Privacy Policy

Version 1.3 · Last updated: Oct 5, 2026

1. Introduction

At Nubbu, we take your privacy seriously.

This Privacy Policy explains what personal information we collect, how we use it, how we protect it, who receives it, how long we retain it, and the rights you have when using the Nubbu app, our website or any of our related services.

Please read this Privacy Policy carefully.

This Privacy Policy is a notice, not a request for blanket consent. Where Nubbu relies on your consent for a specific activity, such as an optional WhatsApp city-launch alert, we will ask for it separately through a clear affirmative action. By creating an account or using Nubbu, you acknowledge that you have been informed about the processing described here.

If you do not agree with the Terms of Service or do not wish to provide information necessary to operate your account, please do not use Nubbu. Optional processing may be refused without preventing use of unrelated available features.

2. Who We Are

For the purposes of applicable data protection laws, the data controller is:

Nubbu Social Club S.L.
Madrid, Spain

If you have any questions regarding this Privacy Policy or the way we process your personal information, you can contact us at:

privacy@nubbu.club

Throughout this Privacy Policy, references to “Nubbu,” “we,” “our,” or “us” refer to the services provided under the Nubbu brand.

3. When This Privacy Policy Applies

This Privacy Policy applies whenever you use any service provided by Nubbu, including, but not limited to:

• The Nubbu mobile application.
• The official Nubbu website.
• Your Nubbu account.
• Waitlist.
• Direct Pass.
• Invite Friends.
• Events & Experiences.
• Customer Support.
• Any other feature or service provided by Nubbu.

This Privacy Policy also applies to future products, services or features that we may introduce, unless a separate or supplementary privacy notice specifically applies.

4. Information We Collect

The information we collect depends on how you use Nubbu.

Some information is required to create and manage your account, while other information is optional and helps us provide a more personalised experience.

Below is an overview of the types of information we may collect.

4.1 Account Information

When you create a Nubbu account, we may collect information such as:

• Phone number.
• Email address.
• Name.
• Date of birth.
• Age.
• Gender.
• City.
• Country.
• Preferred language.
• Profile photo.

To help protect your account, we may verify your phone number using one-time verification codes (OTP) or similar authentication methods.

Your email address may be needed to create or recover your account and to send you essential security or service communications. Where the applicable flow does not require access to be blocked, email verification will not prevent you from using the permitted features.

4.2 Profile Information

You may choose to add additional information to your profile, including:

• Biography.
• Photos.
• Videos.
• Profile prompts and answers.
• Interests.
• Hobbies.
• Occupation.
• Education.
• Languages.
• Height.
• Personal preferences.
• Dating and Friends preferences.
• Any other information you choose to share.

Some of this information may be visible to other Nubbu members depending on your profile settings and the functionality of the platform.

Religion or philosophical beliefs are special category data. If you choose to select and save this optional information, you give Nubbu your explicit consent to display it on your profile to other members. You can change or remove it at any time in Edit Profile. Nubbu does not use this information for analytics, advertising, ranking, matching or to infer your beliefs.

Optional social-profile links and, for a private Instagram account where offered, a screenshot may be collected for admission, authenticity and safety review. These materials are not intended to be displayed publicly to other members.

Information that you voluntarily include in profiles, media, prompts or messages may reveal sensitive aspects of your life. Please do not share information that you do not want other intended recipients to see.

4.3 Activity and Communications Information

While you use Nubbu, we collect information about how you interact with the platform.

This may include, among other things:

• Likes.
• Matches and match-lifecycle status.
• Chats and message metadata.
• Compliments.
• Super Likes.
• Boosts.
• Saved or Favourite profiles.
• Blocked users and block relationships.
• Reported users, reports submitted and relevant evidence.
• Invitations sent.
• Rewards earned.
• Notification preferences.
• Push-notification permission and preference status, including service communications and, where applicable, promotional communications.
• Subscription tier and entitlement status.
• Event-related activity.
• Tickets purchased.
• Event attendance history.
• Other interactions within the platform.

Message content is processed to deliver Chats. It may also be preserved and reviewed where a report is submitted or where necessary to investigate abuse, protect users, enforce our policies, comply with law or resolve a security or technical issue.

4.4 Location and City Information

To provide certain features and services, Nubbu may collect location-related information.

