Privacy policy

Last updated: 9 October 2026

This policy covers the Bumpy iPhone app and this website, made by Hit Space Ltd, a UK company (“we”, “us”). Hit Space Ltd is the data controller.

Where your photos live

Your photos, their dates, your due date and your edits are kept on your iPhone and in your own private iCloud, through Apple’s CloudKit. Bumpy also keeps a note there of the first version of the app you used, to manage your access to its features. We have no servers of our own, and we can’t see any of it. There’s no Bumpy account and no advertising, and Bumpy doesn’t track you across other apps or websites.

Made on your iPhone

Lining up your photos and making your film happen on your iPhone. Your original photos are never changed; edits are kept separately.

Face and body detection

To line up your photos and keep your face in view in your film, Bumpy uses Apple’s Vision framework on your iPhone to find where a face and body are in each photo: a rectangle around the face, and points such as the shoulders and nose. This happens only on your iPhone. These positions are kept in memory while Bumpy is open and discarded when it closes. They are never saved, never added to your iCloud, never sent to us or anyone else, and never used to recognise or identify anyone. Bumpy doesn’t use Face ID or the TrueDepth camera.

How we improve Bumpy

To fix problems and make Bumpy better, we collect:

• Crash reports, through Sentry: what went wrong in the app, with the device model, iOS version and app version.
• Usage data, through PostHog, stored in the EU: which screens you open, what you tap and choose (including settings such as reminders and camera options), how long things take, whether they worked, and counts such as how many photos and films you have.

Both use a random ID made on your iPhone, not your name, email or Apple ID. IP addresses are not stored; PostHog uses the connection to estimate an approximate location (country and city) before discarding it.

They never include your photos or anything from them, photo dates, your due date, how far along you are, captions or other words you type. Crash reports and usage data are always on so we can fix problems and improve Bumpy.

This website

To see how this website is used, we measure visits with PostHog, stored in the EU: which pages are viewed, where people click and how far they scroll, how much of the film and demos is watched, which links and answers are opened, and how quickly pages load. PostHog also receives the type of device and browser, screen size, language and time zone, the website you came from, and your approximate location (country, region and city), which our host, Vercel, works out from your connection.

This website sets no cookies and stores nothing on your device. To count visitors without cookies, PostHog makes a one-way code from your IP address, your browser’s details, this website’s address and a random key that changes every day. The key is deleted once it expires, so the code can’t be traced back to you. Your IP address isn’t stored.

If your browser sends a Do Not Track signal, this website measures nothing and doesn’t work out your location.

Permissions you choose

• Camera: to take your photos.
• Photos: to add photos you take in Bumpy to the Photos app while auto-save is on (it is on unless you turn it off in Settings, and iOS asks your permission first), and to let you pick the end-frame photo with Apple’s photo picker. Bumpy can add to your library but never reads it.
• Notifications: for the reminders you set. They’re scheduled on your iPhone.

You can change any of these in iPhone Settings.

When iCloud isn’t available

If you’re offline, signed out or out of iCloud space, everything stays on your iPhone until iCloud is back. Switching Apple accounts doesn’t copy your story to the other account.

Copies you share

Photos and films you share or save keep their camera details, including location if the photo has it. Those copies follow the rules of wherever they go.

Deleting

Deleting a photo removes it from your iPhone and from your iCloud story, as soon as iCloud is available. Deleting the app doesn’t erase your iCloud story; you can remove it in iPhone Settings, under your name, iCloud. Copies you shared or exported, your device backups and any copies Bumpy kept after an iCloud conflict are yours to manage.

Who processes data for us

• Apple: your private iCloud storage.
• Sentry: crash reports.
• PostHog: usage data from the app and this website, stored in the EU.
• Vercel: hosts this website, keeps standard server logs and works out visitors’ approximate location for our website analytics.

Each processes data on our behalf under its own privacy policy. We don’t sell your data. Beyond these, we disclose information only if the law requires it or as part of a sale or merger of the business.

How long we keep it

We keep crash reports and usage data only as long as they help us improve Bumpy.

Your rights

We’re a UK company and handle your data under UK data protection law, with safeguards where providers process it outside the UK. Our lawful basis for crash reports and usage data is our legitimate interest in keeping Bumpy working and improving it, and on this website you can switch usage data off with your browser’s Do Not Track setting. You can ask to access or delete data linked to your Bumpy ID, or object to how we use it, by emailing us. You can also complain to the Information Commissioner’s Office (ico.org.uk).

Children

Bumpy is not meant for children under 13. If you think a child has given us information, contact us and we’ll delete it.

A keepsake

Bumpy is for keeping memories. Week labels come from your due date and aren’t medical advice.

Changes

If we change this policy, we’ll update this page and the date at the top. The app’s privacy policy link always opens this page.