At Bunkd ("we," "our," or "us") we operate on a principle of "Data Minimalism." We only collect what is strictly necessary to help you match with the perfect flatmate or find a spare room. This policy explains what we collect, why we collect it, how long we keep it, who we share it with, and what rights you have over it under the Digital Personal Data Protection Act, 2023 (DPDP Act).
To power our matching engine, we collect the following categories of data:
We respect your right to control your digital footprint. Unlike other platforms that "soft delete" data, we enforce a strict "Clean Sweep" Deletion Policy.
When you delete your account via the Settings Dashboard:
Bunkd is free for all core features. To keep it that way, we display advertising on free-tier accounts and may share qualified, aggregated lead data with vetted B2B partners (movers, furniture rental, internet providers, etc.) when you have given consent.
We use Google AdSense to serve advertising in the free-tier swipe feed. Google is a third-party vendor that uses cookies (and similar identifiers) to serve ads based on a user's prior visits to Bunkd and other websites on the internet.
When you accept our Terms of Service, you consent to Bunkd showing you targeted offers from third-party partners and, where you actively engage with such an offer (click, request a quote, fill in a contact form), passing relevant data (typically: first name, city, role, move-in timing, and the specific service you requested) to that partner so they can follow up. We do not share your phone number, email, or full profile without an explicit second consent step on the partner's landing page.
Paid subscriptions are processed via Razorpay (India) and Stripe (international). When you pay, your card and billing data are collected and stored by the payment processor — not by Bunkd. We receive only a subscription status, tier, and transaction reference for accounting.
You may withdraw your consent for personalized ads and partner offers at any time from Profile Settings → Privacy Preferences. This does not delete your account or affect matches and chats. Your ad experience will become non-personalized but ads will continue to appear unless you upgrade to a paid tier.
Under §§11–14 of the Digital Personal Data Protection Act, 2023, you have the following rights with respect to the personal data Bunkd processes about you. We will respond to any properly-verified request within 15 days:
We hold personal data only for as long as it is necessary for the purposes set out in §2, or as required by law, whichever is shorter:
In the event of a personal data breach that involves your data, we will:
Bunkd hosts its primary database, application backends, and backups in the asia-south1 (Mumbai) region of Google Cloud, with disaster-recovery snapshots in asia-south2 (Delhi NCR). Both regions are within India. We do not transfer personal data to a country or territory outside India that has been notified as restricted by the Central Government under §16 of the DPDP Act. We process some non-content metadata (e.g. anonymised crash reports) through providers (Sentry, PostHog) that may store such metadata in their global infrastructure under standard contractual safeguards.
If you use Bunkd from the United Kingdom or the European Economic Area, this section applies to you and, where it conflicts with the rest of this policy, prevails.
Controller. The controller of your personal data is [LEGAL ENTITY NAME], [REGISTERED ADDRESS] (company no. [NUMBER]). UK ICO registration: [ICO REG NUMBER].
Lawful bases (UK/EU GDPR Art. 6). We process your data on these bases: performance of a contract (to provide matching, messaging and your account); legitimate interests (safety, fraud/abuse prevention, product analytics, and service improvement — balanced against your rights); consent (optional cookies/analytics and marketing — withdrawable at any time via the cookie banner); and legal obligation (responding to lawful requests and keeping transaction records).
Payments. UK and international subscription and one-time purchases are processed by Paddle.com Market Ltd, which acts as Merchant of Record and an independent controller of your payment data (including for tax/VAT and fraud screening). We do not receive or store your full card details. See Paddle’s buyer privacy notice at paddle.com.
International transfers (UK/EEA → India). Our servers are in India (see section 9). India has not received a UK adequacy decision. Where we transfer UK/EEA personal data to India or other third countries, we rely on appropriate safeguards — the UK International Data Transfer Agreement / UK Addendum and the EU Standard Contractual Clauses, together with a transfer risk assessment. You may request a copy of the relevant safeguards by emailing privacy@getbunkd.in.
Your rights. You have the right to access, rectify, erase, restrict, and object to processing of your data, to data portability, and to withdraw consent. To exercise any right, email privacy@getbunkd.in; account deletion is also available in-app (Profile → Delete Account). You have the right to complain to the UK Information Commissioner’s Office (ico.org.uk) or your local EEA supervisory authority.
UK/EU representative. Our Article 27 representative is [UK/EU REPRESENTATIVE NAME & CONTACT].
Retention. We keep your profile data while your account is active and delete it on account deletion (see section 3); transaction records are retained for the period required by UK/EU tax law (currently 6 years).
Bunkd is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has created an account, please report it to grievance@getbunkd.in and we will erase the data without delay as required by §9 of the DPDP Act.
General data-protection questions: privacy@getbunkd.in
Grievance Officer (statutory): see /grievance.html — email grievance@getbunkd.in
General support: support@getbunkd.in