Depending on the permissions you grant and the choices you make, this may include:

• Approximate location.
• GPS location.
• Selected or confirmed city.
• Cities to Connect.
• Travel Mode city and duration.
• Nearby events.
• Local recommendations.
• City-launch interest and consent status.

Device-location permission and a manually selected city are different. We do not treat location permission as consent to receive WhatsApp or marketing communications. You can manage device-location permission through your device settings.

4.5 Events & Experiences Information

When you browse, book or attend Events & Experiences available through Nubbu, we may collect information such as:

• Events viewed.
• Saved events.
• Registration details.
• Ticket type and quantity.
• Tickets purchased.
• Booking and payment status.
• Attendance confirmations.
• QR codes and check-ins.
• Waitlists.
• Cancellations and refunds.
• Participation history.

Some of this information may be received from or shared with trusted event and payment providers that help manage Events & Experiences, such as Luma and its payment partners, subject to the applicable event flow.

4.6 Waitlist, Direct Pass & Invite Friends Information

If you join Nubbu through Waitlist, Direct Pass or Invite Friends, we may collect information related to your access to the community, including:

• Invitation status.
• Application status.
• Phone verification status.
• Referring member.
• Invitation history.
• Review status.
• Approval status.
• Rewards earned.
• Community access status.

This information helps us manage our invitation systems and maintain a high-quality, curated community.

4.7 Technical, Analytics and Security Information

We automatically collect certain technical information necessary to operate, secure, measure and improve Nubbu. This may include:

• IP address.
• Device type and model.
• Operating system.
• Language and time zone.
• App version.
• Device or installation identifiers.
• Crash and diagnostic reports.
• Performance and duration information.
• Security and anti-abuse signals.
• Feature, screen and interaction events.
• General city context, plan tier and non-sensitive segmentation attributes where needed for analytics.

We use tools such as Firebase services where configured for authentication, analytics, crash reporting, app integrity and related technical functions. We limit analytics properties to those needed for a defined product, security or measurement purpose and avoid adding unnecessary sensitive attributes.

4.8 Communications

If you contact us, we may keep a record of our communications with you.

This may include:

• Support requests.
• Privacy enquiries.
• Feedback.
• Suggestions.
• Reviews.
• Reports.
• Surveys.
• Any other communications you send to us.

We use this information to respond to your requests, improve our services and help maintain a safe community.

4.9 Optional WhatsApp City-Launch Alerts

If you separately opt in to a WhatsApp city-launch alert, we collect the WhatsApp-enabled phone number associated with your account, the selected city, any additional nearby-city scope expressly shown to you, your language, consent status and timestamp, the version of the consent wording and policies shown, and the minimum sending, delivery and opt-out records needed to provide and evidence the alert.

This consent is used only for the city-launch purpose described when you opt in. It is not consent for unrelated WhatsApp advertising. Declining or withdrawing it does not affect your ability to use other available Nubbu features.

4.10 Safety, Moderation and Admission Information

Nubbu may process profile-review results, authenticity checks, reports, report reasons, block relationships, relevant conversation or media evidence, moderation decisions, account restrictions and related timestamps to operate a curated community, investigate suspected violations and protect members.

A simple block removes the active relationship and ordinary chat from active use while retaining the minimum technical block status. Where a report is submitted, relevant evidence may be retained separately for moderation, safety, legal claims and compliance.

4.11 Purchases and Subscription Information

When you purchase a subscription, digital product or event ticket, Nubbu may receive transaction identifiers, product or plan, price and currency, purchase and expiry dates, renewal or cancellation status, refund status and entitlement information. Full payment-card details are ordinarily processed by the relevant store or payment provider and are not intended to be stored by Nubbu.

5. How We Use Your Information

We use the information we collect to provide, operate, maintain and improve Nubbu and its services.

In particular, we may use your personal information to:

• Create and manage your account.
• Verify your identity, review admission and protect your account.
• Create and display your profile and User Content as intended.
• Personalise and rank relevant people, events and experiences.
• Manage Matches, Chats, Friends and Dating features.
• Manage Waitlist, Direct Pass and Invite Friends.
• Process subscriptions, purchases, payments and entitlements.
• Manage Events & Experiences, tickets and attendance.
• Send service-related communications and requested notifications.
• Send promotional communications only to people who have agreed to receive them and allow them to opt out at any time.
• Send a WhatsApp city-launch alert only where you have separately consented.
• Receive and honour communication opt-outs.
• Detect, investigate and prevent fraud, abuse, harassment and activities that may compromise the safety of the community.
• Moderate content and enforce our Terms and Community Guidelines.
• Measure and improve the functionality, performance and security of Nubbu.
• Comply with legal obligations and establish, exercise or defend legal claims.

