Privacy Policy for Bunkr Mobile

Effective Date: January 14, 2025

Last Updated: February 20, 2026

1. Introduction

Welcome to Bunkr Mobile ("Bunkr," "we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services (collectively, the "Service").

Data Controller: Bunkr Mobile is the data controller responsible for your personal data. For questions about how your data is processed, contact us at contact@bunkr.social.

By using Bunkr, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide to Us

Account Information

• Email address
• Display name and username
• Password (stored as a cryptographic hash; we do not store your password in plain text)
• Profile photo and cover photo
• Bio/description
• Home golf course
• Location (city/state)

Golf Performance Data

• Scorecards and detailed hole-by-hole scores
• Bunkr Rating and calculation history
• Golf statistics (fairways hit, greens in regulation, putts, etc.)
• Playing partners and round participants
• Course played and tee boxes used
• Round dates, times, and conditions
• Photos and videos from rounds

Social Content

• Posts, comments, and reactions
• Following/follower relationships
• Shared scorecards and round summaries
• Direct messages and group conversations

Marketplace Information

• Listing details (title, description, price, condition)
• Item photos
• Location for distance calculations
• Communication with buyers/sellers

Game Tracking Data

• Golf game sessions (skins, nassau, match play, wolf, stroke play)
• Stakes and settlement tracking
• Player performance in games
• Win/loss records

2.2 Information Collected Automatically

Device Information

• Device type and model
• Operating system version
• Unique device identifiers
• Mobile network information
• Push notification tokens
• IP address (collected automatically when you access the Service)

Usage Data

• App features used
• Time spent in app
• Interaction with content
• Search queries
• Performance data

Crash and Diagnostic Data

• Application crash reports and error logs
• Performance metrics and diagnostics
• Device state at the time of a crash or error
• Breadcrumb trail of user actions leading to an error (collected automatically by our crash reporting service)

Location Information

• Precise location (when using GPS features, finding nearby golf courses, and discovering nearby golfers)
• General location (for marketplace distance calculations)

2.3 Information from Third Parties

Golf Course & Location Data

• Course information from OpenStreetMap
• Weather data from NOAA (weather.gov) and Open-Meteo
• Elevation data from USGS (United States Geological Survey)
• Mapping and satellite imagery from Mapbox

2.4 Subscription and Purchase Information

If you subscribe to Bunkr Golf, we collect and process the following information in connection with your subscription:

Purchase Data

• Subscription status (active, expired, canceled, or in billing retry)
• Purchase date and expiration date
• Product identifier and subscription plan
• Transaction identifiers provided by Apple or Google
• Price paid and currency
• Whether a free trial or promotional offer was redeemed
• Billing issue or grace period status

Data We Do NOT Collect

• We do not collect or have access to your payment card number, billing address, or other payment instrument details. All payment processing is handled directly by Apple (App Store) or Google (Google Play).

3. How We Use Your Information

We use your information for the following purposes:

3.1 Provide and Improve the Service

• Create and manage your account
• Calculate and track your Bunkr Rating
• Enable scorecard creation and sharing
• Facilitate golf game tracking
• Power social features and connections
• Suggest nearby golfers based on your location
• Enable marketplace listings and communications
• Provide personalized recommendations
• Manage subscription entitlements and deliver the Service
• Diagnose technical issues and improve app stability

3.2 Communication

• Send push notifications about:
  • Tee time reminders
  • Game invitations
  • Social interactions
  • Marketplace inquiries
• Respond to your inquiries
• Send important service updates

3.3 Safety and Security

• Detect and prevent fraud
• Monitor for violations of our Terms of Service
• Protect users from harmful content
• Ensure marketplace safety
• Validate subscription purchases and prevent unauthorized access to the Service

3.4 Legal Compliance

• Comply with legal obligations
• Respond to legal requests
• Enforce our terms and policies
• Protect our rights and property

4. How We Share Your Information

4.1 With Other Users

Public Information

• Profile information (name, photo, Bunkr Rating, bio)
• Public posts and shared scorecards
• Golf statistics and achievements
• Marketplace listings

Limited Sharing

• Scorecards shared with playing partners
• Messages with conversation participants
• Tee time details with participants
• Location data for marketplace distance

4.2 With Service Providers

We share information with third-party service providers that help us operate the Service:

