Last updated September 20, 2026
These Terms of Service ("Terms") are a binding agreement between you and Bump, Inc. ("Bump," "we," "us," or "our") about your use of the Bump mobile application, the website bumpapp.xyz, our VPN servers and any related services (together, the "Services").
You accept these Terms in the app when you create an account. Your consent to the processing of your personal data, described in our Privacy Policy, is asked for separately at the same time, as Brazil's Marco Civil da Internet (Art. 7 IX) requires; accepting these Terms is not by itself consent to data processing. We record the date and the version of each document you accepted. If you do not agree with these Terms, do not use the Services.
The Services are for people who are at least 18 years old and live in a country where we offer them (currently Brazil and Colombia). Persons under 18 may not use or register for the Services.
We may change these Terms. The "Last updated" date will change and, for material changes, the app will ask you to accept the new version before you continue. Continued use after a non-material change means you accept it.
Bump lets a user who has an internet connection (a "Sharer") make it available to nearby users who do not (a "Client"). The Client's phone connects to the Sharer's phone over Wi-Fi Direct or Bluetooth, opens an encrypted VPN tunnel to a server operated by Bump, and reaches the internet through that server. The Sharer's phone relays the encrypted tunnel; it cannot see the Client's traffic, and the Client's traffic does not leave from the Sharer's own IP address. A user can be both at once.
Credits are what Clients spend to use data through a Sharer. You can buy them by card (Stripe), PIX (Brazil) or PSE (Colombia). Purchased credits do not expire. Credits we grant you for free (sign-up, referral or promotional bonuses) expire 90 days after they are granted unless the promotion says otherwise. Credits are a prepaid balance for use of the Services only: they are not money, deposits or electronic money, earn no interest, cannot be transferred to other users except through features we provide, and are refundable only where the law requires it or where a purchase failed to deliver credits.
Reward points are what Sharers earn for the data they carry, for coverage bounties, challenges, referrals and milestones. Points expire 90 days after they are earned unless the programme says otherwise. Points have no cash value until you redeem them, and we may change how many points an activity earns, or the conversion rate, at any time for future activity.
Payouts. You can redeem reward points for a cash payout to a PIX key (Brazil) or to a Colombian bank account via Bre-B, for a mobile-data top-up to your phone, or for credits. To receive cash you must provide your legal name and your CPF or Cédula de Ciudadanía, which must belong to you. Payouts are made by our payment partners and may take several business days; minimums, fees and limits are shown in the app at the time of redemption. We may hold, delay, reduce or refuse a payout while we verify identity or investigate suspected fraud, and we may reverse points or credits that were obtained in breach of these Terms. Any tax on amounts you receive is your responsibility.
Errors. If a balance is credited to you by mistake we may correct it. If we owe you credits or points because of an error on our side we will restore them.
Sign-up bonuses, referral bonuses and cash-outs are limited to one per person. To enforce that we keep one-way hashes of your phone number, your Android device identifier, your Google account identifier and your tax ID, and we keep those hashes after you delete your account, so that deleting and re-creating an account cannot earn the same bonus twice. The hashes cannot be turned back into the original values. This is described in the Privacy Policy, section 8.
We also check, through Google Play Integrity, that the app you are running is the genuine app on an unmodified device. Bonuses and payouts may be withheld if that check fails. You agree not to use emulators, rooted or modified devices, modified versions of the app, automated scripts, or multiple accounts to earn credits, points or bonuses, and not to earn points by transferring data between devices you control for the purpose of generating rewards ("self-dealing").
If we determine that you have breached this section we may cancel the affected credits, points and payouts, suspend or terminate your account, and refuse future accounts linked to the same identifiers.
You may use the Services only for their intended purpose and in compliance with the law. You agree not to:
As a Client, you are solely responsible for what you do with a connection obtained through Bump, exactly as if you were using your own. Because your traffic exits from a Bump server and not from the Sharer's connection, the Sharer is not the origin of your traffic and is not responsible for it.
As a Sharer, you are not responsible for the content of the encrypted traffic that passes through your device, which you cannot see. You remain responsible for complying with your own carrier's terms and for the sharing limits you set.
We do not monitor the content or destinations of traffic. If we receive a valid court order, we will identify the device and account behind a connection from the records described in section 2 and disclose only what the order requires. Where the law obliges us to do so, we will also preserve records relating to a specific investigation.
The Services, including the app, our servers, source code, designs, text, graphics and trademarks (the "Content" and "Marks"), are owned by or licensed to Bump and protected by copyright and trademark law. Open-source components included in the app (such as OpenVPN 3 and OpenSSL) are licensed under their own terms.
Provided you comply with these Terms, we grant you a revocable, non-exclusive, non-transferable, limited licence to install and use the app on Android devices you own or control, obtained from Google Play, solely to use the Services. Google Play's own terms also apply to the download. Google is not a party to these Terms and has no obligation to provide support or maintenance for the app.
The Services let you choose a username and avatar, send end-to-end encrypted messages to other users, and send us bug reports, feedback and abuse reports (together, "Contributions"). You keep ownership of your Contributions and are responsible for them. You represent that they do not infringe anyone's rights and do not breach section 6.
Chat messages are encrypted on your device and we cannot read them, so we cannot moderate their content. We can and do act on reports from other users and on delivery metadata, and we may suspend chat or an account on the basis of a report. Messages in transit are deleted from our servers after 7 days.