We will not use your personal information for purposes that are incompatible with those described in this Privacy Policy unless we are legally permitted or required to do so.

5.1 Personalisation and Human Review

Nubbu uses automated systems to help order profiles, recommendations, events, safety signals and service content. These systems are intended to support discovery, security and operations and are not intended to make decisions that produce legal or similarly significant effects without appropriate safeguards. Admission and material safety-enforcement decisions may involve human review. Where applicable law provides a right to human intervention or to contest a qualifying automated decision, you may contact us.

6. Legal Bases for Processing

We process personal information only when we have an applicable legal basis. Depending on the purpose and jurisdiction, this may include:

• Contract: processing needed to create and operate your account, provide matching, Chat, Events, subscriptions, purchases and requested features.
• Consent: optional religion or philosophical-belief information that you choose to select and save for display on your profile, optional WhatsApp city-launch alerts, optional permissions or communications, and other processing for which we specifically request consent.
• Legitimate interests: operating and improving Nubbu, maintaining a curated and safe community, preventing fraud and abuse, securing our systems, measuring service performance and defending legal claims, after considering users’ rights and reasonable expectations.
• Legal obligations: tax, accounting, consumer, law-enforcement, regulatory and other requirements that apply to Nubbu.
• Vital interests or other grounds recognised by applicable law where strictly necessary.

Where we rely on consent, it must be freely given, specific, informed and expressed by a clear affirmative action. You may withdraw it at any time as easily as it was given. Withdrawal does not affect processing already carried out lawfully, and it does not affect processing supported by another valid legal basis. For religion or philosophical-belief information, we rely on your explicit consent under Article 9(2)(a) GDPR. You can withdraw that consent at any time by removing the information in Edit Profile.

7. Sharing Your Information

We share personal information only where necessary to provide, secure and support our services, complete a transaction, protect the community, comply with law or for another disclosed lawful purpose.

Recipients may include:

• Cloud, hosting, authentication, analytics, crash-reporting and app-security providers, including configured Google/Firebase services.
• Communications and verification providers, including Twilio and the WhatsApp Business Platform provided by Meta/WhatsApp where used.
• Event-management, registration and ticketing providers, including Luma where used.
• Payment and store providers, including Apple App Store, Google Play, Stripe or a relevant event-payment provider.
• Customer-support, link-routing and other technology providers used to operate Nubbu.
• Independent event organisers where needed to manage an event you choose to join.
• Professional advisers, insurers, auditors or potential transaction counterparties where legally justified and subject to appropriate safeguards.
• Public authorities or other parties where disclosure is legally required or necessary to protect rights, safety or prevent harm.

Depending on the service and applicable terms, a provider may process information on Nubbu’s instructions or act as an independent controller for a service it provides directly to you. Where a provider acts on our behalf, we require appropriate contractual, security and confidentiality safeguards.

Nubbu does not sell personal information or information that directly identifies an individual. We may use, share, license or commercialise aggregated or anonymised insights that are designed not to identify or single out any person, as described in Section 8.

8. Aggregated & Anonymised Information

We may create, use, analyse, share, license or commercialise aggregated, statistical or anonymised information that is designed not to identify or single out any individual. This may include sufficiently broad group-level trends concerning cities, age ranges, interests, matching patterns, event preferences, engagement or other social and behavioural patterns.

These insights may be used to:

• Analyse how Nubbu is used and improve our services.
• Develop features, events and community experiences.
• Produce research, reports and market or city-level analysis.
• Help brands, agencies, event partners, research organisations or other commercial partners understand broad audience and community trends.
• Support advertising strategy, partnership planning, service development or other lawful commercial purposes.

Aggregated or anonymised insights will not include profiles, photographs, private messages, phone numbers, email addresses, precise location data or other information intended to identify a specific person. We apply reasonable safeguards, including group-size and re-identification controls where appropriate, and do not permit recipients to attempt to identify individuals.

Information is treated as anonymised only when it is no longer reasonably capable of being linked to an identifiable person. Pseudonymised or individual-level information remains personal information and continues to be protected under this Policy.