• Firebase (Google) for authentication, database, cloud functions, and storage
• Expo for app infrastructure and over-the-air updates
• Mapbox for mapping and satellite imagery
• NOAA (weather.gov) and Open-Meteo for weather data
• USGS for elevation data
• OpenStreetMap for course information
• RevenueCat, Inc. for subscription management, purchase validation, and entitlement delivery (see Section 4.3)
• Sentry (Functional Software, Inc.) for crash reporting and application performance monitoring (see Section 4.4)
• Giphy (Meta Platforms, Inc.) for GIF search and sharing in social features (see Section 4.5)

4.3 Subscription Data Processing (RevenueCat)

We use RevenueCat, Inc. ("RevenueCat") as a third-party service provider to manage in-app subscriptions. RevenueCat acts as a data processor on our behalf and processes the following categories of data:

Data Processed by RevenueCat:

• A pseudonymous application user identifier (linked to your Bunkr account but not directly identifying)
• Purchase and subscription transaction history received from Apple or Google
• Subscription status and entitlement information
• Device platform (iOS or Android)
• App version and SDK version
• IP address (collected automatically by RevenueCat's servers)

How RevenueCat Uses This Data:

• To validate purchase receipts and prevent fraud
• To determine your subscription entitlement status
• To provide us with aggregated, anonymized analytics about subscription performance
• To facilitate subscription management (renewals, cancellations, billing retries)

RevenueCat does not:

• Collect personally identifiable information such as your name, email address, or physical address through our integration
• Access your payment card details or billing information
• Sell or share your data with third parties for advertising purposes
• Use your data for purposes other than providing subscription management services to Bunkr

RevenueCat maintains SOC 2 Type II compliance and encrypts all data in transit and at rest. RevenueCat processes data in accordance with their Privacy Policy (https://www.revenuecat.com/privacy/) and Data Processing Addendum (https://www.revenuecat.com/dpa/).

4.4 Crash Reporting (Sentry)

We use Sentry, operated by Functional Software, Inc., for crash reporting and application performance monitoring. Sentry processes the following data as a data processor on our behalf:

Data Processed by Sentry:

• A pseudonymous user identifier (your Bunkr user ID)
• Crash reports and error stack traces
• Device information (model, OS version, available memory)
• App version and build number
• Breadcrumb data (a sequence of recent app actions prior to an error)
• IP address (collected automatically but not stored permanently by default)

How Sentry Uses This Data:

• To aggregate and display crash and error reports for our development team
• To help us identify, diagnose, and fix bugs and performance issues
• To alert us to new or increasing error patterns

Sentry does not use your data for advertising or sell it to third parties. Sentry processes data in accordance with their Privacy Policy (https://sentry.io/privacy/) and Data Processing Agreement.

4.5 GIF Search (Giphy)

We integrate the Giphy SDK, operated by Meta Platforms, Inc., to allow you to search for and share GIFs in social features such as posts, comments, and messages.

Data Processed by Giphy:

• GIF search queries you enter
• Device information and IP address (collected automatically by Giphy's SDK)

Giphy processes this data in accordance with their Privacy Policy (https://giphy.com/privacy). We do not share your Bunkr account information with Giphy.

4.6 For Legal Reasons

We may disclose information if required by law or if we believe such action is necessary to:

• Comply with legal obligations
• Protect and defend our rights
• Prevent fraud or abuse
• Protect user safety

4.7 Business Transfers

If Bunkr is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice in the app before your information is transferred and becomes subject to a different privacy policy.

5. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. Specifically:

• Account data: Retained while your account is active
• Scorecards and statistics: Retained indefinitely for Bunkr Rating calculations
• Messages: Retained while conversation participants are active
• Marketplace listings: Active listings retained until sold/removed; archived for 1 year
• Subscription data: Purchase history and subscription status are retained while your account is active and for up to 3 years after your account is deleted or your subscription expires, as required for financial record-keeping, dispute resolution, and fraud prevention
• Crash reports: Retained for up to 90 days for diagnostic purposes
• Deleted content: Removed within 30 days

6. Your Rights and Choices

6.1 Account Controls

You can:

• Update profile information
• Change privacy settings
• Control notification preferences
• Delete posts and content
• Block other users

6.2 Access and Portability

You can request a copy of your personal data by contacting us at contact@bunkr.social. We will respond to verified requests within thirty (30) days, or within the timeframe required by applicable law.

6.3 Correction

You can request correction of inaccurate personal data by contacting us at contact@bunkr.social or by updating your profile directly in the app.

