Incident #02F76D · 06 MAR 2026notable
Bumble EU privacy policy adds retention periods, AI features, biometric wording and named processors
The EU Bumble privacy policy now lists retention periods for many data uses, says biometric data is collected in photo verification, and describes AI tools (Private Detector, Deception Detector, AI icebreakers via OpenAI). Several legal bases changed from legitimate interests to legal or contractual obligation. More named processors are listed (Veriff, Prove, Cinder, Google Cloud, OpenAI). Instagram linking and Bumble Holding Limited were removed from the text.
Taken from you
- Verification scans now explicitly involve collection of biometric data
- Texts are now scanned automatically for a 'Review before you send' feature, and messages are moderated for toxic or harmful behaviour.
- Details of certain blocked members may be kept up to 15 years, and more record types (e.g. geocoordinates, email, phone number, feedback, AI prompts) are kept six years after account deletion.
- Public profile data (excluding special category data) is now used to generate AI icebreakers via OpenAI, and profile embeddings are used to predict matches.
- Data now shared with more named processors, including AI and moderation providers
- Instagram account linking no longer listed
Won back
- Specific retention periods now stated for many data uses
- A general statement that all automated or human decisions can be appealed was added.
- Veriff's deletion now also covers biometric data and adds a 30-day maximum retention.
- Third-party targeted ads in the app are now listed as based on consent through settings (previously legitimate interests).
- Options to request manual review instead of facial recognition clarified to cover biometric collection
- Joint controller roles and GDPR support contact stated
Evidence · 4 of 4 quotes matched in source
This scan can include the use of facial recognition technology and involves the collection of biometric data, but you also have the option to request a manual review+ inserted · ✓ matched in source
AI tool providers to assist with message prompts - product features - OpenAI (it only retains inputs and prompts for 30 days)+ inserted · ✓ matched in source
We may keep details of certain blocked members for up to 15 years, depending on the seriousness of harm, to prevent them from rejoining as a member+ inserted · ✓ matched in source
Deception Detector™: our AI-powered tool works behind the scenes to flag and prevent scams before they happen+ inserted · ✓ matched in source
Archived version ↗ · 9,105 words changed · comparison truncated