9. Events, Photography & Video

Nubbu Events & Experiences may be photographed, filmed, livestreamed or otherwise recorded by Nubbu, an event organiser or an authorised production partner. Recording may include fixed or moving cameras, general crowd and atmosphere footage, performances, DJ sessions and complete or edited event recordings.

Subject to the event-specific notice and applicable law, recordings may be published, streamed, reproduced or edited in full or in excerpts through Nubbu channels and third-party platforms, including websites, YouTube, social media, press, community communications and advertising or promotional materials.

The applicable ticket, registration flow or event notice will explain that recording is planned and its intended uses, and additional on-site signage may be provided. Where practicable, we will provide a way to ask questions or communicate an objection.

General crowd, atmosphere and performance recordings may be processed on an appropriate lawful basis. Where applicable law requires consent or another specific permission—particularly for testimonials, close-ups or promotional use centred on an identifiable individual—we will request it separately. Attendance alone is not treated as unlimited consent for every possible use.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the service, maintaining safety and security, complying with law and resolving disputes.

If you choose to delete your account, your profile becomes invisible and a 30-day recovery period begins. After that period, account and profile information is deleted or anonymised unless limited information must be retained for a lawful purpose.

Retention depends on the information, purpose and context. In particular:

• Account, profile, matching and ordinary Chat information is generally retained while your account or the relevant relationship remains active, subject to feature-specific deletion.
• Email-address and minimum verification or recovery records are retained while necessary to protect the account, handle a recovery request, comply with legal obligations or defend legal claims.
• A simple block removes the ordinary chat from active use while retaining the minimum block status needed to enforce the block.
• Reports and relevant evidence may be retained for as long as reasonably necessary to investigate and manage safety, moderation, repeat-risk, disputes or legal claims, with access restricted to authorised personnel.
• A WhatsApp city-launch preference is retained until the alert is sent, you withdraw consent, you delete your account or the purpose is no longer reasonably active. A minimum consent and suppression record may be retained where necessary to demonstrate compliance and prevent further messages.
• Purchase, subscription, payment and tax records are retained for periods required by applicable accounting, tax, consumer and fraud-prevention laws.
• Security, access and diagnostic records are retained for a proportionate period and may be kept longer where needed to investigate an incident or legal claim.

We determine retention periods by considering the purpose of the processing, the nature and sensitivity of the information, legal or regulatory requirements, safety and fraud risks, disputes or claims, and relevant technical and operational constraints. When information is no longer needed, it is deleted, anonymised or securely isolated unless continued retention is required or permitted by law.

11. Security

We take appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include access controls, role-based permissions, encryption or pseudonymisation where appropriate, monitoring, backup, supplier safeguards and controls against automated abuse.

Although we work hard to keep information secure, no system can guarantee absolute security. We encourage you to protect your account credentials and device and to contact us if you suspect unauthorised access.

12. Your Rights

Depending on the laws that apply to you, you may have the right to:

• Access your personal information.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information.
• Request restriction of processing.
• Object to certain processing, including direct marketing where applicable.
• Request data portability.
• Withdraw consent where processing is based on consent.
• Request human intervention or contest certain qualifying automated decisions.
• Lodge a complaint with the competent data protection authority.

For a WhatsApp city-launch alert, you may withdraw consent at any time using the opt-out instruction or keyword included in the message, or by contacting privacy@nubbu.club.

We may need to verify your identity before completing a rights request. We will respond within the period required by applicable law and explain any lawful limitation that applies.

13. Children

Nubbu is intended exclusively for individuals who are 18 years of age or older.

We do not knowingly collect personal information from anyone under 18.

If we become aware that an account belongs to a person under 18, we may suspend or permanently delete the account and associated information, subject to any limited safety or legal retention requirement.

14. International Data Transfers

To provide our services, Nubbu may work with trusted technology, communications, analytics, event and payment providers located in different countries.

As a result, personal information may be processed or stored outside your country of residence.

Where required, international transfers will use an applicable safeguard such as an adequacy decision, the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum or another legally recognised mechanism, together with supplementary measures where appropriate.

Some providers may also process information under their own terms in countries with different privacy laws. Further information about relevant safeguards may be requested through privacy@nubbu.club.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our services, providers, practices or applicable laws.

Where changes are material, we will provide reasonable notice through the Nubbu app, our website or another appropriate channel. If a change requires new consent, we will request it separately and will not treat continued use alone as consent.

The version and last-updated date at the beginning of this Policy identify the applicable text.