Privacy Policy

At a glance

Three things that are true before you read any of the clauses. The detail below matters, but if you read nothing else, read these. They describe how the product works today.

Your screen is seen only when you ask

When you hold the talk keys (fn control on a Mac, Ctrl Win on Windows) and ask, the app sends a screenshot of the screen your pointer is on. When you type a question in the notch on a Mac, or in the panel on Windows, it sends one of your main display. During a walkthrough or an agent task you start, it looks again as you go, and stops when the task ends. Your screen is never recorded as video.

The microphone opens and closes with your hand

Audio is captured while the keys are down and stops when you let go. A question you start with Speak in the notch on a Mac, or in the panel on Windows, listens until you stop speaking or tap it again, for 30 seconds at most. A voice conversation you start listens until you end it. The Notetaker records only when you start it or say yes to its offer, and stops on its own after eight silent minutes.

Our servers keep only the settings you save

Screenshots, audio, questions and answers pass through our servers to produce your answer and are not stored there. Your conversation history and your notes live on your computer. The profile and settings you keep with your account are stored with it.

1. Who this policy is from

In this policy, StackAdroit LLP, we and us mean the company that makes the AirBubble app for macOS and Windows and runs the online service it connects to. You means the person using the app.

StackAdroit LLP is a limited liability partnership registered in India. Its LLP identification number (LLPIN) is ABC-0736. Its registered office is at 227, Sector D, CAT-Rau Road, Rangwasa, Treasure Fantasy, Indore, Madhya Pradesh 453331, India. Where data protection law calls for a controller, we are the controller for everything described here. To reach us about your data, write to privacy@airbubble.io.

2. The short version

The clauses below carry the full detail, and nothing in them contradicts this summary.

• We collect what is needed to answer what you ask, and the account details needed to know it is you.
• Our servers store no screenshots, audio, transcripts, questions or answers. Your conversation history and your Notetaker library live on your computer. Your profile and the settings you keep with your account are stored with it.
• Your content goes to a small number of services that produce your answer. They are named on the subprocessors page.
• We do not sell your personal data. We do not train models on your content, and the services that process it do not either.
• You can delete your account in the app, or ask us for a copy of your data or to delete it, and we will do it. See your rights.

3. What we collect, and when

The waitlist

Sign-ups to the waitlist closed on 28 September 2026. For each address already on it we store the address, the time it arrived, and which page the form was on. We keep nothing else. That means no IP address and no browser or device details, so there is nothing that would let us reconstruct your visit. We use the address only to send the one email we promised, on launch day. We never sell or rent it, or pass it to anyone for their own use.

Ask us at any time and the address is deleted, before or after that mail goes out. You do not need an account to ask, and the address you are asking about is the only thing we need to find it. Every address on the list is deleted on launch day, the day that email goes out.

If you apply for a job

If you apply by email, we keep what you send: your message, your CV and anything you attach. We use it only to consider you for the role and to reply to you. We delete it 6 months after we decide, or 6 months after it arrives when there is no open role.

Account details

An account is required to use AirBubble, on every plan. When you sign in, the sign-in service holds your email address. If you sign in with email, it sends a one-time code to that address. If you continue with Google, it also receives your name and picture from Google. Our own tables keep a keyed fingerprint of your email rather than the address, the times you signed in, the version of the terms you accepted and your plan, with Paddle’s reference numbers for your subscription.

We also email you about your account and plan, starting with a welcome. Each time, we look up your address from the sign-in service, or from Paddle for a billing email, and do not keep it in our own tables.

Downloads

You download AirBubble without signing in, and we ask you for nothing. Our servers count each download with no account attached. The time and the app version go in our service logs, which are kept for 3 days. Our own log line keeps only a fingerprint of your network address. Our host’s record of the request keeps the address itself, as section 5 says.

