This analysis describes what Bumble's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Biometric data is among the most sensitive personal information category under both GDPR and multiple US state laws, and its collection by a consumer dating app creates significant legal exposure and personal privacy risk.
Interpretive note: The policy names biometric data collection as a category but does not detail the specific collection mechanism, consent flow, or retention terms, creating uncertainty about whether the implementation satisfies jurisdiction-specific requirements such as BIPA.
The updated policy discloses that Bumble now collects and processes additional personal data categories in connection with a new 'handle' feature that allows users to be found by other members. Specifically, the policy now states that Bumble collects handle, discoverability setting, user ID, profile verification status, handle search activity, and vote history. The policy establishes the legal basis for this collection as 'contractual necessity to provide the feature.' Users who create a handle should be aware that photo-verified members who have that handle can look up and open their profile, and that this activity is tracked as part of the service.
View change record →The updated policy discloses that Bumble collects quiz responses, optional email addresses, and technical usage data when users participate in Connection Quizzes. The company retains this information for up to 90 days before deletion, unless a longer retention period is required for safety, legal, or compliance purposes. The policy also states that Bumble may send promotional communications about Connection Quizzes where permitted by applicable law. You can choose not to participate in Connection Quizzes to avoid providing this data.
View change record →If you use Bumble's profile or ID verification features, your biometric data is collected and processed; this data type carries heightened legal protections in several US states and under GDPR, and you should understand what consent you are providing before enabling these features.
How other platforms handle this
Introduction If the CCPA is applicable, you have the right to know and understand how we collect, use, disclose, and share your Data, to access your Data, to request that we delete specific Data, to exercise your rights to opt-out...
"Profile Verification and ID Verification Information (including biometric information)Excerpt from Bumble's Privacy Policy
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
Biometric data is among the most sensitive personal information category under both GDPR and multiple US state laws, and its collection by a consumer dating app creates significant legal exposure and personal privacy risk.
If you use Bumble's profile or ID verification features, your biometric data is collected and processed; this data type carries heightened legal protections in several US states and under GDPR, and you should understand what consent you are providing before enabling these features.
ConductAtlas has identified this type of provision across 277 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Bumble.