Privacy Policy
This Privacy Policy explains how Rivon Labs ("we" or "us") handles personal information in operating Bubbly (the "Software") and this website. It covers what Article 30 of the Personal Information Protection Act of Korea and Article 13 of the EU General Data Protection Regulation (GDPR) require us to tell you. This policy is provided in Korean and English; if the two versions differ, the Korean version prevails.
In short: the content of your notifications never leaves your Mac. The Software has no ads and collects no usage analytics, and this website uses no cookies or visitor analytics. The only personal information we receive is Pro purchase and license information, and the emails you send us.
1. Information that stays on your Mac
The following is processed only on your Mac and is never sent to us. We cannot receive or see it.
- Notification content (app name, title, body, icon): used to redraw notifications on your screen.
- History: past notifications are saved in a file on your Mac (on by default, kept for 30 days). Only your user account can read the file (permission 0600). You can change how long to keep it (7, 30, or 90 days), turn history off, clear it, or leave out specific apps.
- Settings: per-app rules (the names and bundle IDs of apps you choose), shortcuts, and so on.
- License key: when you activate Pro, it is stored in your Mac's keychain.
- Logs: troubleshooting logs record only the length of notification text, not the text itself.
- Diagnostic files: "Report a Problem" creates a file that you save yourself. The Software never sends it anywhere. We receive it only if you attach it to an email (see 2-3).
2. Personal information we process
| What | Why | Legal basis | How long |
|---|---|---|---|
| 2-1. Pro license verification — license key, activation ID, organization ID, label (Mac name), a random ID created for each installation, and the IP address that comes with the connection | To activate Pro, check that it is valid, and manage the number of Macs per key (three) | PIPA Art. 15(1)(4) (performance of a contract); GDPR Art. 6(1)(b) | While your Pro license remains in effect. When a refund is issued or you deactivate a Mac, that activation is deactivated |
| 2-2. Purchase and order information — buyer email, name, and country; order number, amount, and date; the license key issued and its activations | To provide licenses, handle refunds, and resolve purchase questions and disputes | PIPA Art. 15(1)(4) and (2) (legal obligation); GDPR Art. 6(1)(b) and (c) | Polar processes payments and holds the records; we do not download separate copies. Where the law requires us to keep records, we keep them for that period (Enforcement Decree of the Korean E-Commerce Act, Art. 6: contract, withdrawal, and payment records for 5 years; consumer complaint and dispute records for 3 years) |
| 2-3. Support and refund emails — email address, name (if given), message, and attachments (such as diagnostic files) | To answer your questions and process refund requests | PIPA Art. 15(1)(4) (action at your request); GDPR Art. 6(1)(b) and (f) (our legitimate interest in answering inquiries) | 1 year after the matter is closed; 3 years for refunds and disputes |
- Payment details (such as card information) are processed directly by Polar as the merchant of record; we do not receive them. Payment processing is governed by Polar's privacy policy.
- Without the information in 2-1 you cannot activate Pro, but the free features keep working. If you do not send an email (2-3), we cannot receive your question or refund request.
- We do not use this information for automated decision-making, including profiling.
3. The Software's internet connections
The Software connects to the internet only in these five cases. It does not send notification content or usage analytics.
| Connection | When | To | What is sent |
|---|---|---|---|
| Update check | When you allow automatic checks or check manually | This website (GitHub Pages) | The request itself¹ |
| Release notes | When the update window opens | This website (GitHub Pages) | The request itself¹ |
| Update download | When you install an update | GitHub Releases | The request itself¹ |
| Compatibility settings | Once a day | This website (GitHub Pages) | The request itself¹ |
| Pro license verification | When you activate Pro and later when its validity is checked | Polar | The information in 2-1 |
¹ The request itself: any connection gives the receiving server your IP address, the time of the request, and standard request information that includes the versions of the Software and macOS. Update checks do not send system information. GitHub processes these records under its own privacy statement; we do not receive them.
The Pro checkout and the customer portal (for deactivating Macs) open on Polar's website in your browser, not in the Software.
4. This website
- There are no cookies, visitor analytics, tracking tools, or scripts or fonts loaded from elsewhere.
- To remember your language choice (Korean or English) for your next visit, we store it only in your browser's local storage. It is not sent to us, and it is removed when you clear the site's data in your browser.