Profile and settings

When you are signed in, the app keeps your profile and some settings with your account so they follow you to another computer: your name, role, company and picture, background text you add about yourself, your dictionary of names and words, Bubble’s colour and size, the language he answers in, and your choices for asking him, his voice, dictation and the Notetaker. Your email address is never among them, and neither is screen control, which you turn on separately on each computer.

Usage records

Each time you use AirBubble, our database records what kind of thing you used, when and how much: for example the seconds of a dictation, or the model and size of a request. It never records what was said or shown. This is how your plan’s credits are counted.

Your screen, when you ask

When you hold the talk keys (fn control on a Mac, Ctrl Win on Windows), the app takes a screenshot of each display and sends the one your pointer is on, and the others too if your question is about another screen. When you select an area with the select keys (fn shift on a Mac, Shift Win on Windows) or, on a Mac, Command + Option + A, the same happens once you have selected it, with a close-up of the area. The app also reads what the window in front of you shows: the names of its buttons, menus and fields, its text, and what is typed in a field, never a password field. On a Mac it does this with the Accessibility permission you grant in macOS, and on Windows through its own accessibility interface, which asks for no permission. A question you type in the notch on a Mac, or in the panel on Windows, sends a screenshot of your main display, and what it reads in that window too when you address it to Bubble or ask about something on your screen, how to do something, or where something is. These go over an encrypted connection to our servers, with your words, the earlier turns of the conversation and, if you keep files in the Knowledge folder, text from them. Our servers pass them to Anthropic to produce your answer.

If you select text and ask about it or ask for a change, the selected text and your words go to Anthropic. When text is selected in a field you can type in and you ask Bubble to do something, the selected text is sent with your request even if the request turns out to be about something else; nothing in that text is changed then. Text in a password field is never read.

When you name a folder of documents in a question, such as “use the documents in my Q3 folder”, or on a Mac say “this folder” with one open in Finder, the app reads the files in it on your computer and sends from them with that question, the same way: the whole folder’s text if it comes to 40 KB or less; otherwise the passages that answer your question, up to 20 KB, or the start of each document, up to 40 KB in all, when you ask about the whole folder or nothing in it matches; and the names of the files it read and of those it left out, up to 500 of each. For 30 minutes, a follow-up question uses the same folder, sent the same way. When you ask for something to be made from the folder, its passages go with that task instead, up to 24,000 characters. A folder you name it looks for only in your Knowledge folder, Desktop, Documents and Downloads. “This folder” is, on a Mac, the one open in the front Finder window: a folder in your home folder, iCloud Drive or another cloud drive, never your home folder itself, the rest of Library or a hidden folder, and nothing is searched for it. It skips hidden files and ones that look like passwords or keys, and files kept only in the cloud are not read or downloaded, here or in your Knowledge folder; the app tells you how many it left out.

Neither the app nor our servers save the screenshot. Your recent questions and his answers are kept as text in memory on your computer, so a follow-up makes sense. Your latest question and his answer may be saved there, encrypted, as a discussion in your Notetaker library until you delete it. Each save replaces the one before, so earlier questions in that discussion are not kept. Our servers keep none of it. Your screen is never recorded as video.

Walkthroughs

During a walkthrough you start, the app reads the names of the controls in the window in front of you about every two and a half seconds. That reading happens on your computer, is not a screenshot, and sends nothing. When the app, its web address or its controls have changed, your goal, the app’s name, its web address, the names of its controls, where your pointer is and the steps so far go to Anthropic to plan the next step, with text from your Knowledge folder if you keep files there. No screenshot goes with them. If a step’s control is no longer where the step expects it, the name the step gives it and the names, kinds and positions of the controls now in the window go to TypeSafe, through Vercel AI Gateway, under zero data retention, to find it again. If the control a step needs cannot be found by its name, a screenshot of the display the step is on goes to Anthropic to find it. The walkthrough ends when you finish or stop it, when you stay out of the app it is teaching for 30 seconds, after 15 steps, or after 20 minutes in which neither the screen nor your pointer changes.

