BUMP - PRIVACY POLICY
Effective date: 14 September 2026
Last updated: 14 September 2026
-------------------------------------------------------------------------------
THE SHORT VERSION
-------------------------------------------------------------------------------
- Bump is made and run by one person, not a company.
- There is no analytics, no tracking, no advertising, and no third-party
marketing code in this app. Nothing about you is sold or shared with
advertisers or data brokers.
- Your username, profile photo, bio, posts, photos, ratings and comments are
PUBLIC to everyone using Bump.
- Location is used only to show shops near you and to put a shop you post about
on the map. Bump does not keep a history of where you have been.
- You can delete your account inside the app. You have 30 days to change your
mind, after which everything is permanently erased.
- Questions or requests: ntiendat514@gmail.com
This summary is here to be read. The sections below are the full terms and are
what legally applies.
-------------------------------------------------------------------------------
1. WHO IS RESPONSIBLE FOR YOUR DATA
-------------------------------------------------------------------------------
Bump is developed and operated by Dat Nguyen, an individual developer based in
Vietnam ("Bump", "we", "I").
For the purposes of the EU/UK General Data Protection Regulation (GDPR) and
Vietnam's Decree 13/2023/ND-CP on Personal Data Protection (PDPD), I am the
data controller for the personal data described in this policy.
Contact for any privacy matter: ntiendat514@gmail.com
-------------------------------------------------------------------------------
2. WHAT THIS POLICY COVERS
-------------------------------------------------------------------------------
This policy covers the Bump iOS application and the Bump backend service that
the app talks to.
It does not cover anything you reach by leaving Bump. In particular, tapping
"View in Map" opens Apple Maps, which is governed by Apple's privacy policy,
not this one.
-------------------------------------------------------------------------------
3. WHAT BUMP COLLECTS
-------------------------------------------------------------------------------
3.1 Account information
Email address Required. Used to sign you in, to send your 6-digit
verification code, to reset your password, and to recover
a deleted account. Never shown to other users.
Username Required. Public. Lowercase letters and numbers only.
Password Required. Stored only as a bcrypt hash. The plain password
is never written to the database and cannot be recovered
or read by anyone, including me.
Bio Optional. Public.
Profile photo Optional. Public.
3.2 Content you create
Posts Up to 6 photos, an optional caption, a 1-5 star rating,
and the name and address of the shop you are reviewing.
Comments Optional text and optional photos, on other people's posts
and your own.
All of this is public to anyone using Bump.
3.3 Social activity
Public Who you follow, who follows you, and your reactions
(likes) on posts and comments.
Private to you Posts and shops you have saved, and accounts you have
blocked. Nobody else can see these, including the person
you blocked.
Reports If you report a post, comment or account, the reason you
write and the item reported are sent for moderation review.
3.4 Location
This is the section most people want, so it is written plainly.
- Bump asks for location only as "While Using the App". It never accesses
your location in the background.
- It is used for exactly two things: showing you top-rated shops within about
five kilometres of you, and putting a pin on a shop you are posting about so
other people can find it.
- Your coordinate is attached to the SHOP record, not to your account and not
to your post. Bump has no log, table or history of where you have been, and
could not reconstruct your movements even if asked to.
- When Bump looks up nearby place names or turns a coordinate into a street
address, that request is handled by Apple's MapKit and geocoding services.
That means the coordinate is sent to Apple, under Apple's privacy policy.
- If you refuse location, Bump still works completely. You simply type the
shop name and address yourself, and the "Top Rated Nearby" section shows an
explanatory notice instead of a list.
- You can withdraw location permission at any time in iOS Settings > Privacy
& Security > Location Services > Bump.
3.5 Camera and photo library
- The camera is used only at the moment you choose "Take Photo".
- Photos are chosen through Apple's system photo picker. Bump receives only
the specific images you select. It never gets access to your photo library.
- Photos are cropped to a square on your device before upload.
