PRIVACY POLICY
Last Updated: April 9, 2026
Effective Date: April 9, 2026
This Privacy Policy describes how Bunni ("we," "us," or "our") collects, uses, and protects
your information when you use the Bunni mobile application ("App"). By using the App, you
agree to the collection and use of information in accordance with this policy.
1. WHO WE ARE
Bunni is a screen time management and focus productivity app developed by Gaudas Palubaitis.
Contact Email: [YOUR_EMAIL@example.com]
Website: [YOUR_WEBSITE_URL]
For privacy-related inquiries, please contact us at the email address above.
2. INFORMATION WE COLLECT
We are committed to minimizing data collection. The vast majority of your data never leaves
your device.
2.1 Data Stored Locally on Your Device
The following data is collected and stored exclusively on your device using on-device storage
(AsyncStorage and UserDefaults). We do not have access to this data, and it is never
transmitted to our servers:
- Screen Time Estimates: Approximate daily screen time calculated in 5-minute intervals
using Apple's Device Activity framework. The App uses opaque tokens provided by Apple,
meaning we never see or know which specific apps you use or visit.
- Focus Session Records: Session date, start time, planned and actual duration, and
completion status.
- Daily Statistics: Aggregated daily metrics including estimated screen time, focus
session percentages, and pickup counts.
- Streak and Progress Data: Current and best consecutive-day streaks and total focus
hours.
- Habits: Habit names, schedules (days of week, start/end times), associated block list
references, and active status.
- Block Lists: Named groups of app selections you create for blocking during focus
sessions. These use Apple's opaque tokens and do not reveal specific app identities to us.
- App Categorizations: Your categorization of apps as productive, neutral, or distracting,
stored using Apple's opaque token system.
- AI Message Cache: Up to 10 recently generated motivational messages, cached locally to
avoid redundant requests.
2.2 Data Sent to Third-Party Services
a) OpenAI (AI-Generated Messages)
To provide personalized motivational messages from the Bunni mascot, we send the following
aggregated, anonymized usage statistics to OpenAI's API (GPT-4o-mini model):
- Streak counts and total focus hours
- Daily and weekly screen time estimates (in minutes)
- Focus session counts, completion rates, and average durations
- Habit names and general schedule summaries
- Number of blocked apps (not their identities)
- Time of day and day of week
- General trend indicators (improving, stable, or worsening)
We do NOT send any personally identifiable information (name, email, device ID), specific
app names, browsing history, or any data that could identify you as an individual.
This data is sent up to three times per day (morning, midday, and evening) to generate
time-appropriate motivational messages. OpenAI processes this data under their API data
usage policy, which states that API inputs are not used to train their models.
For more information, see OpenAI's privacy policy at: https://openai.com/privacy
b) Superwall (Subscription Management)
We use Superwall to manage in-app subscriptions and paywalls. Superwall may collect:
- Anonymous device identifiers
- Purchase and transaction data
- Basic device information (OS version, device type)
Superwall does not receive your screen time data, focus session data, or any personal
information beyond what is necessary for subscription management.
For more information, see Superwall's privacy policy at: https://superwall.com/privacy
c) Apple
As an iOS application, standard Apple services may collect:
- App Store analytics (if you have opted in via your device settings)
- Crash reports and diagnostics (if you have opted in)
- In-app purchase transaction records
Apple's data practices are governed by Apple's Privacy Policy:
https://www.apple.com/privacy
2.3 Data We Do NOT Collect
- We do not collect your name, email address, phone number, or any account credentials
(the App does not require account creation).
- We do not collect your location data.
- We do not collect or store photos, contacts, or calendar data.
- We do not know which specific apps you use. Apple's Screen Time API provides only
opaque tokens that hide actual app identities.
- We do not collect browsing history or website data.
- We do not use cookies or tracking pixels.
3. HOW WE USE YOUR INFORMATION
We use the information described above for the following purposes:
- To provide core App functionality: Focus timers, app blocking, screen time monitoring,
habit tracking, and daily insights.
- To generate personalized motivational messages: Aggregated statistics are sent to
OpenAI to create encouraging, context-aware messages from the Bunni mascot.
- To manage subscriptions: Superwall processes subscription-related data to provide
premium features.
- To improve the App: Aggregated, anonymous usage patterns may inform future feature
development.
