Bumble Privacy Policy

This document establishes Bumble's practices for collecting, using, and sharing personal information from users of its dating application and websites. Bumble collects sensitive data categories including precise geolocation, biometric identifiers for verification purposes, photographs submitted for identity verification, device information, and message content, with authorization to share this information with third-party service providers, affiliated entities, and government bodies in response to legal process. Users located in California, the EU, and the UK are granted specific rights to access, correct, delete, and export their personal data, exercisable through the application settings or Bumble's support contact mechanism.

This document is Bumble Group's global privacy policy, governing the collection, use, storage, and disclosure of personal information by Badoo Trading Limited and Bumble Trading LLC across the Bumble mobile application, desktop version, and associated websites, with GDPR cited as a primary legal framework and Bumble positioned as data controller. The policy states it collects a broad range of data categories including registration details, geolocation, device identifiers, biometric data (for profile and ID verification), purchase information, message content, photo metadata, and linked social media data, and the terms authorize use of this information for matching algorithms, moderation, service delivery, marketing, fraud prevention, and legal compliance. Notably, the policy discloses collection and processing of biometric data through profile and ID verification features, a category subject to heightened legal requirements in several US states (including Illinois BIPA and Texas CUBI) and under GDPR Article 9 as a special category; the policy also acknowledges use of automated decision-making including profiling, and discloses that user data may be transferred internationally outside the EEA under standard contractual clauses or other approved transfer mechanisms. The policy engages GDPR, UK GDPR, CCPA/CPRA for California residents, and potentially Illinois BIPA and other US state biometric privacy statutes, with enforcement exposure distributed across the ICO (UK), EU supervisory authorities, California Privacy Protection Agency, and US state attorneys general. Material compliance considerations include the lawfulness of biometric data processing under both GDPR and US state law, the adequacy of consent mechanisms for special category data, and the sufficiency of disclosed cross-border data transfer safeguards.

The policy establishes that Bumble collects and processes biometric identifiers, precise location data, message content, and device information, with terms authorizing disclosure to third-party service providers and affiliated entities. Users subject to CCPA/CPRA (California residents) and GDPR (EU and UK users) operate under supplemental data protection obligations, including rights to request access, correction, deletion, and export of personal data, and rights to object to automated decision-making and certain forms of profiling. These rights are exercisable through mechanisms specified in the policy document and Bumble's support infrastructure.