Last updated: 8 October 2026
This Privacy Policy explains how Bumpli ("Bumpli", "we", "us") collects, uses, and protects your personal data when you use our website and mobile applications (the "Service"). We are the data controller for the purposes of the UK GDPR and Data Protection Act 2018.
Bumpli is operated by Adam Edwards. For any privacy question or to exercise your rights, contact us at privacy@bumpli.co.uk.
We rely on performance of a contract (providing the Service you sign up for), our legitimate interests (securing and improving the Service), consent (where required, e.g. optional features), and legal obligation (e.g. financial records). Where you add health-related records about your child, such as weight, we rely on your explicit consent under Article 9(2)(a), given on your child's behalf as the account owner.
We use a small number of processors to run the Service. They act on our instructions and only receive what they need:
We do not sell your personal data. Where a processor is outside the UK/EEA, we rely on appropriate safeguards such as the UK IDTA or Standard Contractual Clauses.
If you invite a partner, friend, or family member, or accept an invitation, the account owner and invited users can see the shared data. Only invite people you trust with that information.
We keep your data for as long as your account is active. If you delete your account, we delete your personal data within a reasonable period, except where we must retain limited records for legal or accounting reasons.
Under UK data protection law you have the right to access, correct, delete, restrict, or object to processing of your data, and to data portability. You can delete your account and associated data from within the app. To exercise any right, contact privacy@bumpli.co.uk. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
Bumpli is intended for adults (expectant parents and those they invite) and is not directed at children. We do not knowingly collect data from children as users of the Service.
If you use post-birth features, you may add records about your child to your account - such as their name, date of birth, and weight. These records are your child's own personal data. You enter them, and we process them, on the basis of your parental responsibility as the account owner. Where a record is health data, such as weight, we rely on your explicit consent (see section 4), given on your child's behalf; you can withdraw that consent at any time, which stops further recording. You choose, child by child, who else can see these records: someone you have given full access to your account can see and add to the records of each child you share with them, and someone you have given limited access can see, or see and add to, the records of each child you share with them. Nobody else can see a child's records unless you share that child with them, and you can stop sharing at any time in Account › Sharing.
Records about your child are retained on the same basis as the rest of your account data (see section 7) and are deleted when you delete your account. We do not currently have an automated process for a child to exercise their own data protection rights once they are old enough to do so (from age 13 in relation to information society services, or 16 more generally). Until then, a request can be made by contacting support@bumpli.co.uk; we may ask for proof of identity before acting on it.
We may update this policy from time to time. We will update the "Last updated" date above and, where changes are material, notify you in the app.