Privacy Policy
Last updated: June 22, 2025
1. Introduction
Welcome to Bunny Camera ("App"), operated by BunnyHop, LLC ("we," "us," or "our"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, whom we share it with, and your rights under various privacy laws (GDPR, CCPA, COPPA).
2. Controller & Contact
3. Data We Collect
We collect only the following personal data from you:
- Name (of the parent, for account creation)
- Email address (for account creation, login, and password resets)
Note: Although the App processes user photos and child age to generate stories, we do not store or retain these images or child details on our servers.
4. Purpose & Legal Basis
| Data Type | Purpose | Legal Basis | Identity Linkage |
|---|---|---|---|
| Name | Account identification & personalization | Performance of contract | Yes (linked to account) |
| Email address | Account creation, login & password reset | Performance of contract | Yes (linked to account) |
5. Third-Party Services & Sharing
1. OpenAI API
- Data shared: Encrypted image data for story generation
- Purpose: AI-powered recognition and creative story generation
2. AWS S3
- Data stored: Generated audio files
- Location: US-based S3 buckets
6. Data Storage & Retention
- Audio files: Stored in AWS S3 (US) and retained for up to 90 days, then securely deleted.
- Name & Email: Stored in our secure database and retained until you delete your account.
- No image retention: User photos and child age are processed in memory and never saved or logged.
7. Security Measures
- Encryption in transit: All network traffic is secured via HTTPS/TLS.
- Encryption at rest: User account data and audio files are encrypted on our servers.
- Access controls: Only authorized personnel may access personal data under strict confidentiality agreements.
8. Children's Privacy (COPPA)
We do not knowingly collect personal data from children under 13 without verifiable parental consent. If you believe we have inadvertently collected a child's personal data without consent, please contact us at [email protected] for prompt deletion.
9. Your Rights & Controls
- Access & Correction: View or update your name and email in the App's Account Settings.
- Deletion: Deleting your account in-app permanently removes your name, email, and associated audio files.
- Opt-Out: We do not send marketing emails; only transactional messages (e.g., password resets).
For any data requests or complaints, contact: [email protected]
10. Jurisdictional Disclosures
- GDPR (EU Residents): You have the right to access, rectify, erase, restrict, or object to processing; and data portability.
- CCPA (California Residents): You have the right to know, delete, and opt out of the sale of personal data. We do not sell personal data.
11. Changes to This Policy
We may update this Policy from time to time. We will notify you of material changes via in-App notification or email, and update the "Last updated" date above.