Bumble Privacy Policy

This document is Bumble Group's global privacy policy, governing the collection, use, storage, and disclosure of personal information by Badoo Trading Limited and Bumble Trading LLC across the Bumble mobile application, desktop version, and associated websites, with GDPR cited as a primary legal framework and Bumble positioned as data controller. The policy states it collects a broad range of data categories including registration details, geolocation, device identifiers, biometric data (for profile and ID verification), purchase information, message content, photo metadata, and linked social media data, and the terms authorize use of this information for matching algorithms, moderation, service delivery, marketing, fraud prevention, and legal compliance. Notably, the policy discloses collection and processing of biometric data through profile and ID verification features, a category subject to heightened legal requirements in several US states (including Illinois BIPA and Texas CUBI) and under GDPR Article 9 as a special category; the policy also acknowledges use of automated decision-making including profiling, and discloses that user data may be transferred internationally outside the EEA under standard contractual clauses or other approved transfer mechanisms. The policy engages GDPR, UK GDPR, CCPA/CPRA for California residents, and potentially Illinois BIPA and other US state biometric privacy statutes, with enforcement exposure distributed across the ICO (UK), EU supervisory authorities, California Privacy Protection Agency, and US state attorneys general. Material compliance considerations include the lawfulness of biometric data processing under both GDPR and US state law, the adequacy of consent mechanisms for special category data, and the sufficiency of disclosed cross-border data transfer safeguards.