Bunchups Pty Ltd ("Bunchups", "we", "us") runs the Bunchups app, website and Community Portal. This policy explains how we handle your personal information. We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Bunchups is for people aged 18 and over.
1. What we collect
- Account: phone number, email, first and last name, and your sign-in details.
- Profile: photo, gender, age range, languages, interests, bio, suburb and home location.
- Verification: a selfie, and the result of comparing it with your profile photo (see section 3).
- Location: your last known location, if you allow it, to show plans nearby.
- What you do on Bunchups: plans you post or join, join request intros, chat messages, answers to community questions, "Did you meet up?" answers, feedback and kind-word tags, reports, and enquiries to us or to a community.
- Technical: device details, push tokens, app usage, crash reports, IP address, and which link or campaign brought you to us.
If you tell us sensitive details in your profile or messages, we handle them under this policy. Please share only what you're comfortable with.
2. How we collect it
Mostly from you, when you sign up, build your profile, use the app or contact us. We also collect some automatically through the app, cookies and similar tools, and from the service providers listed in section 6. A community admin may also add or send details about you if you're invited to their community.
3. Your selfie check
To post or join plans, we ask for a selfie. An automated face comparison service run by Amazon Web Services compares it with your profile photo. If they match, you show as verified. This is biometric information, which is sensitive information under Australian privacy law. By taking the selfie, you consent to this check. We use it only to verify you and keep Bunchups safe. You can choose not to do the check, but you won't be able to post or join plans.
We currently keep your selfie on file after the check. Section 12 explains what happens when you delete your account and how to ask us to delete it.
4. How we use your information
- Run Bunchups: show plans, connect people, and handle join requests and waitlists.
- Keep people safe: verify members, review reports, and moderate.
- Stay in touch (section 7).
- Suggest categories and plan ideas from plan titles.
- Understand how Bunchups is used, fix problems, improve it, and measure our advertising.
- Meet our legal obligations.
5. Who can see what
- Other members see your first name and last initial, photo, verification status, meet-up counts and kind-word tags. A tag shows on your profile once two or more people have said the same thing.
- Plans with a private spot show only the suburb until a request is accepted.
- Public web pages and our public plans feed can show a plan's title, interests, suburb, time, spots wording and cover image, and the planner's first name. They never show the planner's last name or selfie. A live plan's cover image can be a picture its planner chose or their profile photo, so it can show the planner and other people. Ended plans show no cover image. Community plans are left out of the feed, and their web pages hide the place and description.
- Bunchups admins can read chats for safety and moderation. This access is read-only and each time is logged.
- Community admins can see their members' details and answers, can message their members, and can read group chats for their community's plans. This access is logged.
- Authorities and advisers: regulators or police where the law requires it, and our professional advisers.
We don't sell your personal information.
6. Service providers and overseas
These companies help us run Bunchups:
- Amazon Web Services: hosting, email, file storage and face comparison
- Google and Firebase: maps and places, push notifications, crash reports and analytics
- GetStream: chat
- Twilio: SMS codes
- Mixpanel: analytics
- Meta: advertising measurement. On iOS, tracking follows the choice you make
- Branch: links, including which link or campaign you came from
- Anthropic: suggesting categories and plan ideas from plan titles
- Klaviyo: website sign-up forms and email tools
- Hotjar: website analytics
Some of these providers are overseas, so your information is likely to be sent to the United States and other countries where they operate. We take reasonable steps to make sure overseas recipients protect it.
7. Messages from us
We may send push notifications and emails about nearby plans, your saved alerts, roundups, reminders, meet-up checks, unread messages, and welcome or confirmation messages, along with calendar invites. Nearby plan pushes come in small batches, up to 3 a day, and not between 10 pm and 8 am your time. If you have push on, we may create saved alerts from your interests. You can pause or delete them.
Every marketing email has an unsubscribe link, and you can change your push settings in the app or on your device. You'll still get essential messages about your account.
8. Decisions made by computer programs
Some decisions are made or helped by computer programs:
- Selfie verification: your selfie and profile photo are compared automatically, which affects your verified status and whether you can post or join plans.
- Showing plans and alerts: your location, interests and activity decide which plans and notifications you see.
- Category and plan suggestions: plan titles are used to suggest categories and ideas, which you can change.
If you think one of these got it wrong, contact us and a person will review it.
9. Cookies and website analytics
Our website uses cookies and similar tools to work properly, understand traffic and measure advertising. You can refuse cookies in your browser, though some features may not work.
10. Keeping your information safe
We protect your information with measures including encrypted connections and restricted access. No system is completely secure. If a data breach is likely to cause serious harm, we'll notify you and the Office of the Australian Information Commissioner (OAIC) as the Notifiable Data Breaches scheme requires.
11. Access, correction and deletion
You can update most details in the app, and delete your account in the app under More. You can also ask us for access to your information, ask us to correct or delete it, or withdraw consent. We may need to confirm who you are first.
12. How long we keep it
We keep information only as long as we need it for the purposes above or to meet legal obligations, then destroy or de-identify it.
When you delete your account in the app, your account closes and is marked as deleted. Some records stay in our systems after that, and these can include your selfie and photos. To have them deleted, email support@bunchups.com.au and we'll do so unless the law requires us to keep them.
13. Under 18s
Bunchups isn't for anyone under 18. If we learn that someone under 18 has an account, we'll close it and delete their information unless the law requires us to keep it.
14. Links to other sites
Bunchups may link to other sites and services. Their own privacy practices apply.
15. Changes to this policy
We'll post the current version here and in the app, and tell you about significant changes by email or in-app notice.
16. Contact and complaints
Privacy Officer, Bunchups Pty Ltd, support@bunchups.com.au. We aim to respond within 14 days. If you're not satisfied, you can contact the OAIC at www.oaic.gov.au.