3.6 Technical information
IP address Used to rate-limit sign-in and email endpoints so that the
service cannot be brute-forced or used to spam people, and
written to a security log when a limit is tripped. It is
not used to profile you, and is not attached to your
profile for any other purpose.
Session tokens After you sign in, your device holds a short-lived access
token and a refresh token. They are kept in the iOS
Keychain and marked device-only, which means they are NOT
included in iCloud or encrypted device backups and cannot
be restored onto another device.
On-device cache Photos you have already seen are cached on your phone (up
to roughly 300 MB) so they do not download twice. This
never leaves your device and is removed when you delete
the app.
Timestamps When accounts, posts and comments were created or changed.
3.7 What Bump does NOT collect
For clarity, and because it is unusual enough to be worth stating:
- No analytics or product-measurement SDK of any kind.
- No advertising, attribution or marketing SDK.
- No advertising identifier (IDFA). Bump shows no App Tracking Transparency
prompt because there is nothing to track.
- No contacts, calendar, microphone, health, fitness or financial data.
- No background location and no location history.
- No browsing or activity outside the Bump app.
- No tracking of you across other companies' apps or websites.
- No sale of personal information, and no sharing of it for cross-context
behavioural advertising.
The only third-party code inside the app is a SignalR client library, which
carries real-time notification messages and collects nothing.
-------------------------------------------------------------------------------
4. WHY BUMP USES YOUR DATA, AND THE LEGAL BASIS
-------------------------------------------------------------------------------
Under GDPR every purpose needs a lawful basis. These are ours.
To create and run your account
Data: email, username, password hash
Basis: performance of a contract (Art. 6(1)(b))
To publish and display the content you post
Data: posts, photos, captions, ratings, comments
Basis: performance of a contract (Art. 6(1)(b))
To verify your email, reset your password, recover your account
Data: email address, one-time code
Basis: performance of a contract (Art. 6(1)(b))
To show shops near you and pin a shop you post about
Data: your device coordinate at the moment you ask
Basis: your consent (Art. 6(1)(a)), given through the iOS permission prompt
and withdrawable at any time in iOS Settings
To send you notifications about activity on your content
Data: your account identifier
Basis: performance of a contract (Art. 6(1)(b))
To keep people safe: blocking, reporting, moderation
Data: your blocks and reports
Basis: legitimate interests (Art. 6(1)(f)) in operating a safe service, and
legal obligation where content must be removed
To prevent abuse of the service
Data: IP address, request counts
Basis: legitimate interests (Art. 6(1)(f)) in protecting the service and its
users from brute-force and spam
To comply with the law
Data: whatever a valid legal request requires
Basis: legal obligation (Art. 6(1)(c))
-------------------------------------------------------------------------------
5. WHO YOUR DATA REACHES
-------------------------------------------------------------------------------
5.1 Other users
Your username, profile photo, bio, posts, photos, captions, ratings, comments
and reactions are public to everyone using Bump. Your email address, your saved
items and your block list are not.
5.2 Service providers
Bump runs on infrastructure operated by other companies. They process data only
to provide their service to Bump, under contract, and never for their own
purposes.
Railway Hosts the Bump application and its databases.
Cloudflare R2 Stores uploaded photos.
Resend Sends transactional email, i.e. your verification codes.
MongoDB, Redis,
RabbitMQ The database, cache and message queue that run the service.
Your one-time verification codes live in the cache only,
and only for 10 minutes.
5.3 Apple
Apple receives coordinates and addresses when Bump looks up nearby places or
converts a coordinate into an address, and operates the App Store and TestFlight
through which you obtained the app. Apple's handling of that data is governed by
Apple's privacy policy.
5.4 Nobody else
Bump does not share personal data with advertisers, data brokers, analytics
companies or social networks, because it does not work with any.
5.5 Legal disclosure
Personal data would be disclosed to an authority only where I am legally
required to do so by valid legal process, and only to the extent required.
