Website privacy notice

Your story stays yours.

Last updated: October 2, 2026.

Who is responsible

Mateusz Swiatek is the website operator and data controller, based at Salomonstr. 7, 02826 Görlitz, Germany. Contact hello@bumpfolk.com about your personal information. Operator details are also available in the Impressum.

What this notice covers

This notice covers the website. Email registration is currently closed and the website does not save signup submissions. The mobile app will have separate privacy information before release. This website does not ask for pregnancy details, children’s names, medical records or other health information.

Early-access registration

We plan to offer optional email updates and testing invitations. Before opening registration, we will explain the data collected, the email provider, retention periods and how to withdraw consent. We will seek consent under Article 6(1)(a) GDPR and the applicable German email marketing rules. Visiting this website or contacting us does not subscribe you to a mailing list.

Contacting us by email

If you email hello@bumpfolk.com, we receive your email address, message and any information you include. Please do not send medical records or sensitive pregnancy information. We use correspondence to answer your enquiry, based on our legitimate interest in responding under Article 6(1)(f) GDPR, or Article 6(1)(b) where necessary for steps you request before a contract. Messages are forwarded through Cloudflare Email Routing to the operator’s Google Gmail mailbox.

Using the contact form

The contact form asks for your email address and message; your name is optional. It sends your enquiry through Cloudflare’s email service to the operator’s Gmail mailbox. The website does not store your message in a database or add you to a mailing list. The same legal bases apply as for email enquiries. Cloudflare processes request information to limit repeated submissions and prevent abuse. The form does not accept attachments.

Visiting the website

Cloudflare, our hosting and security provider, processes technical information needed to deliver and protect the website, such as IP addresses and request information. We use this processing to operate the website and prevent abuse, based on our legitimate interests under Article 6(1)(f) GDPR.

Service providers and international processing

Cloudflare provides hosting, security and email delivery. Google Gmail receives contact correspondence. These providers may process information outside the EEA, including in the United States. Cloudflare’s Data Processing Addendum describes its processing obligations and international transfer mechanisms, including standard contractual clauses where applicable. Google describes its processing and transfer safeguards in its privacy policy. We do not sell your personal information.

Cookies and tracking

We do not use advertising trackers, audience analytics or optional tracking cookies on this website. Cloudflare may use strictly necessary security technologies to protect the service, including when a security challenge is required. We will update this notice and obtain any required consent before introducing optional tracking technologies.

How long information is kept

We keep contact correspondence while handling your enquiry and for as long as it is needed for related follow-up. Once the matter is resolved and the information is no longer needed, we delete it unless an applicable legal obligation or the establishment, exercise or defence of a legal claim requires retention. The website does not keep a contact database, signup records or application-level request logs. Cloudflare’s technical and security records are subject to its service retention practices, described in its privacy policy.

Your rights

Contact hello@bumpfolk.com to request access, correction or deletion. Where applicable, you may also request restriction or portability, or object to processing based on legitimate interests. If processing relies on consent, you can withdraw it without affecting earlier lawful processing. You may complain to the supervisory authority where you live or work, or where an alleged infringement occurred. For an operator based in Görlitz, the regional authority is the Saxon Data Protection and Transparency Commissioner.

Changes

We will update this notice when our data practices change and show the latest revision date above.