Privacy Policy
Last updated: August 3, 2026
Bumpool is an app for organizing a friendly prediction pool around a birth. This policy explains what data is processed, why, and what your rights are. The app is designed to collect the strict minimum.
1. Data controller
The data controller is Geoffrey Hervet, publisher of the Bumpool app, acting as an individual.
For any question about your data, contact: geoffrey@ryo-consulting.fr.
2. Data we process
When you create or join a pool, we process the information you enter: the participant's first name, the organizer's name or nickname, the event title, the expected due date, as well as the predictions (sex, date and time of birth, weight, height, head circumference, suggested first name, hair and eye color, resemblance, delivery mode and an optional free-form question) and the actual values entered after the birth.
An anonymous device identifier (a locally generated random number) and an anonymous user identifier (provided by the anonymous authentication of the service) are assigned to your device so your entries can be linked without you having to create an account.
For technical and security reasons, our hosting providers transiently process connection data such as the IP address.
3. What we do not collect
The app requires no account: no email address, no password, no full name, no phone number.
We do not collect your location, any payment data (the app is free), and we use no advertising identifiers, tracking cookies, or third-party analytics or tracking tools.
4. Local and synced modes
Without sync configuration, the app can run in local mode: your data stays on your device only and is erased when you uninstall the app.
In synced mode, your data is stored on our service so that a pool can be shared across several people and devices.
5. Purposes and legal bases
Data is processed to provide the service you request: creating a pool, joining one, recording predictions, and computing and displaying the ranking. The legal basis is the performance of the service at your request.
We process the minimal technical data needed for the security and proper operation of the service on the basis of our legitimate interest.
6. Recipients and processors
Your data is only accessible to the participants and the organizer of the relevant pool, according to the visibility rules defined in the app. We neither sell nor rent any data.
We rely on technical processors: Supabase (database and authentication) and Vercel (hosting of the web version). They act on our instructions and do not use your data for their own purposes.
7. Hosting and transfers
Synced data is hosted in the European Union.
Some of our processors are companies that may be subject to laws outside the European Union; any potential access is governed by appropriate safeguards, such as the European Commission's Standard Contractual Clauses.
8. Retention
A pool's data is retained for as long as the pool exists. The organizer can delete their pool at any time: the associated participants, predictions and results are then permanently erased.
In local mode, data is gone as soon as the app is uninstalled. You may also ask us to delete your data by email.
9. Your rights
Under the General Data Protection Regulation (GDPR), you have the right to access, rectify, erase, restrict, object to and port your data.
To exercise these rights, write to geoffrey@ryo-consulting.fr. You may also lodge a complaint with your local data protection authority (in France, the CNIL — www.cnil.fr).
10. Security
Access to data is protected by Row Level Security rules that restrict each record to its owner or to the members of the relevant pool. Exchanges with our servers are encrypted (HTTPS).
11. Children
The app is not intended for children and does not knowingly collect data about them. Predictions concern an unborn child and are not data about a minor user.
12. Changes
This policy may be updated. The last-updated date appears at the top of the document. In case of a significant change, we will inform you by an appropriate means.