5.6 IMPORTANT: photo links are public
Photos you upload are stored on a public storage domain under a long random
filename. That means anyone who has the exact link to an image can open it
without signing in to Bump. The filename is not guessable, but the link is not
secret. Deleting the post or comment removes the file from storage.
-------------------------------------------------------------------------------
6. INTERNATIONAL TRANSFERS
-------------------------------------------------------------------------------
Bump is operated from Vietnam, and the service providers listed above operate
data centres outside Vietnam, including in the United States and the European
Union. Your personal data is therefore transferred across borders.
For users in the EEA and the UK, transfers to providers outside those areas rely
on the European Commission's Standard Contractual Clauses, or on the provider
being in a country with an adequacy decision.
For users in Vietnam, this section serves as notice under Decree 13 that
personal data is processed outside Vietnam by the providers named in section 5.
-------------------------------------------------------------------------------
7. HOW LONG DATA IS KEPT
-------------------------------------------------------------------------------
One-time codes 10 minutes, or 3 failed attempts, whichever comes
first. Then discarded.
Refresh tokens Until you log out or they expire. A token you revoke
by logging out is deleted immediately.
Your account and
content, once you
delete your account Hidden from the service immediately, then permanently
and irreversibly erased 30 days later. During those
30 days you can recover the account from the login
screen. After that it cannot be restored by anyone.
Photos in deleted
posts or comments Removed from storage when the item is deleted.
An active account Kept until you delete it. Bump does not expire or
purge accounts for inactivity.
Security and
rate-limit logs Short-term only, for abuse investigation.
-------------------------------------------------------------------------------
8. SECURITY
-------------------------------------------------------------------------------
- Passwords are stored only as bcrypt hashes, never as text.
- All traffic between the app and the server uses HTTPS.
- Sign-in uses a short-lived access token plus a refresh token, so a captured
token is useful only briefly.
- Tokens are held in the iOS Keychain and marked device-only, so they are not
carried into backups or onto another device.
- Uploaded images are validated by inspecting the actual file contents, not
by trusting the file name, so a disguised file cannot be stored as an image.
- Sign-in and email endpoints are rate-limited against brute-force and spam.
- Administrative access is restricted by role and used only for moderation.
No service can promise perfect security, and I will not pretend otherwise. If I
ever become aware of a breach affecting your personal data, I will notify
affected users and the relevant supervisory authority as required by law.
-------------------------------------------------------------------------------
9. YOUR RIGHTS
-------------------------------------------------------------------------------
9.1 Everyone
Much of this is built into the app and needs no request:
- Change your username or bio: Settings > Edit Profile
- Change your profile photo, or remove it: Settings > Edit Profile
- Change your email: Settings > Change Email
- Change your password: Settings > Change Password
- See and delete your own comments: Settings > Activity History
- See and undo who you have blocked: Settings > Blocked Accounts
- Edit or delete any post or comment you made
- Delete your entire account: Settings > Delete Account
9.2 If you are in the EEA or the UK (GDPR)
You have the right to: access your data; have inaccurate data corrected; have
your data erased; restrict processing; receive your data in a portable format;
object to processing based on legitimate interests; and withdraw consent at any
time, which for location means turning the permission off in iOS Settings.
You also have the right to lodge a complaint with your national data protection
authority.
9.3 If you are in California (CCPA/CPRA)
You have the right to know what personal information is collected and why, to
have it deleted, to have it corrected, and not to be discriminated against for
exercising these rights.
Bump does not sell personal information and does not share it for cross-context
behavioural advertising, so there is no "Do Not Sell or Share My Personal
Information" link to provide.
9.4 If you are in Vietnam (Decree 13, PDPD)
You have the right to be informed; to give and withdraw consent; to access your
data; to have it corrected; to have it deleted; to request restriction of
processing; to object to processing; to complain, denounce or bring proceedings;
and to claim damages where the law provides for it.
9.5 How to exercise any of these
Email ntiendat514@gmail.com from the address on your Bump account. I will
respond within 30 days. I may need to confirm you control the account before
acting on a request, to avoid handing your data to someone else.
