Privacy policy
Effective October 8, 2026
This policy explains what the DubDub app ("DubDub", "we") collects, why, and what you can do about it. Questions: colbymaloydev@gmail.com.
What we collect
Account identifier
When you first open DubDub, the app creates an anonymous account with Firebase Authentication (Google). It has a random user ID and no name, email or phone number. Firebase records when the account was created and last used, and processes the network information (such as IP address) needed to provide the service and prevent abuse.
Optional account and username
You can create an account to use DubDub on other devices: with Sign in with Apple on Apple devices, or with Google on iPhone, Android and the web. With Apple we ask for no name or email address; Firebase Authentication stores the account identifier Apple gives us for DubDub. With Google, Firebase Authentication stores your Google account ID and the email address, name and profile photo link Google shares with sign-in; DubDub does not show or use them except to sign you in. With an account you can choose a username (3–16 letters, numbers or underscores). Your username is stored in Cloud Firestore (Google), shown to other players in your rooms in place of your generated stage name, and visible to other signed-in DubDub players who look it up. Signing out returns you to a new guest identity on that device.
Purchases
Subscriptions are sold through the App Store or Google Play and managed with RevenueCat. We send RevenueCat your anonymous user ID. RevenueCat receives purchase and subscription records from the store (products, prices, dates, renewal status, store transaction IDs) and basic device and app information (such as device model, OS version, app version, country and language) to validate purchases and show the right offer. Apple and Google process payment; we never see your payment details. On the web, subscriptions are sold through RevenueCat Web Billing, and card payments are processed by Stripe: they receive your email address, card details and billing country and postal code to take the payment and send receipts, under their own privacy policies. We never see your card details.
Voice recordings
While a round is recording, DubDub uses the microphone to record your take of the line. In solo practice the take is scored on your device, played back at the reveal, and deleted from the device when you leave the match; it is not uploaded.
Rooms
When you play in a room, your take is uploaded to Firebase Cloud Storage (Google) so the other players in that room can hear it at the reveal, and a room record in Cloud Firestore holds your generated stage name (for example "Velvet Otter") or username, the character and outfit you chose, your player level, ready state, take scores and match totals; a room you host also records the room look you chose. Only players in the room can read the takes and player records. Rooms you join with a code are with the people who shared it. Play puts you in a public room with other DubDub players you may not know: they see and hear the same things room players do. Play runs on a Google Cloud Function that receives your account ID, name, chosen look and level to place you in a room. If you would rather play only with friends, use Create lobby or Join with code. Emotes you throw at a performer (for example a tomato) are sent to the room as short records with your account ID and are deleted automatically about an hour later. Takes are deleted as soon as the match ends; room records are deleted when the host leaves, and anything left behind (for example if an app closes mid-match) is deleted automatically about a day after it was created. Other players' devices keep a downloaded copy of your take only until they leave the room. Room codes are short-lived invitations, not identifiers.
Voice chat
In rooms you can talk with the other players. Voice chat runs on Stream (Stream.io, Inc.). DubDub only uses your microphone for voice chat after you turn on the mic in a room, and it switches off on its own while anyone records a take. Your voice is relayed live to the players in your room and is not recorded or stored by DubDub or Stream. To connect you, Stream receives your account ID, your stage name or username, your IP address and connection details. Stream's record of a room's call is deleted when the room closes, and its record of you is deleted when you delete your data. You can turn voice chat off in Settings and mute any player; blocking a player also mutes them.
Reports and blocks
You can report or block another player from their name in a room. A report stores your account ID, the reported player's account ID and name, the reason you picked, the room and round, and the time; if they recorded a take that round, a copy of it is kept so we can review what was said. Reports and their copies are visible only to DubDub's moderators (never to the reported player), and are deleted automatically after 90 days. Blocking stores the blocked player's account ID and name in a list only you can read; it mutes their takes and emotes for you and keeps you out of public rooms with them. Delete my data removes your block list.
Sound suggestions
If you suggest a sound or line for DubDub's library, we store what you wrote (the idea, category, an optional link and notes) with your account ID and the time, in Cloud Firestore (Google). Our team reads them to choose new clips; they are never shown to other players. Suggestions are deleted after a year, and Delete my data removes yours. A link is treated as a lead only.