- This website is served by GitHub Pages. When you visit, GitHub may process access records (IP address, time, browser information); we do not receive them.
- Cloudflare resolves our domain name (DNS). Your connection goes directly to GitHub and does not pass through Cloudflare.
5. Disclosure to third parties and processors
We do not provide personal information to third parties. We use the following processors, all located outside Korea (see 6).
| Processor | Task |
|---|---|
| Polar Software Inc. | Issuing, verifying, and managing Pro license keys and activations; keeping order records |
| Google LLC | Receiving and storing our email (contact@rivonlabs.com) |
6. International transfers
Under Article 28-8(1)(3) of the Personal Information Protection Act, we transfer personal information abroad as follows, as processing and storage needed to perform our contract with you.
| Polar | ||
|---|---|---|
| Recipient and contact | Polar Software Inc. · privacy@polar.sh | Google LLC · Google privacy contact form |
| Country | United States (countries of Polar's sub-processors are listed in its sub-processor list) | United States and other countries where Google operates data centers |
| Information | The information in 2-1 and 2-2 | The information in 2-3 |
| When and how | When you activate or verify Pro and when you buy, over the internet (HTTPS) | When you send us an email, over the internet |
| Purpose | The tasks in 5 | The tasks in 5 |
| Retention | Same as 2-1 and 2-2 | Same as 2-3 |
| How to refuse, and the effect | If you do not activate Pro, nothing is transferred; the free features keep working | If you do not email us, nothing is transferred; we then cannot receive your question or refund request |
Safeguards for transfers from the EU, EEA, and UK: transfers to Polar follow the EU Standard Contractual Clauses (and, for the UK, the International Data Transfer Addendum) in Polar's Data Processing Addendum; transfers to Google follow the EU Standard Contractual Clauses and other safeguards in the Google Cloud Data Processing Addendum.
7. Deletion
When a retention period ends or the purpose is achieved, we delete the information without delay. Electronic files are deleted so they cannot be recovered (for email, including the trash), and information held by Polar is deactivated or deleted at our request to Polar. Information we must keep by law is kept separately, and only for the required period.
8. Your rights
- You may ask us to give you access to, correct, delete, or stop processing your personal information (PIPA Arts. 35–37). If you are in the EU, EEA, or UK, you also have the GDPR rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21).
- Email contact@rivonlabs.com. A representative (a legal guardian or a person you authorize) may also make the request. We will reply within 10 days after confirming your identity (within one month where the GDPR applies).
- We do not hold the information on your Mac (section 1), so you delete it yourself: clear history in Settings › History, and deleting the Software lets you remove the rest. You can deactivate Macs in Polar's customer portal.
- You may file a complaint with the Personal Information Protection Commission of Korea. If you are in the EU, EEA, or UK, you have the right to lodge a complaint with the data protection authority in your country (GDPR Art. 77).
9. Security measures
- The Software: notification content never leaves your Mac; history files and folders can be opened only by your user account, and the text of deleted records is overwritten in the file. The license key is kept in the keychain. Updates and compatibility settings are used only after their signatures are verified. Internet connections use HTTPS.
- Rivon Labs: we run no servers that hold personal information. Our Polar and email accounts are used only by the person in charge and are protected with two-step verification.
10. Children
We do not knowingly collect personal information from children under 14. A child under 14 needs the consent of a legal guardian to buy Pro.
11. Privacy contact
Please send questions, complaints, and requests for remedies about personal information to:
- Controller: Rivon Labs
- Privacy contact: contact@rivonlabs.com
12. Remedies in Korea
For reports or advice about privacy violations, you can also contact:
- Personal Information Infringement Report Center (KISA): privacy.kisa.or.kr, 118
- Personal Information Dispute Mediation Committee: www.kopico.go.kr, 1833-6972
- Supreme Prosecutors' Office: www.spo.go.kr, 1301
- Korean National Police Agency: ecrm.police.go.kr, 182
13. Changes to this policy
When we change this policy, we will post the changes and their effective date on this website at least 7 days before they take effect. Important changes unfavorable to you will be posted at least 30 days before they take effect and also announced separately, for example within the Software.
Effective date This policy takes effect on October 28, 2026.