Privacy Policy

This Privacy Policy explains what personal data BUNK collects, why we collect it, how we use and share it, and the rights you have. It applies to the BUNK website, apps and services. By using BUNK you agree to the practices described here.

We collect the following, depending on how you use BUNK:

• Account data — your email address and password (passwords are stored hashed by our authentication provider, never in plain text), and your chosen account type.
• Profile data — the information you add to your profile: name, photo, city and country, bio, and (for volunteers) languages and skills, or (for hostels) hostel name and details.
• Listings & applications — content hostels post and the messages volunteers send when applying.
• Messages & reviews — chat messages between matched users, and the public reviews you write.
• Usage & device data — basic technical information such as IP address, browser type and pages viewed, used to keep the Service secure and working.

We use your data to:

• Create and manage your account and profile.
• Operate the marketplace — show listings, route applications, and unlock chat on a match.
• Display public profiles, reviews and star averages, as the Service is designed to do.
• Keep BUNK safe — preventing fraud, abuse and security incidents.
• Communicate with you about your account, support requests and important changes.
• Improve the Service and understand how it’s used.

BUNK is a social marketplace, so some information is public by design. Your profile, your hostel’s listings, and the reviews written about you are visible to anyone, including search engines. Messages in a chat are visible only to the two participants of that match. Please don’t put anything in a public field you wouldn’t want shown publicly.

We use trusted third parties to run BUNK. They process data on our behalf under agreements that require them to protect it:

• Supabase — our database, authentication, file storage and realtime backend.
• Vercel — hosting and content delivery for the website.

We do not sell your personal data to anyone.

We use essential cookies to keep you signed in and to keep your session secure. These are required for the Service to function. We do not use them for advertising. You can clear cookies in your browser, but doing so will sign you out.

We keep your data for as long as your account is active or as needed to provide the Service. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain some information to comply with legal obligations, resolve disputes or enforce our agreements. Public reviews may remain visible in anonymised form to preserve the integrity of the review history.

We protect your data with industry-standard measures, including encryption in transit and row-level security on our database so users can only access data they’re entitled to. No system is perfectly secure, but we work hard to keep yours safe and to respond quickly if something goes wrong.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data — most of it you can edit yourself in settings.
• Delete your account and associated personal data.
• Object to or restrict certain processing, and request a copy of your data.

To exercise any of these, email support@bunk.surf. You can also delete your account at any time from your settings.

BUNK is available globally, and your data may be processed in countries other than your own, including by the service providers listed above. Where required, we rely on appropriate safeguards for these transfers.

BUNK is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a minor has given us personal data, contact us and we will delete it.

We may update this policy as BUNK evolves. We’ll revise the “last updated” date above and, for material changes, take reasonable steps to let you know.

Questions or requests about your privacy? Email support@bunk.surf.