Agent tasks

The agent acts in another app only on a task you ask for, in your own words, spoken or typed. Steps that can be undone, such as opening an app or a site, searching or typing into a field, it takes without asking again. If you turn on Always approve routine steps, a task the app judges to be routine starts by itself after 5 seconds unless you cancel it. Before a step it recognises as sending, posting, submitting, deleting, accepting or installing something, it asks you once. It can tell by the button’s name, by the key, or by what it has just written there; where a button has no name it can read (an icon, an app that shows it nothing), it asks only if it takes the step for one itself. It never types sign-in details, a one-time code or a card number. It stops before paying on a page it recognises as taking money, by the page’s address or title, a card field in view or the system’s pay sheet; in a browser whose pages it cannot read, only the address and title tell it. Those steps need you.

Bubble does each task by screen control: he looks at a screenshot of the display after each step and uses the pointer and the keyboard in front of you. It is on unless you turn it off with Work from screenshots in settings. With it off, the task and the names of the controls in the front window go to Anthropic to plan the steps instead; if an app does not show its controls, he asks whether he may work from the screen, and a yes turns it back on and it stays on. Updating to 1.2.0 turned it on once, even where it was off before. A screen control run starts when you ask for the task. During the run, screenshots of the display the app is on, with everything but that app’s windows and on a Mac the menu bar blanked out, go through our servers to Anthropic with the task and the app’s name, up to 30 in a run, and the app keeps a log of each step on your computer. On a Mac, while a notification or Notification Center is on screen, the right half of the display is blanked out too. If macOS draws one further left, over the app’s window, that part can show in a screenshot. A longer task works as a series of runs, each with the same limit. Each time screen control runs, it deletes the days of that log more than 30 days old. Our servers keep that a task ran, how many steps it took and whether it finished, for 90 days. Saying stop, pressing Stop or moving your mouse ends a task while it works, and switching Let Bubble act off stops a task that is already under way.

Audio, for transcription

While you hold the keys, the microphone is on. Your recorded speech goes over an encrypted connection to our servers, then through Vercel AI Gateway to SpaceXAI, which turns it into text under zero data retention. If that service is down, Cartesia does it instead. Neither the app nor our servers keep the audio, and we cannot play it back.

Dictation, with the dictation keys (fn option on a Mac, Alt Win on Windows) or, on a Mac, Command + Option + D, works the same way, and the finished text is typed into the field you were already in.

In a voice conversation you start, your speech in English goes straight from your computer to Cartesia on a short-lived key we issue, together with your dictionary of names and words. In other languages it takes the same path as a held key.

Pointing

To find the control you mean, the app sends your words, the app’s name and the names, kinds and positions of the controls in the front window to TypeSafe, through Vercel AI Gateway, under zero data retention. If the window changes before he points, the name of that control, or your words, and the names, kinds and positions of the controls now around it go the same way, to check it is still there. No picture of your screen goes with them.

Bubble’s voice

Bubble speaks in the AirBubble voice, made by Cartesia from the text of each reply, or by ElevenLabs while Cartesia is down. If neither can be reached, he speaks with the voice built into macOS or Windows, on your computer. Turn his voice off in settings and no reply text is sent anywhere.

Dictation clean-up

When you dictate, Transcript correction sends the dictated text, your recent dictation, your dictionary of names and words and the text around your cursor to Anthropic to tidy the wording. Screen-aware drafting adds up to 12 short pieces of text from the front window, the app’s name and its web address. Both are on until you turn them off in Settings. If you turn on Voice commands while dictating, what you say and the start of the field go to Anthropic to work out the command. If you select text and ask for a change, the selected text and your instruction go to Anthropic.

Notetaker sessions

The Notetaker records only after you start it, with the one-tap card it offers or on a Mac with Command + Option + N, and it stops on its own after eight silent minutes. Its audio takes the same path as a held key. To tell apart the people it hears through your computer’s sound, the app compares how their voices sound, on your computer and in memory, for that recording only, and it keeps no voiceprint. Your typed Thoughts, the Transcript and the Summary are kept apart, and a model never rewrites your Thoughts.

