Privacy Policy

Last updated: May 2, 2026

Introduction

Welcome to Bunli. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our mobile application and related services.

By using Bunli, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name (optional)
• Apple ID or Google account identifier (when you sign in with those providers)

Meal & Nutrition Content

When you use Bunli, we collect:

• Photos of meals that you capture for AI scanning
• AI-estimated nutrition data (calories, macros, ingredients)
• Meal logs, portion sizes, and timestamps
• Bunny customization, XP, level, streaks, and quest progress
• Goals and preferences (calorie goal, reminders, haptics)

Usage Data

We automatically collect:

• App usage statistics (features used, session duration)
• Device information (device type, OS version)
• Crash reports and performance data

How We Use Your Information

We use your information to:

• Identify foods in meal photos and estimate calories and macros
• Track your progress toward daily goals, streaks, and quests
• Personalize your bunny pal and gamification experience
• Send important service notifications and meal reminders
• Analyze and improve app performance
• Provide customer support

Third-Party AI Data Sharing

Bunli sends meal photos to a third-party AI service to provide its core scanning feature.

OpenAI (Meal Recognition)

Data sent: The photo of the meal you captured, plus a fixed prompt requesting a nutrition estimate.

Purpose: To identify the food and estimate calories, protein, carbs, fat, and fiber.

OpenAI processes this data under their API data usage policy and does not use it to train their models. Photos are not shared with other users or sold to third parties.

Data Storage and Security

Your data is stored securely using industry-standard practices:

• App data (logs, bunny, settings) is persisted on your device using encrypted local storage
• Data sent to AI services and our backend is encrypted in transit (TLS 1.3)
• Server-side data, when applicable, is hosted on Supabase with encryption at rest

We retain your data for as long as your account is active. You can request deletion of your data at any time.

Data Sharing

We do not sell your personal information. We may share data with:

• Service providers who help us operate our services (cloud hosting, analytics)
• AI service providers for meal recognition
• Law enforcement when required by law

Your Rights

You have the right to:

• Access your personal data
• Export your data in a portable format
• Correct inaccurate data
• Delete your account and all associated data
• Opt out of analytics collection
• Withdraw consent at any time

To exercise these rights, go to Settings in the app, or contact us at the email below.

Children's Privacy

Bunli is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in compliance with applicable data protection laws.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: dev@cotax.ai