Privacy

The short version

• Two people, one album. Everything you save is visible to you and to the single partner you paired with. There is no third account, no follower list and no feed.
• We do not sell your data. Not to advertisers, not to data brokers, and we do not share it for cross-context behavioural advertising.
• Location is off until you switch it on. It goes to your partner and nobody else, and Ghost mode hides your pin for an hour without announcing it.
• Bear Buddy reads the album, never your messages.
• You can take it all with you. Export the album, or delete your account and everything in it, from inside the app.

This summary is here to be read. The sections below are the version that binds us.

Who we are

Dudububu ("we", "us") makes the Dudububu app for iOS and Android, and publishes this website. We decide how the personal data described here is used, which under UK and EU data protection law makes us the controller of it.

This policy covers the app, this website and the support mailbox. Write to hello@dudububu.space about anything in it.

What we collect

Account details

The bear you picked, your display name, and the email address or Apple/Google sign-in identifier you signed up with.

Pairing

Your pair code, when it was used, and which account it linked you to. One code links exactly two accounts; the app refuses a third.

What you make together

Photos, videos, chat messages, stickers, moods, hugs, captions, album and trip names, countdowns, and the date your counter runs from.

Location — only while you share it

Precise location, and only while live location sharing is switched on. Ghost mode pauses the sharing; switching the feature off ends the collection.

Device and diagnostics

Device model, operating system, app version, language, crash reports and which features get used. Your IP address, which tells us roughly which region you are in.

Purchases

Which plan you are on, whether it is active and when it renews, as reported by the App Store or Google Play. We never see your card number.

What you write to us

Your support messages and the address you sent them from.

We do not ask for your contacts or your calendar, and we do not read your photo library. The app receives the photos you choose, at the moment you choose them.

What your partner sees

The whole app is built for two people to share one space, so most of what you put into it is visible to your partner by design. It is worth being precise about where that line sits.

• They see: everything saved to the shared album, your chat, your hugs and moods, your bear and display name, your counter and countdowns, whether Premium is active on your pair, and your live location while you are sharing it.
• They do not see: your email address or sign-in identifier, your payment details or what you were charged, your device diagnostics, or your location once sharing is off or Ghost mode is on.
• Ghost mode does not announce itself. Your partner is not notified that you switched it on.

If you unpair, the counter stops and the album stays with both of you. Neither of you can see what the other adds afterwards.

Why we use it, and on what basis

Running the app

Pairing you, syncing the album, delivering messages, counting the days, sending the notifications you asked for. We need this data to give you the service you signed up for — in EU and UK terms, to perform our contract with you.

Billing and subscriptions

Unlocking Premium for both bears, restoring purchases, and keeping renewal state in step with the store. Also our contract with you.

Location sharing, push notifications and ads on the free plan

Consent. You switch each of these on, and you can switch them off again in the app or in your device settings without losing anything else.

Keeping it working and safe

Crash diagnostics, debugging, abuse and fraud prevention, and enforcing our terms. Our legitimate interest in running a service that stays up and is not abused.

Making it better

Aggregated, non-identifying usage figures that tell us which features earn their place. Our legitimate interest in improving the product.

Legal obligations

Tax and accounting records for purchases, and responding to lawful requests.

If you are in the UK or the EEA and you object to anything we do on the basis of a legitimate interest, tell us and we will stop unless we have a compelling reason not to.

Who else gets to see it

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We have never done either, and we do not have a business model that would tempt us to.

Data reaches other companies only in these cases:

Infrastructure

Cloud hosting, storage, database and content-delivery providers store the app's data and this website on our instructions. They cannot use it for anything of their own. A current list of the providers we use is available on request.

The app stores

Apple and Google process every purchase, renewal and refund, and tell us only whether a subscription is active. Their handling of your payment is covered by their own privacy policies, not this one.

Diagnostics and analytics

Crash and usage reporting in the app, and Google Analytics 4 plus Vercel Web Analytics on this website. Advertising signals are denied by default in our analytics configuration.