When a recording stops, its transcript goes to Anthropic to write the Summary, and it goes again when you update the summary. When you ask about the session, its transcript, its Summary and the Thoughts you typed go to Anthropic to answer you. Transcript correction, on until you turn it off, also sends each new line of the transcript to Anthropic, with the three lines before it and your dictionary of names and words, to tidy it. If you turn on Live cues, what has been said so far goes to Anthropic at natural pauses while it records, so Bubble can suggest what to say next. None of this includes your screen.

On a Mac, to name who spoke, the app reads the speaker name Zoom or Teams shows during a call, on that Mac, and the name stays with that line of the transcript. The name comes from the call app, never from a voice.

Each time a recording starts, the app reminds you to let everyone in the conversation know, and offers a notice you can paste into the meeting chat. Both are on unless you turn them off in Settings. It shows that it is recording until it stops. The people you record are covered by our notice for people in a recorded conversation.

Sessions live in the library on your computer, and our servers keep none of them. One tap in Notes deletes a session, and it leaves the search across your meetings with it.

Payments

If you buy a plan, Paddle sells it to you as our reseller and handles the payment. Your card details go straight to Paddle, never through us. We receive which plan you bought, its status and its renewal date. If you buy on this website, you sign in first. When you continue to payment, the page sends our servers proof of your sign-in, which carries your email address, with the plan, how often it is billed and the version of the terms you accepted. Our servers use your email address to set up the checkout with Paddle for your account. If you have no account yet, this creates it, the same way signing in to the app does.

Service logs

Our servers write one line for each request: fingerprints of your account and network address, the path, the result, the timing, which service answered and the type of any error. Never content. The app sends no crash reports.

4. Why we are allowed to process it

Where the GDPR or UK GDPR applies, these are the lawful bases we rely on. Where it does not, the same reasoning still describes why we hold what we hold.

• Performing our contract with you: account details, plan, and the processing of a question into an answer. You asked for the answer; producing it is the service.
• Your consent: microphone access, and on a Mac the screen recording and accessibility permissions, each agent task you ask for, any marketing email, and, in the European Economic Area and the UK, counting your page views on this website. You grant these in your computer’s settings (System Settings on a Mac, Windows Settings on Windows), in the app or on this website, and you can withdraw any of them without losing the rest of the product.
• Our legitimate interests: keeping the service up, finding and fixing defects, preventing abuse of our servers, and understanding aggregate usage. We use the least identifiable data that answers the question.
• Legal obligation: billing, tax and accounting records, where the law requires us to keep them.

5. How long we keep it

• Screenshots, audio, transcripts, questions and answers: Never stored on our servers. They pass through to the services that produce your answer, which keep them only as the subprocessors page says for each one.
• Notetaker meetings: The audio is never kept, on your computer or on our servers. Each meeting’s transcript, summary and notes stay on your computer, encrypted, until you delete them, and one tap deletes a meeting. Our servers keep only how long each recording ran, as a usage record.
• Usage records: What kind of thing you used, when, and how much, never what was said or shown. Kept while your account is open.
• If you delete your account: Your usage records are cut off from you at once.
• Billing records from Paddle: Kept 24 months, for tax and for disputes. We keep Paddle’s reference numbers and a fingerprint of each message, never the message itself.
• Server logs: Kept 3 days. They hold fingerprints of your account and network address, never content. Our host keeps a record of each request, with the network address it came from, for 1 day.
• Backups: Our database’s own restore history covers 7 days. We keep no other copies.
• Signing in: The one-time codes that connect the app to your account are deleted 1 day after they expire, and signed-in sessions 7 days after they end.
• Records of requests in progress: Kept 35 days after they close.
• Agent task records: That a task ran, how many steps it took and whether it finished, never what was on screen. Kept 90 days after the task ends.
• Your account, plan and email: Until you delete your account.
• Records of deleted accounts and of staff actions on an account: Kept with no deletion date yet.
• Waitlist addresses: Until you ask us to remove yours. Sign-ups closed on 28 September 2026, and every address is deleted on launch day.
• Job applications: What you send when you apply is kept 6 months after we decide, or 6 months after it arrives when there is no open role, then deleted.
• Your profile and the settings you keep with your account: Until you change or remove them, or delete your account.