6.4 Deletion

You can request deletion of your account and personal data. Note that some information may be retained for legal or legitimate business purposes as described in Section 5. Upon account deletion, we will delete or anonymize your personal data within thirty (30) days, except for data we are legally required or permitted to retain.

6.5 Location Services

You can disable location services in your device settings, though this may limit certain features such as GPS course maps and nearby golfer suggestions.

6.6 Marketing Communications

You can opt out of marketing communications through your account settings or by following unsubscribe instructions.

6.7 Subscription Data

You can request access to or deletion of your subscription data by contacting us at contact@bunkr.social. Note that canceling your subscription does not automatically delete your subscription history, which is retained as described in Section 5.

7. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS) and at rest
• Secure authentication systems
• Regular security assessments
• Limited access controls
• Firebase security rules
• Secure device-level storage for sensitive identifiers (using platform keychain/keystore)

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. If you become aware of a security vulnerability or data breach affecting your account, please contact us immediately at contact@bunkr.social.

8. Children's Privacy

Bunkr is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will promptly delete it. If you believe we may have collected information from a child under 13, please contact us at contact@bunkr.social.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. By using Bunkr, you acknowledge these transfers. Where required by applicable law, we ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission for transfers to third-party processors such as RevenueCat and Sentry
• Reliance on adequacy decisions where applicable
• Contractual commitments with service providers to protect your data

10. California Privacy Rights

California residents have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

10.1 Your Rights

• Right to Know: You have the right to know what personal information we collect, use, disclose, and sell
• Right to Delete: You have the right to request deletion of your personal information
• Right to Correct: You have the right to request correction of inaccurate personal information
• Right to Opt-Out: You have the right to opt out of the sale or sharing of your personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

10.2 Our Practices

We do not sell or share personal information for cross-context behavioral advertising as defined under CCPA/CPRA.

10.3 Categories of Personal Information Collected

We collect the following categories of personal information as defined by CCPA:

• Identifiers: Name, email address, username, unique device identifiers, IP address, pseudonymous user identifiers associated with your subscription
• Personal Information under Cal. Civ. Code 1798.80(e): Name, email address
• Commercial Information: Records of subscriptions purchased, subscription status, transaction history, marketplace listings
• Internet or Electronic Network Activity: Information about your interaction with the Service, including app usage data, search queries, and crash reports
• Geolocation Data: Precise and approximate location information
• Audio, Electronic, Visual, or Similar Information: Photos and videos you upload
• Inferences: Bunkr Rating, statistics, and preferences derived from your activity

10.4 Service Providers

We share personal information with the service providers listed in Section 4.2 solely for the business purposes described in this Privacy Policy. We do not sell personal information to third parties.

10.5 Exercising Your Rights

To exercise your rights, contact us at contact@bunkr.social. We will verify your identity before processing your request and respond within forty-five (45) days as required by CCPA.

11. European Privacy Rights

If you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR) and equivalent local laws:

11.1 Your Rights

• Right to access your personal data
• Right to rectify inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time (without affecting the lawfulness of processing prior to withdrawal)
• Right to lodge a complaint with your local data protection authority

11.2 Legal Bases for Processing

We process your personal data based on the following legal bases:

11.3 Subscription Data Processing

For the processing of subscription data, our legal basis is performance of contract (providing the Bunkr Golf subscription services you have purchased) and legitimate interests (fraud prevention and financial record-keeping). RevenueCat, Inc. acts as a data processor under Article 28 of the GDPR, governed by a Data Processing Addendum. Subscription data may be transferred to and processed in the United States by RevenueCat with appropriate safeguards, including Standard Contractual Clauses, in place to protect your data.

11.4 Exercising Your Rights

To exercise your rights under GDPR, contact us at contact@bunkr.social. We will respond within thirty (30) days. For European users, you may also contact your local data protection authority if you believe we have not adequately addressed your concerns.

12. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Updating the "Last Updated" date at the top of this Policy
• In-app notifications
• Email notifications for significant changes

We encourage you to review this Privacy Policy periodically. Your continued use of Bunkr after changes have been posted indicates acceptance of the updated Policy. If a change materially reduces your rights, we will provide at least thirty (30) days' notice before the change takes effect.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Email: contact@bunkr.social

For European users, you may also contact your local data protection authority.

Your Choices: By using Bunkr, you acknowledge that you have read and understood this Privacy Policy. Where we rely on consent as a legal basis for processing, you may withdraw your consent at any time by contacting us at contact@bunkr.social or adjusting your device settings.