Privacy policy

1. Who we are

Bump is an app for making plans with friends, clubs and groups. While Bump is in testing, it's run by Callum Greig, an individual developer based in the UK.

Before Bump's public launch, it will move to a UK limited company. When that happens, we'll update this policy with the company's details and tell you in the app or by email. The company will take over responsibility for your data and keep protecting it as this policy describes.

In this policy, "Bump", "we", "us" and "our" mean the person or company running Bump at the time. We are the controller of your personal data, which means we decide how and why it's used and we're responsible for looking after it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

If you have any question about your data, email admin@bump.events. A real person reads every message.

This policy covers the Bump app on iPhone and Android (including test versions through TestFlight, Google Play testing and our Android download) and our website at bump.events.

2. What we collect

Most of what we hold is what you give us while using Bump. A little is created automatically by your phone and our servers.

Your account

• Your email address or phone number, which you use to sign in. We send you a one-time code by email or text each time; we don't use passwords.

Your profile

• Your name, username and profile photo.
• If you add a phone number to your profile, it's never shown to other people. Other people only see your name, username and photo. Your verified phone number and email can be used to let people who already have them find you (see Being found by your phone number or email), unless you turn that off.
• If you add your city, we store the city name only, never your exact location. We use it to suggest events and clubs in your area as we add those features. It's hidden from other people unless you turn on Show my city, and you can remove it at any time. While you type, we suggest city names using Mapbox, which receives the text you type.

Friends

• Your friends list and friend requests, including friends you add by scanning their QR code.

Finding friends from your contacts (optional)

• If you allow Bump to use your contacts, the app reads the phone numbers and email addresses in your address book on your phone. It never reads names, notes or any other contact details.
• Before anything leaves your phone, each number and email is put into a standard format and turned into a one-way code (a "hash"). We receive the codes, not the readable numbers or emails. These codes can still be linked back to a phone number or email, so we treat them as personal data and protect them accordingly.
• We compare the codes with codes made the same way from the verified phone numbers and email addresses of Bump members who let people find them, and show you the members who match (their name, username and photo).
• We don't store the codes from your contacts, we don't contact anyone in your address book, and we don't tell anyone that you checked. To prevent misuse, we keep a count of how many contacts you checked for up to 24 hours.
• Your contacts may include people who aren't on Bump. Their codes are only used for the comparison and are not kept.
• You can turn contacts access off at any time in your phone's Settings.

Being found by your phone number or email

• Unless you turn it off, people who have your verified phone number or email address in their contacts can see that you're on Bump, with your name, username and photo. That includes anyone who has your number, not only your friends.
• To make this work we keep a one-way code of your verified phone number and email address.
• You can turn this off in Settings > Privacy > Let people find me by phone or email. When it's off, we delete those codes and nobody can find you this way.
• People you've blocked, or who have blocked you, are never shown to each other.

Plans, chats and clubs

• Plans and events you create or are invited to: the title, description, date and time, place and address, cover photo, who's invited, and who's co-hosting.
• Your RSVPs, and events you save or hide.
• Messages you send in chats, reactions, pinned messages, and the polls you create or vote in.
• Photos, videos and voice notes you send in chats, whether you take them with the camera, pick them from your photo library or record them with the microphone. Each file can be up to 50 MB.
• Clubs and subgroups you create or join, your role in them, invitations, and the posts and comments you make.
• Posts, likes and reports you make on our feedback board (Questions & requests).

Shared calendars

• You can choose, person by person, to share your Bump calendar with friends. Plans you're going to are shared in full by default. Private events, and anything you choose, show only as "Busy" with the time, never the title, place or who's going.
• Find a time uses the calendars friends have shared with you to show when people are busy.
• You can stop sharing with anyone at any time without them being told. You can also switch shared calendars off in Settings, which stops anyone seeing your calendar.

Phone calendar (optional)

• If you turn on phone calendar sync, Bump asks for access to your phone's calendar and only reads the calendars you choose.
• For the calendars you choose, we store each event's start and end time, whether it's all-day, its title and its location, so we can show you as busy to the friends you share with. Others see these events as "Busy" unless you choose to show one.
• We never read or store attendees, notes or links from your calendars, and we never edit or delete your events.
• Imported events are deleted from Bump when you switch a calendar off, turn off phone sync, or turn off shared calendars.

