Bumpli

Privacy Policy

Last updated: 21 July 2026

This Privacy Policy explains how Bumpli ("Bumpli", "we", "us") collects, uses, and protects your personal data when you use our website and mobile applications (the "Service"). We are the data controller for the purposes of the UK GDPR and Data Protection Act 2018.

1. Who we are

Bumpli is operated by Adam Edwards. For any privacy question or to exercise your rights, contact us at privacy@bumpli.co.uk.

2. Data we collect

• Account data - your name and email address, and either a password (stored only as a secure hash) or an identifier from a social login provider you choose (e.g. Google).
• Pregnancy and planning data you enter - due date, appointments, shopping and to-do lists, baby names, notes, and similar content you add.
• Sharing data - invitations you send or accept, and which accounts or lists are shared with whom.
• Billing data - if you subscribe to a paid plan, subscription status and identifiers. Card details are handled by our payment processor and are not stored by us.
• Technical data - limited diagnostics and error reports needed to keep the Service working and secure.

3. How we use your data

• To provide and maintain the Service and sync your data across your devices (performance of a contract).
• To authenticate you and keep your account secure (legitimate interests / contract).
• To provide optional paid features, including AI-assisted suggestions when you choose to use them (contract).
• To process subscription payments (contract / legal obligation).
• To send service-related emails such as email verification and password resets (contract). We do not send marketing without your consent.

4. Legal bases

We rely on performance of a contract (providing the Service you sign up for), our legitimate interests (securing and improving the Service), consent (where required, e.g. optional features), and legal obligation (e.g. financial records).

5. Sharing with third parties

We use a small number of processors to run the Service. They act on our instructions and only receive what they need:

• Hosting & database - our cloud hosting and database providers store your account and app data.
• Authentication - social login providers you choose (e.g. Google) confirm your identity; we receive your name, email, and a provider identifier.
• Payments - our payment processor handles Pro subscriptions and card data.
• Email - our email provider delivers transactional emails.
• AI features - when you use an AI feature, the relevant input is sent to our AI provider to generate a response. We do not send your data to AI providers unless you use these features.
• Diagnostics - an error-monitoring provider helps us detect and fix faults.

We do not sell your personal data. Where a processor is outside the UK/EEA, we rely on appropriate safeguards such as the UK IDTA or Standard Contractual Clauses.

6. People you invite

If you invite a partner, friend, or family member, or accept an invitation, the account owner and invited users can see the shared data. Only invite people you trust with that information.

7. Retention

We keep your data for as long as your account is active. If you delete your account, we delete your personal data within a reasonable period, except where we must retain limited records for legal or accounting reasons.

8. Your rights

Under UK data protection law you have the right to access, correct, delete, restrict, or object to processing of your data, and to data portability. You can delete your account and associated data from within the app. To exercise any right, contact privacy@bumpli.co.uk. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

9. Children

Bumpli is intended for adults (expectant parents and those they invite) and is not directed at children. We do not knowingly collect data from children.

10. Changes

We may update this policy from time to time. We will update the "Last updated" date above and, where changes are material, notify you in the app.