Privacy Policy
Last updated: 7 June 2026 · Version 1.0
Bunny Rewards (“Bunny”, “we”) is a family chores-and-rewards app operated by BYTE BUNNY S.L.U. (CIF B22465694), Avda. Tres de Mayo 30, Planta 1, Edif. Ahlers, 38005 Santa Cruz de Tenerife, Spain. This policy explains what we collect, why, and the choices and rights you have. Bunny is designed for families and is subject to children's-privacy laws including the US COPPA and EU/UK GDPR-K.
Our privacy principles
- Parent first. A parent creates the family — that is the verifiable parental consent. Children never register.
- Collect little. Children give no email, phone, or real-world identifiers.
- No tracking. No third-party advertising or analytics SDKs. We do not sell data.
- Keep it briefly, isolate it. Private media storage with short retention; each family's data is isolated.
What we collect
From the parent (account holder)
- Name and email address (for the account and sign-in, via our self-hosted identity service).
- Billing data if you subscribe to Premium — handled by Stripe on the web; we do not store card numbers.
- Device push token (if you enable notifications) and basic app/device info needed to run the service.
- Record of parental consent (timestamp + policy version).
About each child (entered by the parent)
- A first name or nickname, an emoji avatar, and an optional profile PIN (stored hashed).
- Chore/task activity, star balances, and rewards.
- Evidence and chat media (photos, videos, voice messages) the child or parent uploads.
We do not collect a child's email, phone number, precise location, or persistent advertising identifiers. We do not knowingly collect more than is needed for the chores/rewards features.
How we use data
- To provide the app: tasks, approvals, points, rewards, chat, reminders.
- To send push notifications you ask for (task approved, new message, reminders).
- To process Premium subscriptions (web checkout) and enforce entitlements.
- To secure the service (e.g., rate-limiting abuse) and meet legal obligations.
Children's privacy (COPPA & GDPR-K)
Bunny is intended to be set up and managed by a parent or guardian. The parent provides consent by creating the family and adds each child's minimal profile. A parent can at any time review, export, or delete their family's data (see Your rights). We do not condition a child's participation on disclosing more information than is reasonably necessary, and we do not show children third-party ads or behavioral tracking. If you believe a child's data was provided without proper consent, contact us at info@bytebunny.com and we will delete it.
Sharing & subprocessors
We do not sell personal data. We use a small set of service providers (subprocessors), each under a data-processing agreement:
| Provider | Purpose | Region |
|---|---|---|
| Hetzner | App hosting & database | EU |
| Cloudflare R2 | Private media storage | EU/global |
| Stripe | Web billing (Premium) | Global |
| Google FCM / Apple APNs | Push notifications | Global |
| Resend | Transactional email | Global |
Data retention
We keep family data while your account is active. Uploaded media (proof and chat attachments) is stored privately and automatically deleted after a retention window. When you delete your family, all associated data — including media objects — is removed.
Your rights
You can, from within the app or by contacting us:
- Access / export — download all of your family's data.
- Erasure — delete your family and all associated data.
- Correction — edit names, tasks, and profiles at any time.
Under GDPR you also have rights to restriction, objection, and to lodge a complaint with your supervisory authority — in Spain, the Agencia Española de Protección de Datos (AEPD). To exercise any right, email info@bytebunny.com.
Security & international transfers
Data is hosted in the EU. Media is stored in a private bucket. PINs are hashed. We apply access controls and rate-limiting. Where a provider processes data outside the EU, it is under appropriate safeguards (e.g., standard contractual clauses).
Changes
We will post any changes here and update the date and version above; material changes will be notified in-app.
Contact
BYTE BUNNY S.L.U. (CIF B22465694), Avda. Tres de Mayo 30, Planta 1, Edif. Ahlers, 38005 Santa Cruz de Tenerife, Spain · Privacy contact: info@bytebunny.com.