Feedback, suggestions and ideas you send us may be used by us for any purpose without compensation or attribution.
Payments and payouts are carried out by Stripe, Yativo and Reloadly under their own terms, and sign-in and app distribution by Google. Mobile-data top-ups are delivered by your carrier under its terms. We are not responsible for those services, but if a purchase or payout fails on their side we will work with them to resolve it. The website may link to sites we do not control; we are not responsible for their content or practices.
Our Privacy Policy explains what personal data we collect, why, for how long, and your rights, including the connection records we keep under Brazilian law, the hashed identifiers we keep after deletion, and the transfer of your data to the United States. It is a separate document, and your consent to it is collected separately from your acceptance of these Terms. You can withdraw that consent at any time by deleting your account; the Services cannot be provided without it.
These Terms apply for as long as you use the Services. You can delete your account at any time from Settings; unredeemed credits and points are forfeited when you do, so redeem first. We may suspend or terminate your account, with notice where the law requires it, if you breach these Terms, if we are required to by law, or if we discontinue the Services. On termination for breach, credits and points obtained through the breach are cancelled.
After deletion or termination, the data described in Privacy Policy section 8 is retained, and sections 5, 7, 8, 14–18 and 20 of these Terms continue to apply.
We may change, suspend or discontinue any part of the Services at any time. The network depends on users sharing and on third-party infrastructure, and there will be interruptions, delays and errors. Except as set out in section 18, we are not liable for any loss caused by the Services being unavailable.
THE SERVICES ARE PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS. TO THE FULLEST EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. WE MAKE NO WARRANTY THAT A HOTSPOT WILL BE AVAILABLE, THAT THE SERVICES WILL BE UNINTERRUPTED, SECURE OR ERROR-FREE, OR ABOUT THE CONDUCT OF OTHER USERS. NOTHING IN THIS SECTION LIMITS RIGHTS THAT CONSUMER LAW GIVES YOU AND THAT CANNOT BE EXCLUDED (SECTION 18).
TO THE FULLEST EXTENT PERMITTED BY LAW, BUMP AND ITS DIRECTORS, EMPLOYEES AND AGENTS WILL NOT BE LIABLE FOR ANY INDIRECT, CONSEQUENTIAL, EXEMPLARY, INCIDENTAL, SPECIAL OR PUNITIVE DAMAGES, INCLUDING LOST PROFIT, LOSS OF DATA OR CARRIER CHARGES, ARISING FROM YOUR USE OF THE SERVICES. OUR TOTAL LIABILITY TO YOU FOR ANY CLAIM WILL NOT EXCEED THE GREATER OF THE AMOUNT YOU PAID US IN THE TWELVE MONTHS BEFORE THE CLAIM AND US$100. THIS SECTION DOES NOT LIMIT LIABILITY FOR FRAUD, GROSS NEGLIGENCE, DEATH OR PERSONAL INJURY, OR ANY LIABILITY THAT CANNOT BE LIMITED UNDER THE CONSUMER LAW THAT APPLIES TO YOU.
You agree to defend and indemnify Bump and its officers, agents and employees against any claim, loss or expense, including reasonable legal fees, arising from your breach of these Terms, your Contributions, your violation of any law or of a third party's rights, or — as a Client — the traffic you send through the Services. We may take over the defence of any such claim at our expense, and you will cooperate with us.
Subject to section 18, these Terms are governed by the laws of the Commonwealth of Massachusetts, United States, without regard to its conflict-of-law rules.
Informal resolution first. Before starting any proceeding, write to support@bumpapp.xyz describing the dispute; we will try to resolve it within 30 days.
Arbitration. Subject to section 18, any dispute not resolved informally will be finally resolved by binding arbitration under the Commercial Arbitration Rules of the American Arbitration Association, by one arbitrator, in Boston, Massachusetts, in English, and may be conducted remotely. YOU UNDERSTAND THAT WITHOUT THIS PROVISION YOU WOULD HAVE THE RIGHT TO SUE IN COURT AND HAVE A JURY TRIAL. Arbitration is limited to the dispute between you and us individually; no class, collective or representative proceeding is permitted. Claims to protect intellectual property, claims of unauthorised use or privacy invasion, and claims for injunctive relief are excluded and may be brought in the state and federal courts in Suffolk County, Massachusetts. Any claim must be brought within one year after it arose, unless the applicable law gives a longer period that cannot be shortened.
If you use the Services as a consumer in Brazil or Colombia, the following applies to you regardless of anything else in these Terms:
You agree that notices, disclosures and agreements we provide in the app or by email satisfy any requirement that they be in writing, and that acceptances recorded in the app have the same effect as a signature.
These Terms and the Privacy Policy are the entire agreement between you and us about the Services. If any provision is found unenforceable, the rest remains in effect. Our failure to enforce a provision is not a waiver. We may assign these Terms to a successor of our business; you may not assign them. Nothing in these Terms creates a partnership, employment or agency relationship between you and us, or between Sharers and us.
Questions about these Terms or the Services: support@bumpapp.xyz. Privacy requests: privacy@bumpapp.xyz.
Bump, Inc.
500 Boylston St.
Suite 900
Boston, MA 02116
United States
These Terms are available in Portuguese and Spanish.