10 Total
5 High severity
4 Medium severity
1 Low severity
Summary

Bumble's privacy policy explains what personal information the app collects about you — including your location, photos, messages, and even biometric data if you verify your profile — and how it uses and shares that data. Bumble shares your information with third-party partners for advertising and service delivery, and may transfer your data internationally. You have rights to access, correct, delete, or export your data, and California residents have additional rights under state law.

Technical Summary

The Bumble Group Privacy Policy governs the collection, use, disclosure, and storage of personal information by Badoo Trading Limited and Bumble Trading LLC across the Bumble mobile application, desktop platform, and associated websites. The policy establishes Bumble as the GDPR data controller and sets out lawful bases for processing, including consent, legitimate interests, and contractual necessity. Notable provisions include the collection of biometric data for profile verification, use of automated matching algorithms and profiling, cross-border data transfers to the United States and other jurisdictions, sharing with third-party service providers and advertising partners, and comprehensive user rights frameworks for GDPR, CCPA/CPRA (California), and US state-level privacy laws. The policy also addresses sensitive data categories including sexual orientation, religious beliefs, and health information, and provides specific retention and deletion obligations.

Evidence Provenance
Captured April 19, 2026 06:18 UTC
Document ID CA-D-000226
Version ID CA-V-000757
Wayback Machine View archived versions →
SHA-256 6f0f969fe2657ab71d0bb04727d9c301748e682550c6cd065a20d4d2949b5325
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Cryptographically signed
Institutional Analysis

🔒 Institutional analysis locked

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Upgrade to Professional — $149/mo
Change Timeline
View full version history (0 captures) →
Analyzed Changes

1 change analyzed since monitoring began.

What changed Bumble updated their Bumble Privacy Policy on March 21, 2026. Change detected: 1 sentence(s) modified. Document contained 891 sentences after update.
Consumer impact Bumble has removed the UK from its stated list of server locations, meaning the policy no longer explicitly confirms that user data is stored on UK-based servers. For UK users, this could mean their data is now routed only through US or EU infrastructure, which may have implications for how UK data protection law applies to their information. You can review Bumble's privacy policy directly and contact their data protection officer if you have concerns about where your personal data is being processed.
Why it matters UK users can no longer rely on Bumble's privacy policy to confirm their data is stored domestically, which may have implications for how UK data protection law protects their information. This change could signal a shift in Bumble's data infrastructure that affects the legal basis for cross-border data transfers.

Recent Clause-Level Changes Mar 21, 2026

10 provisions unchanged.

View full change record →
High Severity — 5 provisions
Medium Severity — 4 provisions
Low Severity — 1 provision

Cross-platform context

See how other platforms handle Biometric Data Collection and similar clauses.

Compare across platforms →

Applicable Regulations

BIPA
Illinois, USA
CCPA/CPRA
California, USA
CFAA
United States Federal
CAN-SPAM
United States Federal
DMCA
United States Federal
DSA
European Union
GDPR
European Union
UK GDPR
United Kingdom