Privacy Policy
Effective date: November 5, 2026 · App: CodeBubble 1.0 · Package: com.bmo.codebubble
Overview
CodeBubble catches verification codes from SMS messages and app notifications on your device, copies them to the clipboard, and shows them in a draggable bubble. This policy explains what the app accesses, what it stores, and what it never does with your data.
The short version: CodeBubble collects nothing. It has no internet permission, no account, no analytics, and no ads. Your codes and messages never leave your phone.
Data we do not collect
CodeBubble does not collect, transmit, store on a server, sell, or share any personal data, including:
- Your phone number, contacts, or identity
- The content of your SMS messages or notifications, or the codes in them
- Your clipboard contents
- Your location, device identifiers, or usage statistics
There is no server, no account system, and no third-party SDK in the app. Because the app has no internet permission, it literally cannot send anything anywhere.
Data processed on your device
To do its job, the app reads the following only on your device:
- Incoming SMS messages — to detect verification codes.
- App notifications — to detect verification codes in notifications.
- Clipboard contents — to show a bubble for numbers you copy anywhere on the device.
Detected codes are copied to your clipboard and kept in a local history (the last 50 entries, with time, source, and message snippet) so you can copy them again. History can be cleared in the app at any time, and it auto-cleans entries older than 30 days if you enable that option.
If you enable the optional broadcast setting, detected codes are broadcast on your device for automation apps you chose. That broadcast stays on your device and is only received by apps you installed and configured yourself.
Permissions and why
The app requests only the permissions it needs to function: receiving SMS, sending notifications, reading notifications, displaying over other apps, running a foreground service, and battery exemption to stay alive in the background. Two extra shortcuts (per-brand battery page, restricted settings) are optional. See the Permissions section on the home page for the full list.
Third parties
CodeBubble shares nothing with third parties, because it sends nothing anywhere. The app's website and GitHub repository are public pages; visiting them is subject to GitHub's own privacy policy, which is outside this policy.
Security
All processing happens locally on your device, protected by your device's own lock screen and operating system. The app's source code is public (MIT licensed), so anyone can read exactly what it does.
Children's privacy
CodeBubble is not directed at children, and it collects no data from anyone, including children.
Changes to this policy
This policy may be updated from time to time. The current version on this page applies. Material changes will be reflected here with a new effective date.
Contact
Questions about this policy can be raised as an issue in the repository: github.com/lunrofi/codebubble/issues.