Adding your plans to your phone calendar (optional)

• If you turn on Add my plans to my phone calendar, Bump adds the events and Bumps you're going to into a separate calendar called Bump on your phone, and keeps them up to date when they change or are cancelled.
• Each one has the plan's title, time, place, description and a link back to it. This happens on your phone. Nothing extra is sent to us, and the Bump calendar is never read back by phone calendar sync.
• Bump only ever changes events inside its own Bump calendar. It never changes your other calendars or their events. If your phone syncs that calendar to iCloud or another account, your provider stores it like any other calendar.
• It's set per phone. Turning it off removes the plans Bump added, and the Bump calendar once it's empty.

Your private vault and details requests

You can keep personal details in your private vault so they're ready to share when someone asks. These can include:

• Passport details: number, full name, expiry date and nationality (useful for trips).
• Bank details: country, account name, account number and sort code, BSB or IBAN.
• Your home address, phone number and email.

In a chat, people can send a details request asking for some of these. We store what was asked for, any note and due date, what you shared, and your reason if you decline.

• Nothing in your vault is shared unless you approve a specific request from a specific person.
• Only the people you approve can see what you share. You can take back a share at any time.
• You can delete anything in your vault at any time.
• If you use the camera to fill in passport details, the photo stays on your phone and isn't uploaded.

See Keeping it safe for how your vault is protected.

Bill splits

• When you split a bill, we record what it was for, the amounts, who owes whom, and whether each person has paid.
• You can attach your bank details so people know where to pay you. A copy is saved with the split and shown to the people in it.
• Bump doesn't process payments. We never see your card, we never move money, and we don't connect to your bank. To show amounts in different currencies we look up exchange rates, which only involves the currency codes.

Location

• If you let Bump use your location, we use it only when you choose to share your location in a chat, and only while you're using the app. We don't track where you go.
• When you share a location or add a place to a plan, we store that place (its name, address and map coordinates) and show it to the people in that chat or plan.

Camera, microphone, photos and calendar

• Camera: used to scan friends' QR codes, and to take photos and videos you choose to send in a chat. We only receive what you send. Nothing else the camera sees leaves your phone.
• Microphone: used only while you're recording a voice note or a video to send in a chat. We only receive the recordings you send.
• Photo library: to show your photos in the chat photo picker, Bump asks to view your photo library. You can allow all photos or only the ones you select. The grid is shown on your phone only. We only upload the photos and videos you choose to send, or pick for your profile or a plan cover. Bump never adds to or changes your library.
• You can turn camera, microphone and photo access on or off at any time in your phone's Settings.
• Add to calendar: this puts a plan into your phone's own calendar. It happens on your phone. Bump only reads your phone's calendar if you turn on phone calendar sync, and only writes to it, in its own Bump calendar, if you turn on Add my plans to my phone calendar (see above).

Notifications

• Your push notification token (a code from Apple or Google that lets us send notifications to your phone), with your phone's platform and app version.
• Your notification settings.
• A copy of each notification we send you, which can include a preview of up to 180 characters of a message, and a log of whether it was delivered.

Safety

• Reports you make about people, messages, events, clubs, conversations or feedback posts, and reports others make about you: who reported, what was reported, why, and what we did about it.
• The list of people you've blocked.

Collected automatically

• How you use the app: we record which features are used (for example, "plan created"), linked to your account. This stays on our own servers. We don't use any outside analytics company.
• Device and app information: your phone model, operating system (iOS or Android) and version, app version, language and time zone.
• Log data: IP address, the time of requests, and errors, kept by our servers to keep Bump secure and working.
• Crash reports: when the app crashes or hits an error, we receive a technical report of what went wrong, with your Bump user ID, so we can fix it. It doesn't include your name, email or messages.

We don't use advertising identifiers and we don't track you across other companies' apps or websites.

From our website

• If you join the waitlist at bump.events, we collect the name, email and phone number you give us.

When you contact us

• Your messages to us and anything you include in them.

Sensitive information

We never ask for sensitive information such as your health, religion, sexuality or political views. But what you post can sometimes reveal it, for example if you join a faith group's club or a Pride event. We treat that information only as part of your content, to show it to the people you've shared it with.

3. How we use it, and why we're allowed to

Data protection law says we need a lawful reason (a "lawful basis") for each thing we do with your data. Here's ours.

Where we rely on legitimate interests, we've weighed them against your rights, and you can object (see your rights). Where we rely on consent, you can withdraw it at any time; that won't affect what we did before.

We don't make decisions about you that have legal or similarly significant effects using only automated means.

