Privacy Policy
Bunavi is a mobile app that helps parents record their baby's feedings, sleep, and growth. This policy explains what data the app handles, where it is stored, who can see it, and the choices you have. The short version: your baby's profile, health and tracking data are stored in the EU, your data is never sold, and you can delete your account and its data yourself at any time. A few limited services we rely on — payments, email delivery and crash reporting — are run by companies based outside the EU; we name them below.
Who is responsible
The data controller is the app's developer:
Rostislav Antonovich · Bulgaria
Contact: [email protected]
We are a small enough operation that the GDPR does not require us to appoint a Data Protection Officer, and we have not designated one; any question about your data goes straight to the developer at the address above.
What we collect
| Account | Your email address, a password (stored only as a cryptographic hash — we can never read it), and an optional display name. If you sign in with Apple or Google instead, we receive the email address (or Apple's private relay address) and name that provider returns. |
|---|---|
| Baby profile | The name, date of birth, and optionally the sex of each baby you add, and an optional profile photo if you choose to add one. You choose what to enter; a nickname works just as well as a real name. |
| Tracking records | Feedings (type, time, amount or duration, optional notes), pumping sessions, sleep sessions, diaper changes (including optional stool detail), growth measurements (weight, height, head circumference), milestones, and health events such as temperature, symptoms, medications, and vaccinations. Some of these are health-related; you enter them and may delete them at any time. |
| Baby photos | If you add a profile photo for a baby, the image is stored in our EU hosting bucket and shown to you and anyone you invite to that baby. Photos are deleted when you remove them or delete the baby. The diaper stool-photo feature, when you turn it on, takes a photo only to analyze it and does not keep it on our servers. |
| Cry detection | Optional. If you turn on cry detection, Bunavi listens through your device's microphone to suggest a likely reason your baby is crying. This happens entirely on your device — the audio is analyzed in the moment and is never recorded, saved, or sent to us or anyone else. You can switch the microphone permission off at any time in your device settings. |
| Subscription | If you buy Bunavi Plus, Apple processes the payment — we never see your card details — and reports your subscription status. To manage what your plan unlocks, your Bunavi account identifier and the resulting purchase and renewal events are shared with RevenueCat. |
| Crash reports | If a build has crash reporting enabled, technical details of a crash (device model, OS version, app version, stack trace) are sent to Sentry. Crash reporting is configured to exclude personal data, and we use no advertising identifiers. |
| Waitlist email | If you enter your email on our website to join the launch waitlist, we store that address to send you a confirmation and occasional launch news. A waitlist entry is separate from any app account, and you can unsubscribe at any time. |
We do not collect your location, your contacts, your photo library (we only use the specific images you pick), microphone audio (cry detection runs on your device and keeps nothing), or any advertising or analytics profile. The app shows no ads, and we never use your baby's photos, health records, cry audio, or any of your entries to train artificial-intelligence or machine-learning models. Your family's data is used to run the app for you — nothing else.
Why we process it
Account, profile, and tracking data are processed to provide the service you signed up for (GDPR Art. 6(1)(b)). Records about your baby — including health-related ones such as growth measurements — are entered by you as the parent or guardian, and by saving them you explicitly consent to their processing for this purpose (Art. 9(2)(a)). You can withdraw that consent at any time by deleting individual records or your whole account. If you buy Bunavi Plus, we process your subscription status to give you what you paid for (Art. 6(1)(b)). Crash reports rest on our legitimate interest in keeping the app working (Art. 6(1)(f)). If you join our website waitlist, we send you launch emails on the basis of your consent (Art. 6(1)(a)), which you can withdraw at any time.
Sensitive health data
Some of what you record — temperature, symptoms, medications and vaccinations — is special-category health data under GDPR Art. 9, which the law protects most strictly. We treat it that way: you enter it yourself and by saving it give your explicit consent (Art. 9(2)(a)); it lives in the EU under the same row-by-row access rules as everything else; it is shown only to you and the caregivers you invite; and it is never used to profile you, target ads, or for anything beyond showing it back to you. Delete any record, or your whole account, to withdraw that consent at any time.
Where your data lives
Data is stored in a database operated by Supabase, our hosting processor, in the European Union (AWS eu-central-1, Frankfurt, Germany). All traffic between the app and the server is encrypted (TLS). Access is enforced row-by-row in the database, so an account can only ever read or write the records of babies it owns or has been invited to. The app also keeps a small read-only copy of your recent data on your own device so it works offline; that cache is cleared when you sign out.
