privacy
what pebble keeps, where it lives, and who can see it.
this is a draft. placeholder wording so the page exists while the site is being built. it has not been reviewed by anyone, and it is not the final text. the real version replaces it before pebble is in the app stores.
what pebble holds
pebble is for sending one person something small. to do that, it keeps:
- the pebbles you send and receive — a doodle, a photo, a feeling, and any short caption that rides along
- your account: the email address you sign in with, which is never shown to anyone and never searchable
- your connections — who you exchange pebbles with — and the invites that made them
- a push token for your phone, so pebble can tell you a pebble arrived
that is the whole list. beyond a name and a picture, seen only by your connections, there is nothing else — no contact list upload, no address book scan.
what a notification says
a notification says who sent a pebble — never what it is. no picture, no caption, no feeling travels through the notification service. the content waits inside pebble until you open it.
the one thing that leaves the EU is that content-free nudge: it goes through your phone's push service, along with the device token it needs to find your phone. nothing you sent rides with it.
who can see a pebble
a pebble is reachable only by the two people in its connection. the database enforces this row by row: every table is closed by default, and only the two members of a connection can read what passes between them.
pebbles are not end-to-end encrypted today. they are encrypted at rest and in transit, and no person at pebble reads them, but the system could in principle. we would rather say that plainly than promise something we have not built yet.
where your data lives
everything pebble stores — pebbles, media, account details — stays in the EU/EEA. this is a commitment, not a convenience: every service that touches personal data is chosen with that in mind.
no analytics, no tracking
pebble does not run analytics, advertising, or tracking of any kind — not in the app and not on this site. nothing is counted, no profile of you is built, and nothing is sold or shared with anyone for marketing.
your choices
- letting a pebble go removes it from your nest. the other person is never told.
- you can ask us to delete your account, and with it your pebbles, connections and sign-in details.
- you can ask for a copy of what pebble holds about you, or ask us to delete it, by writing to support@getpebbleapp.com.
questions
write to support@getpebbleapp.com. a person answers.