Privacy Policy
Last updated: October 18, 2026
This Privacy Policy explains how Sunshine Wrap LLC, doing business as Bumped ("Bumped," "we," "us") collects, uses, and shares information when you use bumpedapp.com and related services (the "Service"). By using the Service, you agree to this policy. Questions? Email support@bumpedapp.com.
The short version: We don't record your video calls. We don't sell your personal information. We keep what's needed to run the app, keep people safe, and handle payments, and we use a small number of trusted providers to do it.
1. Information we collect
Information you give us
- Account details: email address, display name, date of birth, and password. Passwords are stored only in scrambled (hashed) form, so we can't read them.
- Profile: the optional short bio you add.
- Messages with friends: text messages and gift notes you send to friends are stored so you can see your conversation history.
- Friend groups: the names of groups you create and which friends you place in them. These are private to you.
- Reports: when you report someone, we store the reason, any details you write, and the last few lines of text chat from that conversation, so moderators can review it.
- Support emails you send us.
- Age check: before your first random chat, you take a short selfie video (and, if needed, a photo of your ID) through our age-verification provider, Didit. Didit estimates your age from your face, checks that you're a real person in front of the camera, and, if you use an ID, checks the document and reads your date of birth. Bumped does not receive or store your selfie or ID. We only keep the result: that you were verified as 18+, the date, and whether a selfie or an ID was used. Didit processes this information under its own privacy policy and retention rules.
Information created when you use the Service
- Video and audio: we do not record or store your calls. Video and audio travel encrypted directly between devices, or through Cloudflare's encrypted relay when a direct connection isn't possible. The relay cannot view the content.
- Random-chat text with people who aren't your friends is not saved, except the recent lines attached to a report.
- Activity: friend connections, blocks, online status, coin purchases, gifts sent and received, earnings, and withdrawals.
- Technical data: IP address, browser and device type, and log data such as times of access and errors. IP addresses also pass through our network and relay providers as part of connecting calls.
- Cookies and local storage: we use one essential cookie to keep you signed in, and your browser's local storage for small preferences (like which friend groups you collapsed). Our bot-protection provider (Cloudflare Turnstile) may also process limited device signals to tell humans from bots. We do not use advertising or cross-site tracking cookies.
Payment information
Card payments and payouts are handled by Stripe. We never see or store your full card number. If you set up payouts, Stripe collects the identity, tax (such as your taxpayer identification number), and bank details it needs, under Stripe's Privacy Policy. We receive limited information from Stripe, such as whether a payment succeeded and whether payouts are enabled.
2. How we use information
- To run the Service: create your account, match you with others, connect calls, deliver messages and gifts, and process purchases and withdrawals.
- To keep people safe: enforce our Terms, verify that users are 18+, prevent bots, fraud, spam, and abuse, and review reports. If an age check shows someone is under 18, we close their access immediately.
- To communicate with you: confirmation, password-reset, security, and service emails, and responses to support requests.
- To maintain and improve the Service, fix problems, and understand how it's used.
- To meet legal obligations, including tax, accounting, and law-enforcement requirements.
3. How we share information
We do not sell or rent your personal information, and we do not share it for targeted advertising. We share information only as follows:
- With other users: people you match with see your display name and video. Friends also see your bio, online status, and the messages and gifts you send them. They never see your email, date of birth, or which group you put them in.
- With service providers who process data for us under contract: Railway (hosting and database), Cloudflare (network, security, bot protection, video relay, and email routing), Resend (sending emails), Stripe (payments and payouts), and Didit (age verification).
- For safety and legal reasons: to comply with law, legal process, or government requests; to protect anyone's safety; and to investigate fraud or violations. We report apparent child sexual exploitation to the National Center for Missing & Exploited Children (NCMEC), as required by law.
- Business transfers: if our business is merged, sold, or reorganized, information may transfer as part of that transaction, under this policy.
4. How long we keep information
- Account information, friend messages, and groups: while your account is open. When you ask us to delete your account, we delete or anonymize it within 30 days, except as described below.
- Reports, bans, and safety records: kept as long as needed to protect users and prevent banned people from returning.
- Purchase, earnings, and payout records: kept as required for tax and accounting law (generally up to 7 years).
- Server logs: kept for a limited time for security and troubleshooting.
5. Your choices and rights
- Update your display name and bio anytime in the app.
- Access, correct, or delete your information, or ask for a copy, by emailing support@bumpedapp.com from your account email. We may need to verify your identity, and we'll respond within the time required by applicable law.
- Block anyone to stop them from contacting or matching with you.
- Depending on where you live, you may have additional rights under local law (for example, in certain U.S. states). We will honor those rights as required, and we will not discriminate against you for using them.
6. Security
We use reasonable safeguards: encrypted connections (HTTPS), encrypted video, hashed passwords, rate limits, and bot protection. No system is perfectly secure, so we can't guarantee absolute security. If we learn of a breach affecting your information, we'll notify you as required by law.
7. Adults only
The Service is only for people 18 and older. We do not knowingly collect information from anyone under 18. If we learn that someone under 18 has an account, we will close it and delete their information, except where we must keep it to report or prevent harm. If you believe a minor is using the Service, please report them in the app or email support@bumpedapp.com.
8. International users
We are based in the United States, and your information is stored and processed in the United States, where data-protection laws may differ from those in your country. By using the Service, you understand your information will be transferred to and processed in the United States.
9. Changes to this policy
We may update this policy from time to time. If we make material changes, we'll let you know in the app or by email before they take effect.
10. Contact
Sunshine Wrap LLC, doing business as Bumped
Email: support@bumpedapp.com