There is no charge for exercising your rights.
-------------------------------------------------------------------------------
10. CHILDREN
-------------------------------------------------------------------------------
Bump is not intended for children under 13, and you may not create an account
if you are under 13.
Where local law sets a higher age for consenting to online services without a
parent - 16 in some EEA countries - you must meet that age instead.
I do not knowingly collect personal data from children below these ages. If I
learn that an account belongs to someone below the applicable age, I will delete
it and its content. If you believe a child has created an account, please write
to ntiendat514@gmail.com and it will be handled promptly.
-------------------------------------------------------------------------------
11. YOUR CONTENT IS PUBLIC - PLEASE READ THIS ONE
-------------------------------------------------------------------------------
Bump is a public service. Your username, profile photo, bio, posts, photos,
captions, ratings and comments can be seen by every other person using Bump.
Other people can screenshot, copy, or re-share what you post. Deleting something
removes it from Bump, but it cannot remove copies other people already made.
Photos can also carry information you did not intend to share, such as a
recognisable home or workplace in the background.
Please do not post anything you would not want to be public, and do not post
other people's personal information without their agreement.
-------------------------------------------------------------------------------
12. NOTIFICATIONS
-------------------------------------------------------------------------------
Bump notifies you about likes, comments and new followers.
These are delivered over a real-time connection while the app is running, and
shown as local notifications generated on your own device. Bump does not
currently use Apple Push Notification service, so no push token is sent
anywhere. If remote push notifications are added in future, this policy will be
updated before that ships.
You can turn notifications off in Settings inside the app, or in iOS Settings.
-------------------------------------------------------------------------------
13. CHANGES TO THIS POLICY
-------------------------------------------------------------------------------
If this policy changes materially, the effective date at the top will be updated
and you will be told inside the app before or when the change takes effect.
One change is already anticipated and is disclosed here in advance: analytics
may be added to Bump in future in order to understand which features are used
and where the app fails. If that happens, this policy will be updated before any
such code ships, the provider and the data involved will be named, and the
intention is to use aggregate, privacy-preserving measurement rather than
anything that tracks individuals across apps or websites. Nothing of the kind is
in the app today.
-------------------------------------------------------------------------------
14. CONTACT
-------------------------------------------------------------------------------
Dat Nguyen
Individual developer, Vietnam
Email: ntiendat514@gmail.com
I aim to reply to every privacy request within 30 days.
-------------------------------------------------------------------------------
APPENDIX: APPLE APP PRIVACY ("NUTRITION LABEL") DECLARATIONS
-------------------------------------------------------------------------------
This appendix is not part of the policy. It is a working note for completing the
App Privacy questionnaire in App Store Connect so that the answers there match
this document.
Contact Info > Email Address
Collected. Linked to the user. Purpose: App Functionality. Not used for
tracking.
User Content > Photos or Videos
Collected. Linked to the user. Purpose: App Functionality. Not used for
tracking.
User Content > Other User Content
Collected (captions, comments, bio, ratings). Linked to the user.
Purpose: App Functionality. Not used for tracking.
Identifiers > User ID
Collected. Linked to the user. Purpose: App Functionality. Not used for
tracking.
Location > Precise Location
Collected. Declare as Linked to the user. Purpose: App Functionality.
Not used for tracking.
Note: the coordinate is stored on the shop record rather than on the
account, but because a post connects your account to a shop, the safe and
honest declaration is "linked". Under-declaring here is a common cause of
App Review rejection.
Everything else
Not collected. In particular: no Usage Data, no Diagnostics, no Advertising
Data, no Purchases, no Contacts, no Browsing History, no Search History,
no Sensitive Info, no Health & Fitness, no Financial Info.
Tracking
Answer "No" to whether the app tracks users. There is no advertising
identifier and no third-party analytics, so no App Tracking Transparency
prompt is required.
If analytics is added later, these answers must be revised - most likely
adding Usage Data and Diagnostics - before that build is submitted.