Level and XP
You earn XP for each match you finish, from your take scores and placing. Your XP total is kept on your device. If you have a Sign in with Apple account, it is also stored in Cloud Firestore (Google) under your account so your level follows you to other devices; only you can read it, and Delete my data removes it.
App settings from our servers
DubDub uses Firebase Remote Config (Google) so we can change some settings without an app update, such as whether the subscription is required yet. To do this, the app sends a Firebase installation ID (a random identifier for this installation of the app) and basic app and device information (app version, platform, language and country) when it fetches these settings. It is not used for advertising.
On your device only
The number of free games used, the character, outfit and room look you picked in the locker, and your app settings are stored on your device and are not sent to us (except the choices sent with you into rooms, as described above). Game content (lines and sounds) is downloaded from our servers; that request carries your anonymous account so only DubDub players can download it.
Usage statistics
DubDub uses Google Analytics for Firebase to understand how the game is played, so we can improve it: for example which screens you open, when matches start, finish or are left early, take scores by category, emotes thrown, level-ups, paywall views and purchase results, and settings you change. These events are linked to your DubDub account ID (a random ID, not your name) and an app-instance ID, with basic device and app information (device model, OS and app version, language, country derived from IP address). We do not collect the advertising ID, do not use this data for advertising or ad personalization, and do not track you across other apps or websites. You can turn this off in Settings → Help and legal → Share usage stats. Google keeps this data for up to 14 months.
Crash reports
On iPhone, iPad, Mac and Android, if DubDub crashes or hits a serious error, Firebase Crashlytics (Google) receives a crash report: what went wrong in the app's code, the device model, OS and app version, free memory and disk, whether the app was in the foreground, and a random Crashlytics installation ID. Crash reports are not linked to your DubDub account and are kept for 90 days. Share usage stats in Settings also turns crash reports off.
Notifications
On iPhone and Android you can turn on new pack alerts (after a match, or in Settings → Gameplay). If you do, Firebase Cloud Messaging (Google) gives your device a push token and subscribes it to a "new packs" topic, and Apple Push Notification service or Google's push service delivers the alerts. We send only announcements of new packs to everyone subscribed; we do not store your push token or link it to your account. Turn alerts off in Settings or in your phone's notification settings.
App integrity checks
To stop abuse of our servers, DubDub uses Firebase App Check (Google) to confirm that requests come from the real DubDub app: App Attest (Apple) on Apple devices, Play Integrity (Google) on Android, and reCAPTCHA Enterprise (Google) on the web. These services check the app and device or browser and return a short-lived token; reCAPTCHA Enterprise may collect hardware and software information and how you use the page, under Google's privacy policy. DubDub does not see or store these signals.
Not collected
DubDub has no advertising or tracking across apps or websites. Scoring compares timing, pitch movement and loudness with the original line; it does not identify you by your voice.
How we use it
To run the game, keep track of your subscription and free games, restore purchases, and prevent abuse. We do not use your data for advertising and we do not sell or share it for advertising.
Keeping and deleting your data
Delete my data in Settings deletes your account (guest or Sign in with Apple, revoking DubDub's access to your Apple account), your username, your saved XP, your block list, your sound suggestions and Stream's voice chat record of you, unlinks your purchases from it, and clears app data on your device. The free-game count is kept on the device so that deletion cannot be used to get more free games; it is an anonymous number. A new anonymous account is then created so the app keeps working.
Store purchase records are kept by Apple or Google, and RevenueCat keeps transaction records needed for accounting and fraud prevention. Deleting your data does not cancel a subscription; cancel it in your App Store or Google Play account. To have records for an old account removed from RevenueCat, email us.
Your rights
Depending on where you live, you may have the right to access, correct, delete or object to the use of your personal information. Most of this you can do in the app; for anything else, email us and we will respond within 30 days.
Children
DubDub is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has used DubDub, email us and we will delete their data.
Changes
If we change what we collect or how we use it, we will update this page and its effective date before the change takes effect in the app.