The Bunker App Privacy Policy

Effective date: August 18, 2025

Thank you for using The Bunker App. This Privacy Policy explains how Bunker Bros ("we", "us", or "our") collects, uses, discloses, and protects personal information when you use The Bunker mobile application (the "App") and related services. The Bunker is a veteran-focused social platform that connects veterans, their families, and supporters.

Please read this policy carefully. By using the App, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect information you provide directly to us and information automatically collected when you use the App.

• Information you provide: name, email address, profile information (avatar, biography, location), user-generated content (posts, messages, comments), demographic information you choose to share (e.g., veteran status, branch, rank), and any other information you submit via forms or support requests.
• Account and authentication data: when you sign in using Firebase Authentication, social sign-in providers, or ID.me, we receive authentication tokens and basic account metadata necessary to create and manage your account.
• Identity verification data (ID.me): if you choose to verify your identity through ID.me, ID.me will collect identity attributes (for example, name, date of birth, government ID information, and other details required for verification). We receive verification results and the specific identity attributes you consent to share with us. We do not control what ID.me requires for verification — see Section 6 for details.
• Usage data: device information (model, OS version), IP address, device identifiers, crash logs, log files, and diagnostic data.
• Analytics and cookies: aggregated usage metrics and analytics collected via third-party analytics services to help improve the App and measure engagement.

2. How We Use Your Information

We use collected information for purposes including but not limited to:

• Providing, operating, and improving the App and its features.
• Account creation, authentication, and profile management.
• Verifying identity and eligibility when you choose to use ID.me verification.
• Facilitating social interactions (posting, messaging, following) and content moderation.
• Sending transactional messages, system notifications, and optional marketing communications (where you opt in).
• Personalizing your experience and recommendations.
• Preventing fraud, abuse, and security incidents.
• Legal and compliance purposes.

3. Sharing and Disclosure

We do not sell your personal information. We may share information as described below:

• With service providers and subprocessors: third-party companies that provide hosting, analytics, push notifications, email delivery, and other services necessary to run the App (for example, Firebase/Google Cloud services). These providers process data on our behalf under contract.
• With ID.me: when you use ID.me to verify your identity, we share the data required by ID.me to perform verification and receive back verification outcomes and any identity attributes you consent to share. You control whether you use ID.me; we will not perform verification without your consent.
• For legal reasons: when required by law, legal process, or to respond to lawful requests by public authorities, or to protect the rights, property, or safety of Bunker Bros, our users, or the public.
• With your consent: other disclosures you explicitly authorize.

We may also share aggregated or de-identified information that cannot reasonably be used to identify you.

4. Third-Party Services and Links

The App uses third-party services such as Firebase (Authentication, Firestore), analytics providers, and ID.me. These services have their own privacy policies and practices. We encourage you to review the privacy policies of those providers:

• Firebase / Google: https://policies.google.com/privacy
• ID.me: https://www.id.me/privacy

The App may contain links to third-party websites or services. We are not responsible for the privacy practices of those sites.

5. Sensitive Personal Information

Some information you provide may be sensitive (for example, veteran status or military service details). We treat such information with heightened care. We process sensitive information only with your express consent or where otherwise permitted by applicable law. If you choose to publicly post sensitive details in the App, that content may be visible to other users.

6. ID.me Integration — What You Should Know

ID.me is a third-party identity verification provider. If you elect to verify your identity via ID.me:

• You will be redirected to ID.me to complete verification, and ID.me will collect and verify identity documents and attributes as required by their process.
• You will be asked to consent to share specific identity attributes with The Bunker App. Only the attributes you consent to share will be provided to us.
• We receive verification results and the identity attributes you authorized. We use this information solely to confirm your identity or eligibility for features that require verification (for example, veteran-only communities or benefits access) and to meet compliance obligations.
• We do not store ID.me authentication credentials. We may store a record that verification was performed and the attributes received (limited to what is necessary).

If you have questions about how ID.me handles your personal information, review ID.me's privacy policy or contact ID.me directly.

7. Data Retention

We retain personal information for as long as necessary to provide the App, comply with our legal obligations, resolve disputes, and enforce our agreements. For example:

• Account and profile data: retained until you delete your account or as required to comply with legal obligations.
• Content you post: retained until you remove it and for a reasonable time afterwards to ensure backups and moderation.
• Log and analytics data: retained in aggregated or anonymized form where possible; otherwise retained for a limited period for troubleshooting and analytics.

If you request account deletion, we will delete your personal information except for information we are required to retain (for legal, security, or legitimate business purposes). Deleted content may persist in backups for a limited time.

8. Your Choices and Rights

Depending on where you live and applicable law, you may have rights regarding your personal information, including:

• Access: request a copy of the personal information we hold about you.
• Correction: request that we correct inaccurate or incomplete information.
• Deletion: request deletion of your account and personal data (subject to exceptions).
• Portability: request a copy of your personal information in a commonly used format.
• Objection or restriction: object to or request the restriction of certain processing activities.

To exercise these rights or to update your preferences, you can:

• Use the account settings in the App to update or delete profile information.
• Contact us at the email address below with a subject line of "Privacy Request" and include sufficient information to verify your identity and describe your request.

We may need to verify your identity before responding to certain requests and may refuse requests that are frivolous or impose disproportionate burden.

9. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Examples include access controls, encryption in transit (HTTPS), and secure cloud infrastructure. No system is completely secure; if we learn of a security incident affecting your data, we will follow applicable notification requirements.

10. International Data Transfers

The App is operated in the United States and data may be stored and processed in the U.S. or other countries. If you are located outside the U.S., please be aware that your data may be transferred to jurisdictions with different data protection laws. We rely on appropriate safeguards and contractual provisions with our service providers to protect personal information.

11. Children

The App is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated policy in the App and update the "Effective date" at the top. Material changes will be communicated via in-app notice or email when feasible.

13. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our privacy practices, please contact us:

• support@bunker-bros.org

For inquiries specifically about identity verification or ID.me data handling, you may also contact ID.me directly: https://www.id.me/contact