Advertising, free plan only

Ads appear in Bear Reels on the free plan and nowhere else. Any paid plan removes them entirely.

Professional advisers

Accountants and lawyers, under confidentiality, when there is a reason.

Law, safety and emergencies

Where we are legally required to, or where we believe in good faith that disclosure is necessary to prevent serious harm. We will tell you unless we are forbidden from doing so.

If the company changes hands

In a merger, acquisition or sale of assets, data moves with the service. You will be told before it happens, and this policy continues to apply until you are given notice of a new one.

Bear Buddy and AI features

Bear Buddy suggests things to do with what you have already saved — a memory worth resurfacing, a countdown worth adding.

• It reads memories you saved to the shared album. It does not read your chat.
• It works on your pair's own content. It does not compare you against other couples.
• We do not allow your photos, videos or messages to be used to train general-purpose AI models, ours or anyone else's.

Cookies and this website

The app itself does not use cookies. This marketing site runs two measurement tools: Google Analytics 4 and Vercel Web Analytics, which is cookieless.

Google Consent Mode is configured here to deny ad storage, ad user data and ad personalisation before the first request is made, so no advertising profile is built from your visit. Analytics storage is granted, because measuring which parts of the page work is the only reason the tag is loaded at all. Browser-level tracking protection and ad blockers switch it off entirely, and nothing on the site breaks when they do.

How long we keep it

While your account exists

Your album, chat and counter stay until you delete them or delete your account. That is the point of a memory album.

After you delete your account

Live systems are cleared within 30 days. Encrypted backups roll over within a further 90 days, after which nothing is recoverable.

Location history

Live location is kept only as long as it is being shared, and is not retained as a location history.

Diagnostics

Crash and usage logs are kept for up to 24 months.

Purchase records

Kept as long as tax and accounting law requires, which is typically 6 to 10 years depending on the country.

Unpairing is not deletion. It stops the counter and keeps every memory you made, on purpose.

Your rights, and how to use them

Wherever you live, you can ask us to do all of the following, and we will not charge you or make it awkward:

• See what we hold about you, and get a copy of it.
• Export your album in a portable format.
• Correct anything that is wrong.
• Delete your account and the data attached to it.
• Withdraw consent for location, notifications or ad personalisation at any time, without affecting anything you did before.
• Object to or restrict what we do on the basis of a legitimate interest.

Export and account deletion are in the app's settings, which is the fastest route. For anything else, write to hello@dudububu.space from the address on your account. We answer within 30 days.

If you are in the UK or the EEA: the rights above are your GDPR rights, and you can also complain to your national data protection authority. We would rather you came to us first, but it is your call.

If you are in California: you have the right to know, delete, correct and to non-discrimination for exercising them. We do not sell or share personal information as the CCPA defines those terms, so there is nothing for you to opt out of. An authorised agent can act for you with written proof.

Security

Data is encrypted in transit and at rest. Access to production systems is limited to the people who need it, and every access is logged. We do not hold card details at any point — Apple and Google do.

No service can promise perfect security. If a breach ever affects you, we will tell you and the relevant regulator within the deadlines the law sets. If you have found a vulnerability, please report it to hello@dudububu.space before disclosing it publicly, and we will not pursue you for having looked.

Children

Dudububu is not for children. You must be at least 13 to use it, or older where your country sets a higher age for consenting to online services — 16 in much of the EEA.

We do not knowingly collect data from anyone under those ages. If you believe a child has an account, tell us and we will delete it.

Where your data goes

We use providers based in several countries, so your data may be processed outside the country you live in — including outside the UK and the EEA.

When it is, we rely on the safeguards the law provides: an adequacy decision where one exists, and the UK Addendum or the EU Standard Contractual Clauses where it does not. Ask us and we will tell you which applies to a given provider.

Changes to this policy

When we change this policy we update the date at the top. If a change materially affects what we do with your data, we will tell you in the app or by email at least 30 days before it takes effect, so you have time to decide whether you still want to be here.