Your information.
Handled with care.

01. Who we are

Bubbles Travels Co. (also branded as Bubbles Travel Co., “Bubbles”, “we”, “us” or “our”) is responsible for the personal information described in this policy. It covers our mobile app, currently named “bubbles travel .co”, bubblestravel.co, and our booking, trip-planning, visa-assistance and customer-support services.

This policy explains what we collect, why we use it, who receives it and the choices available to you. Independent travel suppliers and services you choose to use also have their own privacy policies.

02. Information we collect

The information involved depends on the features you use. We receive it from you, someone arranging travel with your permission, the services involved in your booking, and technical interactions with our services.

Account & contact details

Name, email address, account identifier, password hash, verification records and sign-in sessions. If you use a supported social sign-in option, we receive the account identifier and profile details that provider shares. Telephone numbers and correspondence are collected when you contact us.

Travel plans & bookings

Destinations, travel dates, traveller numbers, budgets, preferences, trip notes, invited travellers’ email addresses, reservations, packages, itineraries and booking status. Only provide another traveller’s information if you have authority to do so.

Identity & visa documents

Where your booking or application requires them: full name, date of birth, nationality, passport number and expiry, passport photos, and supporting files such as travel, employment or financial documents. Files include their name, type, size and upload details. Some documents can contain sensitive information; provide only what is required for your request.

Payment information

Payment amount, currency, transaction and booking references, payment status, and verification information returned by the payment provider. Card or mobile-money credentials are entered with the checkout provider; never send us a card security code, mobile-money PIN or one-time payment code in a message.

Technical & service records

IP address and request information processed by our servers, sign-in timestamps, errors, security records and service activity. Trip-planning services may record the AI provider, model, usage, outcome and associated account or trip identifier for troubleshooting and operation.

Support & enquiries

Messages and information you choose to share by phone, WhatsApp or other support channels. Our website enquiry form prepares a WhatsApp message for you to review and send; the website itself does not save the enquiry or take payment.

03. How we use information

• Create and secure your account, verify your email and manage sign-in sessions.
• Arrange requested trips, match travel requests with organizers, manage reservations, process payments and assist with visas.
• Prepare itineraries and recommendations from your destinations, budget, preferences and trip-planning instructions.
• Send service messages, answer questions, and manage changes, refunds and disputes.
• Maintain and troubleshoot our services, prevent misuse and fraud, and meet applicable legal and record-keeping obligations.

Where a legal basis is required, we rely on performing a contract or taking steps you request before a contract, compliance with legal obligations, legitimate interests in operating and protecting our services where your rights do not override them, or your consent. Where consent is required for sensitive information or optional marketing, it must be obtained separately; reading this policy is not consent.

04. Who we share it with

We share information needed for the purpose involved with:

• Travel organizers and suppliers: the organizer handling your request, airlines, hotels, transport and activity providers, and visa-processing partners or authorities, where needed to deliver the services you request.
• Payment providers: Paystack or Hubtel, depending on the checkout offered, to initiate and verify payments and resolve payment issues.
• Technology providers: hosting, database and document-storage services, and Resend for transactional email such as verification messages.
• Trip-planning providers: where AI-assisted planning is used, trip instructions, destinations, preferences and budget can be processed by the configured provider: OpenAI, Google Gemini, Anthropic or Groq. Google Places can supply destination and place suggestions. Avoid including passport details, payment credentials or other sensitive information in free-text planning instructions.
• Support services: when you choose WhatsApp, your phone number and messages are processed by WhatsApp/Meta under its own policy as well as by our team.
• Legal and business recipients: authorities or professional advisers where legally required or necessary to protect rights and prevent fraud; a successor in a business transfer, subject to applicable privacy safeguards.

Service providers processing information on our behalf must use it for the agreed service and protect it consistently with this policy and applicable requirements. Travel suppliers and authorities may act independently and retain information under their own obligations.

We do not sell personal information or use it for cross-app targeted advertising. The current app and website do not include third-party advertising or marketing analytics SDKs.

05. Device permissions & storage

Photos and files: the app uses your device’s photo or document picker so you can select booking and visa attachments. Any permission request is tied to that action. You can refuse or revoke access in device settings, although attaching a required document may then be unavailable.

Notifications: if you turn on push alerts, the app registers a device push token with our servers so we can send trip updates, new-trip alerts and organizer messages. Alerts are delivered through Expo’s push service and Apple or Google. You choose which kinds of alert you receive in Settings → Notifications, and you can turn them off at any time in device settings. Signing out or deleting your account removes the device registration.

Location: destinations and places you enter are travel-planning information. The current app does not request precise device location or track your location in the background.

Local storage: the app keeps your sign-in tokens in your device’s secure keychain or keystore, plus a small amount of app state such as a trip link you opened before signing in. Personal details you enter are saved to your account rather than kept on the device, and app data is cleared when you sign out. Signing out or removing local app data does not delete information already held on our servers.

Cookies and tracking: the current public website does not set advertising or analytics cookies. Providers you visit, including payment checkout and WhatsApp, may use their own cookies or storage under their policies. Browser and device settings let you control storage and permissions.

06. Retention & security

We keep personal information only for as long as needed for the purposes in this policy, including:

• Account and trip records: while your account or requested service is active, and as needed to resolve related support matters.
• Passport, visa and supporting documents: for the relevant booking or application and any required verification, dispute or legal retention period.
• Payment and transaction records: for applicable accounting, tax, anti-fraud, refund and dispute obligations.
• Security records and backups: for operational recovery and security needs, with residual backup copies removed through the backup lifecycle.

Retention depends on the record, the service and applicable law. When information is no longer needed, it should be deleted or irreversibly anonymized. You may ask which records remain after a deletion request, why they are required and how long they will be kept.

We use account authentication, password hashing and access controls to protect information. Access is limited to people and providers who need it for their work. No storage or transmission method can guarantee absolute security; contact us if you suspect unauthorized access.

07. Your choices & rights

Depending on the law that applies to you, you can request access to your information, correction, deletion, a portable copy, restriction of processing, or object to certain uses. You can also withdraw consent for processing that depends on consent, without affecting earlier lawful processing.

Contact us using the details below. We may verify your identity before acting and will respond within applicable legal deadlines. If we cannot fulfill a request, we will explain the reason and any available next steps. Do not send passwords, payment credentials or full identity documents in an initial request.

You can opt out of promotional messages using the instructions in the message or by contacting us. Essential booking, account-security and transaction messages may still be necessary to provide your service.

You may raise a complaint with the data-protection authority where you live or work. For concerns in Ghana, you can contact the Data Protection Commission.

09. International processing

Travel often involves sharing information across borders. Our suppliers and technology providers may process information outside Ghana or your country of residence, including in your destination country. Privacy laws may differ between countries. Where required, we use appropriate contractual or other lawful safeguards for transfers and require providers acting on our behalf to protect the information. Contact us for details of safeguards relevant to your information.

10. Children’s privacy

Our app and website are intended for adults arranging travel, not for children to create independent accounts. A parent, guardian or authorized adult may provide a child’s details when necessary for a family booking or visa application. We use those details for the requested service and related obligations. If you believe a child has provided information without appropriate authorization, contact us to arrange review and deletion where appropriate.

11. Policy updates

We may update this policy when our services or data practices change. The revised policy will appear on this page with an updated date. For material changes, we will provide an appropriate notice and obtain consent where required before using information for a new purpose.

12. Contact us

For privacy questions, access requests, corrections, consent withdrawal or deletion, contact Bubbles Travels Co. — Privacy enquiries.

Phone: +233 59 444 8963
WhatsApp: Message our team
Website: bubblestravel.co