4. What other people on Bump can see

• Your profile (name, username and photo) can be seen by other Bump users, so friends can find you. Your city is only shown if you turn on Show my city. Your phone number and email are never shown on your profile.
• People who have your verified phone number or email in their contacts can see that you're on Bump, unless you turn off Let people find me by phone or email.
• Friends in common: when someone views your profile, they can see which of their Bump friends are also your friends.
• Plans, chats, polls and splits are seen by the people in them. When you're added to a chat or plan, its members can see your profile and what you post there.
• Clubs are private. Only members can see a club's plans, posts, chats and member list.
• Your calendar is only seen by the friends you choose to share it with. Events from your phone and private events show as "Busy" unless you choose to show them.
• Details from your vault are seen only by the people whose requests you approve.
• Profile photos, plan covers and club images are stored at web addresses that aren't secret, so anyone who has the exact link can open the image. Photos, videos and voice notes sent in chats are private to the people in that chat.
• Anyone you share something with could screenshot it or pass it on, so please only share what you're comfortable with.

5. Who we share it with

We don't sell your personal data, and we don't share it with advertisers.

We use a small number of trusted companies to run Bump. They act as our processors: they can only use your data to provide their service to us, under a contract with us, and must keep it secure.

A few other services receive small requests from the app but no account information. Like any website, they can see your phone's IP address when it connects.

• Google: when you open a Google Maps link someone pasted into a chat, the app asks Google where the link points. And while the app is open, your phone regularly contacts a Google address to check whether you're online, so Bump can tell you when you're offline. That check contains no information about you.
• Frankfurter: an exchange-rate service that only receives currency codes.

We may also share data:

• When the law requires it, for example to respond to a valid request from the police or a court, or to protect someone from serious harm.
• If Bump changes hands, for example if we're bought or merge with another company. The new owner would have to keep protecting your data as this policy describes, and we'd tell you first.
• With your permission, in any other case.

6. Data sent outside the UK

Your Bump data is stored in Japan, and some of our providers are based in, or have staff or servers in, the United States and other countries outside the UK. When your data goes abroad, we make sure it stays protected by using one of the safeguards UK law allows:

• the country has been judged by the UK to protect data adequately. This includes Japan, the European Economic Area, and US companies signed up to the UK Extension to the EU-US Data Privacy Framework; or
• we have a contract with the provider using the UK's International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

Email us if you'd like more detail on the safeguard used for a particular provider.

7. How long we keep it

We keep your data for as long as you have a Bump account, and then delete it, except in the cases below.

8. Keeping it safe

Your data is encrypted while it travels between your phone and our servers, and our hosting provider encrypts it on disk. Access rules in our database make sure people can only see what's been shared with them, you sign in with one-time codes instead of passwords, and only a small number of our team can access personal data.

About your vault. Your vault details are stored on our servers and protected by those access rules, so only you and the people you approve can see them in the app. They aren't end-to-end encrypted, which means our systems can technically read them. Our team only accesses them when it's needed to keep Bump running or safe, or when the law requires it. Please don't store anything in your vault you wouldn't be comfortable sharing on those terms.

No service can promise perfect security, but if something goes wrong that puts you at risk, we'll tell you and the ICO as the law requires.

9. Your rights

You have these rights over your personal data:

• Access: ask for a copy of the data we hold about you.
• Correction: fix anything that's wrong. You can edit most things yourself in the app.
• Deletion: ask us to delete your data or your whole account (see Deleting your account).
• Restriction: ask us to pause using your data while a concern is sorted out.
• Portability: get the data you gave us in a format you can take elsewhere.
• Objection: object to us using your data based on legitimate interests. For example, you can stop people finding you by phone number or email in Settings.
• Withdraw consent: for anything we do based on consent, such as notifications, location or phone calendar sync.

To use any of these, email admin@bump.events from the email address or phone number on your Bump account. It's free, and we'll reply within one month. If we need to check it's you, we'll ask.

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

10. Deleting your account

You can delete your account whenever you like. For now, this is done by email rather than in the app: email admin@bump.events from the email address on your account (or tell us the phone number you sign in with), and ask us to delete it.

We'll confirm, then delete your account and personal data within 30 days, as described in How long we keep it. Deleting the app from your phone doesn't delete your account.

11. Children

Bump is for people aged 16 and over. We don't knowingly collect data from anyone younger. If we learn that someone under 16 has an account, we'll close it and delete their data. If you think a child is using Bump, please tell us at admin@bump.events.

12. Cookies

The Bump app doesn't use cookies. Our website uses only the cookies it needs to work, and no advertising or tracking cookies. [Confirm: the website uses no analytics. If it does, list the tool here and add a cookie banner.]

13. Changes to this policy

We'll update this policy when Bump changes, for example when we add a feature that uses data in a new way. The date at the top shows when it last changed. If a change is significant, we'll tell you in the app or by email before it takes effect.

14. Contact us

Email admin@bump.events.