This Privacy Policy explains how BUNCH APP Ltd ("we", "us", "our") collects and uses your personal data when you use the BUNCH app and services (the "Service"). We are the data controller. It is written to meet the UK GDPR and the Data Protection Act 2018.
We do not sell your personal data.
| Purpose | Examples | Lawful basis |
|---|---|---|
| Provide the Service | Show activities and who's attending; run clubs/crews/places; deliver chat; keep you signed in | Performance of a contract with you |
| "Near me" & maps | Sort by distance; show map pins; geocode addresses | Consent (location) / contract (maps) |
| Notifications | Send the alerts you've asked for | Consent (you enable them) |
| Safety & integrity | Prevent abuse, enforce our Terms, moderate content, keep the Service secure | Legitimate interests (keeping people and the Service safe) |
| Improve the Service | Understand usage and fix problems | Legitimate interests (running and improving the Service) |
| Legal & disputes | Comply with the law; establish or defend legal claims | Legal obligation / legitimate interests |
Where we rely on consent (e.g. location or notifications), you can withdraw it at any time in your device settings or by contacting us; this won't affect processing already carried out.
Other users. By design, other people can see what you'd expect on a community app: your name and photo, the activities and clubs you're part of, and your messages in chats you belong to. Consider what you share.
Service providers (processors) who help us run the Service under contract:
We do not sell your data or share it for third-party advertising. We may disclose data where required by law, to protect people's safety, or in connection with a business transfer, subject to appropriate safeguards.
Some providers may process data outside the UK. Where they do, we rely on an appropriate safeguard under UK data protection law (such as UK adequacy regulations or the International Data Transfer Agreement / Standard Contractual Clauses). Our primary data store (Supabase) is configured in the European Union (Paris, eu-west-3) region. Contact us for details of the safeguards in place.
Under UK data protection law you have the right to:
To exercise any of these, email hello@bunch.cc. We'll respond within the time the law allows (usually one month). You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk, 0303 123 1113) — though we'd appreciate the chance to help first.
The Service is intended for people aged 18 and over. We do not knowingly collect data from anyone under that age. If you believe a child has given us personal data, contact us and we will delete it.
We use technical and organisational measures to protect your data, including access controls at the database level (row-level security), encrypted connections, and keeping secret keys off user devices. No system is perfectly secure, but we work to protect your information and will notify you and the ICO of a breach where the law requires.
We may update this policy as the Service develops. We'll post the updated version and, for material changes, take reasonable steps to tell you.
Privacy questions or requests: hello@bunch.cc, BUNCH APP Ltd, Suite RA01, 195-197 Wood Street, London E17 3NU.