6. Who else sees it

AirBubble is an online service. To answer you, it uses our own servers and the services below. Each is under a written contract that limits it to processing data on our instructions.

• Anthropic: Writes Bubble’s answers, lessons, walkthrough steps and spoken lines, tidies dictation and Notetaker transcripts, plans agent tasks, and runs screen control.
• Cartesia: Speaks Bubble’s replies in the AirBubble voice. Turns your speech into text live during a voice conversation in English, and transcribes whenever the main transcription service is down.
• Vercel: Runs our servers in Frankfurt, which every request from the app passes through, and hosts this website.
• Vercel AI Gateway: Passes recorded speech to our transcription service, and your words and the names of the controls on your screen to TypeSafe, each under zero data retention.
• SpaceXAI: Turns what you say into text for Talk, Dictation and the Notetaker.
• TypeSafe: Works out which control on your screen you meant and whether it is still there.
• Neon: Holds our database, with accounts, plans, usage records and the waitlist, and runs the sign-in service, which keeps your account, your sign-in sessions and the one-time codes it emails.
• Resend: Emails you a one-time code each time you sign in with email, and messages about your account and plan.
• Better Stack: Stores our request log and checks that the service is up.
• OpenAI: Answers in Anthropic’s place, only while Anthropic is down. Never used for screen control or for speech.
• ElevenLabs: Speaks Bubble’s replies, only while Cartesia is down.

These companies handle your data on their own account, under their own terms:

• Google: Confirms who you are when you continue with Google, under your Google account’s own terms.
• Paddle: Sells paid plans as our reseller and merchant of record, and handles payment, tax, receipts and refunds. Paddle.com Inc. sells to buyers in the United States, Paddle.com (Canada) Ltd to buyers in Canada, and Paddle.com Market Limited, of the United Kingdom, to buyers everywhere else.

What reaches each one, where it runs and what it keeps is on the subprocessors page. We post a new service there before it starts handling your data.

We may also disclose data if we are legally required to, and we will tell you when we are permitted to. If the business is ever sold or merged, your data moves with it and this policy continues to apply until you are told otherwise.

7. Where it goes

Our servers and our database run in the European Union, in Frankfurt. Some of the services we use run elsewhere, so data about you may also be processed in Vercel’s regions around the world and the United States.

Where data leaves the UK or the European Economic Area, we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision where one covers the destination. The regions each vendor runs in are listed on the subprocessors page. You can ask us for a copy of the safeguards that apply to a particular transfer.

8. What we do not do

These are commitments. We will not quietly change them.

• We do not sell your personal data, and we do not share it for cross-context behavioural advertising.
• We do not train models on your content, and the services that process it do not either.
• We do not look at what you keep with your account without a reason. Staff can read your saved profile and settings only to fix a fault you report or to deal with a specific abuse or security incident.
• We do not hide the app from your screen. AirBubble appears in your screen recordings and screen shares like any other app, and it never hides itself from the list of apps running on your computer.
• We do not run advertising or third-party trackers in the app.
• We do not make decisions about you by automated means that have a legal or similarly significant effect on you.

9. How it is protected

Traffic between the app, our servers and our providers is encrypted in transit. Stored data is encrypted at rest. Access to production systems is limited to the people who need it and is authenticated with multi-factor login.

If a breach ever affects your personal data, we will tell you and the relevant regulator within the deadline the law sets. Our security practices, and how to report a vulnerability, are on the security page.

10. Your rights, and how to use them

Depending on where you live, the law gives you some or all of these rights. We honour all of them for everyone, wherever you live.