4. DATA STORAGE AND SECURITY
4.1 Local Storage
The vast majority of your data is stored locally on your device using:
- AsyncStorage: React Native's persistent key-value storage system
- UserDefaults with App Groups: Shared storage between the main App and its extensions
This data is protected by your device's built-in security features, including device
encryption and passcode/biometric protection.
4.2 Data in Transit
All data transmitted to third-party services (OpenAI, Superwall) is sent over encrypted
HTTPS/TLS connections.
4.3 Data Retention
- Local data: Focus sessions and daily statistics are retained for up to 365 days on
your device. AI message cache retains the last 10 messages.
- When you delete the App: All locally stored data (AsyncStorage and app-specific
UserDefaults) is automatically deleted by iOS when the App is uninstalled.
- Third-party retention: Data sent to OpenAI and Superwall is subject to their respective
retention policies.
5. THIRD-PARTY SERVICES
The App integrates with the following third-party services:
| Service | Purpose | Data Shared |
|------------|--------------------------------|--------------------------------------|
| OpenAI | AI-generated messages | Aggregated anonymous usage stats |
| Superwall | Subscription/paywall management| Device ID, transaction data |
| Apple | Platform services, App Store | Standard iOS analytics (if opted in) |
We do not sell, rent, or trade your personal information to any third party.
6. DEVICE PERMISSIONS
The App may request the following permissions:
a) Screen Time / Family Controls Access
Required for core functionality (app blocking and screen time monitoring). Without this
permission, the App cannot block distracting apps during focus sessions. You can
revoke this at any time in your device's Settings > Screen Time.
b) Microphone Access
Used only for the spoken affirmation feature. Audio is processed using Apple's on-device
speech recognition and is not stored or transmitted by us.
c) Speech Recognition
Used to verify that you have spoken your affirmation. Processing occurs on-device via
Apple's speech recognition framework.
You can manage all permissions at any time through your iOS Settings.
7. CHILDREN'S PRIVACY
The App is designed for individual use and is not directed at children under the age of 13.
We do not knowingly collect personal information from children under 13. If you are a parent
or guardian and believe your child has provided us with personal information, please contact
us and we will take steps to delete such information.
8. YOUR RIGHTS
Depending on your location, you may have the following rights regarding your data:
8.1 General Rights (All Users)
- Access: You can view all your data directly within the App (focus sessions, stats,
habits, and streaks are displayed in the App interface).
- Deletion: You can delete all your data by uninstalling the App. All locally stored
data is automatically removed upon uninstallation.
- Opt-Out of AI Messages: You can choose not to use the AI-generated message feature.
No data will be sent to OpenAI if the feature is not triggered.
8.2 European Economic Area (GDPR)
If you are located in the EEA, you have the right to:
- Access the personal data we hold about you
- Request rectification of inaccurate data
- Request erasure of your data
- Restrict or object to processing of your data
- Data portability
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
Legal bases for processing:
- Consent: For sending data to OpenAI for AI-generated messages
- Contract performance: For providing core App functionality
- Legitimate interest: For improving the App and ensuring security
8.3 California Residents (CCPA)
If you are a California resident, you have the right to:
- Know what personal information is collected and how it is used
- Request deletion of your personal information
- Opt out of the sale of personal information
We do NOT sell your personal information. We do not share personal information for
cross-context behavioral advertising.
8.4 International Data Transfers
If you are located outside the United States, please note that aggregated usage statistics
sent to OpenAI are processed on servers located in the United States. By using the AI
message feature, you consent to this transfer. We ensure appropriate safeguards are in
place for any international data transfers.
9. DATA BREACH NOTIFICATION
In the unlikely event of a data breach affecting your personal information, we will notify
affected users and relevant authorities as required by applicable law, typically within 72
hours of becoming aware of the breach.
10. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time. We will notify you of any material
changes by:
- Posting the updated Privacy Policy within the App
- Updating the "Last Updated" date at the top of this policy
Your continued use of the App after any changes constitutes acceptance of the updated
Privacy Policy. We encourage you to review this policy periodically.
11. CONTACT US
If you have any questions, concerns, or requests regarding this Privacy Policy or our data
practices, please contact us at:
Email: gaudaspal@gmail.com
We will respond to your inquiry within 30 days.