International transfers
Your baby's profile, health and tracking records — the heart of the app — stay in the EU with Supabase. A few limited services we rely on are run by companies based in the United States: RevenueCat (manages Bunavi Plus subscription entitlements — receives your account identifier and Apple purchase and renewal events), Resend (delivers our emails — receives your email address and the message content; its sending infrastructure runs in the EU, in Ireland), and Sentry (crash reporting, and only when it is enabled in the build). Where personal data is handled outside the EU/EEA, it is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses. Ask us at [email protected] for more detail.
How we keep it safe
Traffic between the app and our server is encrypted with TLS, and your data is encrypted at rest in our EU database. Your password is stored only as a cryptographic hash we can never read. Access is enforced row-by-row, so an account can only ever reach the babies it owns or was invited to, and our processors work under data-processing agreements on a least-privilege basis. No safeguard is ever perfect, but we take security seriously and keep it under review.
No automated decisions about you
Bunavi never makes a decision about you or your baby by purely automated means, and does no profiling. Features like optional cry detection, stool-photo analysis, and the patterns you see are there to give you information only — cry detection and stool-photo analysis run on your own device — and never produce a legal or similarly significant effect. What you do with what the app shows you is always your call.
If something goes wrong
If a breach ever affects your personal data, we will notify the Bulgarian Commission for Personal Data Protection within 72 hours of becoming aware of it, as the GDPR requires. Where a breach is likely to put your rights at risk, we will also tell you directly, without undue delay, explaining what happened and what you can do.
Who can see your data
- People you invite. Sharing is off by default. If you generate an invite code and give it to your partner, their account gains access to that baby's profile and tracking records — including sensitive health entries such as temperatures, symptoms and medications — so you choose carefully who you invite. Invite codes are single-use and expire after 7 days. To revoke a partner's access, open Settings → Manage access and remove them; a caregiver can also leave a shared baby from there. Removing a caregiver takes effect immediately. When you invite someone you are choosing to share within your own family circle; we run the platform as a single controller and are not a joint controller with the caregivers you add, and each account stays responsible for how it uses the records it can see.
- Our processors. Supabase (database and authentication); Resend (delivers our emails — sign-up confirmation, password reset, magic sign-in link, subscription and billing notices, win-back, account-deletion confirmation, and waitlist launch news — receiving your email address and the message content); RevenueCat (Bunavi Plus subscription and entitlement management); Apple and Google, only if you choose to sign in with them, to verify your identity, and Apple as the store that bills Bunavi Plus; and — only when crash reporting is enabled — Sentry (crash data). Processors act under data-processing agreements and only on our instructions.
- Nobody else. We do not sell, rent, or share your data with advertisers or any other third party.
How long we keep it
Your data is kept for as long as you keep it: records stay until you delete them, and your account stays until you delete it. Settings → Delete account permanently removes your account, every baby profile you own, and all of their records, immediately. Each baby profile belongs to the account that created it, so if you had invited caregivers, that baby and its records are removed for everyone — invited caregivers lose access too, because the data lived under your account, not theirs. If someone else needs to keep the record, export it (or ask them to) first. You don't need the app to delete your data: email [email protected] from your account's email address and we will erase your account and every record it owns within 30 days, usually much sooner. Residual copies in encrypted backups expire with the normal backup rotation, within 30 days. Two small technical items are kept separately: a short log of which system emails we have already sent you (so we don't email you twice) and, if you joined the website waitlist, your waitlist entry. Email [email protected] to have either removed.
Your rights
Under the GDPR you can ask us to access, correct, export, restrict, or erase your personal data, and you can object to processing based on legitimate interest. Most of this you can do directly in the app — records can be edited or deleted, and account deletion is built in. For a machine-readable copy of your data (or anything else), email us and we will respond within 30 days. You also have the right to lodge a complaint with a supervisory authority — in Bulgaria, the Commission for Personal Data Protection (cpdp.bg), or the authority of your own EU country.
Waitlist and launch emails
If you enter your email on bunavi.app to join our launch waitlist, we store that address (with Supabase, in the EU) and use it — with your consent (GDPR Art. 6(1)(a)) — to send a confirmation and the occasional launch update, delivered through Resend. We never sell it and use it for nothing else. You can withdraw consent and unsubscribe at any time from the link in any email or by writing to [email protected], which also removes your waitlist entry.
Children
Bunavi accounts are for parents and guardians aged 16 or older. We do not knowingly let children open accounts. Information about your baby is entered by you, stays under your control, and is used for nothing beyond showing it back to you and the caregivers you invite.
Not medical advice
Growth charts in the app display World Health Organization reference data for visual context only. The app is not a medical device and does not provide medical advice — always discuss your baby's growth and health with your pediatrician.
Changes to this policy
If this policy changes in a way that matters, we will update this page and note the new effective date at the top. Significant changes will also be announced in the app.