• Access: get a copy of the personal data we hold about you.
• Correction: have inaccurate data fixed.
• Deletion: have your data erased, including by deleting your account.
• Portability: get your data in a machine-readable format, or have it sent somewhere else.
• Objection and restriction: object to processing based on our legitimate interests, or ask us to pause it while a dispute is resolved.
• Withdraw consent at any time, without affecting what was done before you withdrew it. If you turn off a permission for AirBubble (Screen Recording, Microphone or Accessibility in System Settings on a Mac, Microphone in Windows Settings), the change takes effect straight away.
• A person, not only a machine: if a payment is disputed with your bank, your account is suspended automatically until the dispute is resolved, and you can write to support@airbubble.io to have a person look at it.

To get a copy of your data, or to delete your account:

• Delete: In the app, Delete account in Settings closes your account at once, ends any plan and signs you out everywhere. Our servers erase the rest within 30 days, and until then you can write to privacy@airbubble.io to keep it. Your notes stay on your computer.
• By email: Write to privacy@airbubble.io from your account’s address and we act within 30 days.

There is no way to get a copy yourself in the app or on this website yet.

After you delete your account:

• Usage records stay, cut off from you.
• Billing records stay for 24 months, with nothing in our database that links them to you.
• Paddle keeps its own records of your payments, as the seller.
• Our database’s restore history can still hold your account for up to 7 days.

Your conversation history and Notetaker sessions are on your computer. You can delete them in the app while you’re signed in. Removing the app leaves them in place.

Each account that signs in on your computer has its own Notetaker library, profile, Knowledge folder, projects, dictionary of names and words and what you have told Bubble about yourself, and the app shows each account only its own. Signing out deletes none of it, and it is there again when that account signs back in.

We do not charge for this, and we will not treat you differently for asking.

Someone you authorise can make a request for you, and we will ask them to show that you did. If we turn a request down, we tell you why, and you can ask us to look at it again by replying to our answer.

If you are in the UK or the EEA and you think we have got this wrong, you can complain to your local supervisory authority. We would rather you told us first, but you do not have to.

11. Children

AirBubble is for people 18 or older and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has given us their data, write to privacy@airbubble.io and we will delete it.

12. This website

This site sets the cookies it needs to work and nothing else. We do not run advertising trackers here. We count page views with Vercel Web Analytics without storing anything in your browser, and not at all if your browser sends Do Not Track or Global Privacy Control. In the European Economic Area and the UK, we count them only once you accept, and Cookie settings at the foot of every page changes that. When you sign in to the app, it opens a sign-in page here. That page keeps a cookie for our sign-in service and is never counted in page views. When you buy a plan, in the app or on this website, you pay on a checkout page here that runs our payment provider’s checkout. Your card details go straight to that provider, never through us, and that page is never counted in page views. The detail is on the cookies page. If you give us your email for release notes, we use it for that and you can unsubscribe from any message we send.

If you send us feedback from the home page, we keep what you write, and your email address if you give one, for 12 months, to learn what people want from AirBubble. Nothing else about your visit is kept with it. If you tick the Windows box, we also use that email to tell you when the Windows version is ready, and you can ask us to remove it at any time.

Your account on our website

Signing in on airbubble.io uses the same account as the app. The sign-in service sets its own cookies to keep you signed in, which the cookies page lists. We keep no website session of our own.

13. Changes to this policy

When we change this policy we change the date at the top. If a change materially affects what we collect or who we share it with, we post it here at least 30 days before it takes effect. We keep every earlier version and will send you any of them on request.

14. How to reach us

Privacy questions, requests and complaints: privacy@airbubble.io. Anything else: hello@airbubble.io, or the support page.

By post: StackAdroit LLP, 227, Sector D, CAT-Rau Road, Rangwasa, Treasure Fantasy, Indore, Madhya Pradesh 453331, India.

A named contact for data protection will be added here once confirmed.