs are open, which gestures you use and your interest in Pro, as daily totals on your phone, and once a day it sends finished days to our own server (a Cloudflare Worker) over HTTPS.
A report contains no user or device identifier — only a random ID per report so retries aren’t double-counted — and no URLs, sites, page titles, searches or app names. It carries the app version, the Android version, rounded device memory, whether the device is a tablet, the language, the install week, a “days since install” bucket, the day’s counters, and a snapshot of which settings you’ve chosen (the choices only — never a site, a VPN server or which backup browser). Our server uses your IP address only as its rate limiter’s key; it is never stored or logged.
You can see exactly what would be sent in Settings › Privacy & security › “Your reports” (the last seven days, sent or waiting). Turning usage counts off deletes any counts not yet sent. Nothing is counted during the tour or from private bubbles.
Free Pro trial
When you finish setting up BubbleTab, it starts your free Pro trial (and again later if you tap “Try Pro free”). To make sure each phone gets one trial, it asks Google Play to confirm the app is genuine and installed from Google Play on a genuine device, then sends our server (license.kuarasoft.com) three things: a one-way hash of an identifier Android gives this app on this phone, a random number created when you installed BubbleTab, and Google Play’s answer. We keep a keyed hash of that identifier, the random number, and the trial’s start and end dates. We cannot learn your identity, your Google account, or anything you browse from this. We delete all of it three years after the trial. Google Play’s integrity check is covered by Google’s privacy policy.
Pro purchases
Pro is sold through Google Play Billing. When Customize or the paywall opens, and at most once a day when the bubbles start, the app asks the Play Store on your phone whether your Google account owns Pro. We never see your payment details; purchases are handled entirely by Google under Google’s privacy policy. No browsing data is involved.
What stays on your phone
Your browsing data lives only on your device, in app-private storage that other apps cannot read:
| Data | Protection |
|---|---|
| History and bookmarks | App-private storage |
| Saved passwords | Encrypted with AES-GCM using a hardware-backed key; viewing or copying one requires your screen lock |
| Open tabs and recently closed tabs | App-private storage |
| Favicons | Fetched from each site itself, never from a third-party favicon service |
| Site permission answers | Remembered per site |
| VPN server details and WireGuard configs | Encrypted with a hardware-backed key |
| Activity stats (Stats screen) | Daily counts only — pages opened in bubbles, links per sending app, and trackers blocked. No URLs, sites or titles; nothing from private bubbles. Never uploaded. |
Backup and device-transfer are disabled, so this data is not copied off your phone by Android’s backup system. Private bubbles keep no history, are never saved, don’t appear in recently closed, don’t remember permission answers, and don’t fetch favicons. You can clear history, cookies, site data, cache and permissions in Settings › Clear browsing data. Saved passwords are kept until you remove them.
What leaves your phone when you browse
Using a browser means contacting the sites you visit. Besides those pages, here is everything BubbleTab sends, and to whom:
- Searches and suggestions. Searches go to the search engine you choose (DuckDuckGo by default; Google, Bing, Brave, Startpage or Ecosia optional). With search suggestions on (Settings › General), what you type into the address bar or home search field also goes to that engine’s suggestion endpoint as you type — without cookies, so it can’t be tied to an account. Never from private tabs, never for address-like text, never when switched off. The optional “Personalized suggestions” (off by default; Google and Bing only) sends the engine’s cookies so a signed-in account can suggest its own past searches.
- Secure DNS (optional). If you turn it on, the names of sites you visit go to the DNS-over-HTTPS provider you choose (Cloudflare, Quad9 or Mullvad), encrypted, instead of your network’s DNS.
- Page translation. Translation happens on your phone; the page’s text never leaves it. The first time you use a language pair, the app downloads that pair’s model files from Mozilla’s servers.
- Extensions. Extensions you add download from Mozilla’s add-on site (
addons.mozilla.org). Each extension’s own network use is stated on its row in Settings › Extensions. uBlock Origin fetches its own filter lists. - VPN for BubbleTab (optional, off by default). When on, only the pages you choose are routed to your own VPN or proxy server — we run no servers for this and have no accounts. Everything else uses your normal connection.
- The browser engine itself. BubbleTab is built on Mozilla’s GeckoView engine, which (like Firefox) contacts Mozilla for connectivity checks, tracking-protection and other block lists and their signatures. If Safe Browsing is on (the default), the engine contacts Google’s Safe Browsing service for phishing and malware lists; you can turn this off in Settings, and then no traffic goes to Google at all. There is no telemetry, no push service and no location service in the engine.
Permissions the app uses
- Display over other apps — so bubbles can float over the app you’re in. This is the heart of the app.
- Camera / microphone — only when a web page you’re on asks for them (e.g. a video call), and only after you allow it.
- Notifications — for the one ongoing notification that keeps bubbles running and lets you close them all.
- Usage access (optional) — if you grant it (“Minimize when another app opens”), the app can tell which app is in front so it can tuck the panel away. It never sees what’s inside other apps.
Children
BubbleTab is a general-purpose web browser and is not directed at children. We do not knowingly collect personal information from children. Because the app has no account and collects no personal data by default, there is nothing for us to collect from a child who uses it.
Your rights and requests
Most of your data never leaves your phone, so you control it directly: clear it in the app, or uninstall to remove all of it. For the one record we may hold — your free-trial record — email privacy@kuarasoft.com with the Support ID shown in Settings › About, and we will delete it. (Deleting it means the phone can receive a trial again.) Usage-count reports carry no identifier, so an individual report cannot be located or deleted after it’s sent; turning usage counts off stops any further reports and deletes the unsent ones.
Data controller and KVKK (Türkiye)
Kuarasoft — Fatih Babagil, a sole proprietorship established in the Republic of Türkiye — is the data controller (veri sorumlusu) for the limited data described in this policy, under Türkiye’s Law No. 6698 on the Protection of Personal Data (KVKK). Because BubbleTab has no account and, by default, collects no personal data, the only personal data we process is the one-way identifier used to give each device a single free trial; anonymous usage counts carry no identifier and are not tied to you.
Under the KVKK you have the right to learn whether we process your personal data, to request information about that processing, to ask that it be corrected or deleted, and to object. To exercise these rights, email privacy@kuarasoft.com with the Support ID shown in Settings › About, and we will respond within the period the KVKK requires.
Changes to this policy
If we change this policy, we will update the date at the top and post the new version here. Significant changes will also be reflected in the app or its Google Play listing.
Contact
Fatih Babagil (sole proprietorship), trading as Kuarasoft
Yunusemre Mah. Hürmet Sk. Zirvedağ Evler B Blok No: 12, İç Kapı No: 10, Palandöken / Erzurum, Türkiye
Email: privacy@kuarasoft.com
Web: kuarasoft.com