Bumble is a dating/social app operated by Bumble Inc. (NASDAQ: BMBL), a publicly traded company whose "Bumble Group" spans the Bumble and Badoo brands (Badoo Trading Limited and Bumble Trading LLC are named as joint data controllers under one privacy policy). Bumble's own privacy policy discloses that it processes data it treats as "special category" under consent, expressly naming sexual orientation, sex life, health, religious/political beliefs, and biometric data, and separately collects face-geometry biometric data through optional facial-recognition photo verification and a third-party ID-check partner (Veriff). The policy and cookie policy both describe sharing limited profile attributes (gender, age, IP address, coarse location) with advertising partners and Facebook as a "Joint Data Controller" for ad measurement, and the Apple App Store privacy label independently confirms Location, Contact Info, Identifiers, and Usage Data are used to track the user across other companies' apps and that a separate "Sensitive Info" category is linked to identity. No FTC or state-AG privacy order was found, but Bumble Trading L.L.C. and Badoo were defendants in Howell v. Bumble Trading L.L.C. (Circuit Court of Winnebago County, Illinois), an Illinois BIPA class action alleging unlawful biometric collection from user photos that settled for $40 million with no admission of wrongdoing.
TIMELINE
1 ENTRY
[2026-09-01] · NEW RECEIPTS
1 new source on file for Bumble.
Bumble's file gained 1 new sourced claim since its last review.
Bumble's privacy policy lists the legal bases for processing member data and states that processing "special category data" — expressly defined to include racial/ethnic origin, political opinions, religious/philosophical beliefs, trade union membership, genetic data, biometric data used for identification, health data, and sex life or sexual orientation — relies on the member's consent.
Bumble's Apple App Store privacy label discloses that data linked to the user's identity includes a dedicated "Sensitive Info" category alongside Health & Fitness, Purchases, Location (including Precise Location), Contact Info, and Identifiers, used for purposes including Third-Party Advertising.
As assessed by PrivacySpy on 2021-03-27 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the service collect personal data from third parties? — Yes.
Bumble's privacy policy states that "Bumble Group" refers jointly to Badoo Trading Limited and Bumble Trading LLC, and that the two entities are joint data controllers for member personal data — directly disclosing the corporate relationship between the Bumble and Badoo brands covered by the single policy.
As assessed by PrivacySpy on 2021-03-27 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the policy outline the service's general security practices? — Somewhat.
Bumble Inc.'s Form 10-K for fiscal year 2025 (filed with the SEC) confirms its Class A common stock, par value $0.01 per share, is registered and trades on the Nasdaq Stock Market LLC under ticker symbol BMBL.
Bumble's privacy policy states it shares limited personal information — gender, age, IP address, and coarse location — with advertising partners once a user consents via the cookie consent banner, in order to show relevant third-party ads.
As assessed by PrivacySpy on 2021-03-27 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the policy allow personally-targeted or behavioral marketing? — Yes.
As assessed by PrivacySpy on 2021-03-27 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the policy require users to be notified in case of a data breach? — Not necessarily.
Bumble Trading L.L.C. and Badoo were defendants in Howell et al. v. Bumble Trading L.L.C. et al., No. 2021-L-307 (Circuit Court of Winnebago County, Illinois), a class action alleging the Bumble and Badoo apps violated Illinois' Biometric Information Privacy Act (740 ILCS 14/1 et seq.) in connection with user photographs uploaded to the apps; per the court-approved settlement administrator's website, the defendants agreed to pay $40 million into a settlement fund to settle the claims while denying all allegations and making no admission of guilt or wrongdoing, the court granted final approval on October 24, 2024, and settlement payments were distributed beginning August 8, 2025 (cited via an archived snapshot; the live administrator site blocks automated retrieval).
Bumble's privacy policy states that its optional photo/ID verification feature scans submitted photos using facial recognition technology to compare them against the user's profile photo, and that a third-party partner, Veriff, separately compares a selfie to the user's ID document as part of ID verification.
Bumble's Apple App Store privacy label states that Location, Contact Info, Identifiers, and Usage Data may be used to track the user across apps and websites owned by other companies — Apple's ATT-framework disclosure for cross-app/cross-site tracking.