Privacy Policy

Last updated 4 November 2026

Bunvi is a food diary. To work out what you ate it has to handle what you write, say and photograph. This page says exactly what happens to each of those, where it goes, and how to get rid of it.

Who is responsible

Bunvi is operated by Orman Gurbanli. For anything on this page — including a request to see, correct or delete what Bunvi holds about you — write to support@bunvi.app. A person reads it.

What Bunvi stores about you

On Bunvi's servers, tied to your account:

• Your account. The email address, name and profile picture your Apple or Google sign-in gives us, and an account identifier.
• Your food diary. Everything you log — the words you typed or dictated, the food names and the calorie and macronutrient figures Bunvi worked out, the workouts and runs you write down, and the day each belongs to.
• Photographs of food you take or choose in the app.
• Your profile. What you tell Bunvi when you set it up — sex, date of birth, height, current and goal weight, how active you are and anything else you choose to add — along with the goals you set, the language you read Bunvi in, the country you are from and the country you are in.
• Workouts from Apple Health. If Health and Import Workouts are both on, each workout Bunvi brings in — the activity, when it started and ended, its distance, active energy, elevation climbed, and average and highest heart rate — is saved to your diary so it appears on the day you did it. Turn Import Workouts off in Settings and no more are brought in.
• Your subscription. Whether a trial or subscription is running, when it renews or ends, and the Apple transaction identifier behind it. Bunvi never sees your card — Apple handles the payment.
• Counts of AI requests per day, to enforce fair use.

Kept only on your phone, never uploaded:

• Your weight history and your water tally.
• Everything else from Apple Health. The weight Bunvi reads from Health, and the food it writes back there, stay on the device. Only the workouts described above are saved to your account. Health data is never sold, never used for advertising, and never sent to the AI services below.
• Your settings — appearance, language, goal bar layout.

If you joined the waitlist

Before Bunvi was on the App Store, the website at bunvi.app asked for an email address so it could tell you when it was. The waitlist is closed now. If you gave an address, Bunvi still holds, on its servers:

• The email address, and the time you joined.
• Which form on the page you used, and your browser's language, so the email can be written in it.
• A one-way code derived from your internet address, used only to stop one network signing up hundreds of addresses. Your internet address itself is not stored, and the code cannot be turned back into it.

The address is used for one thing: to tell you Bunvi is available. It is not sold, not shared with anyone and not added to any other list. To have it deleted, write to support@bunvi.app. Your browser may also still hold a note that you joined; that note stays in your browser and never reaches Bunvi.

Location

Location is optional and off unless you turn it on. When it is on, Bunvi asks the phone where it is, turns that into a country, and keeps only the country — it becomes the country you are in on your profile, which you can change at any time in Settings. It is used to pick which country's nutrition sources to search, so a stew ordered in Belgium is checked against Belgian sources rather than those of the country you are from. Your coordinates never leave the phone and are not stored. Turning the switch off stops Bunvi asking the phone and forgets the phone's copy of the country; the country on your profile stays until you change it.

Who else sees your data

Working out what a food is means asking services that are better at it than a phone. When you log something, these receive the parts they need:

• Exa (search) receives the description of the food, in order to find nutrition sources for it.
• Google (Gemini) receives the description of the food and, when you log by photograph, the photograph, in order to identify the dish and estimate its nutrition.
• OpenAI (Whisper) receives the audio when you dictate in a language your iPhone cannot transcribe on its own — which includes Latvian, Lithuanian and Estonian. In languages the phone handles itself, the audio never leaves it.
• Supabase hosts Bunvi's database, file storage and server code, so everything in the first list above is stored on their infrastructure.
• Apple handles sign-in and every payment, and Google handles sign-in if you choose it.
• RevenueCat records your App Store purchases — which plan, when it started, renewed, was cancelled or refunded — against a random account identifier, so Bunvi can confirm a subscription and restore it on a new phone, and so Bunvi can see totals such as how many people subscribe. It never receives your name, your email address, your diary or your photographs, and it never sees your card.

None of these are given your data to sell, to advertise against, or to build a profile of you. Bunvi has no advertising, no analytics SDK and no trackers, and does not sell or share personal data.

Why Bunvi is allowed to do this

Under the GDPR: to give you the service you asked for (a contract), for the optional parts you switch on — location, the microphone, Health, photographs — your consent, which you can withdraw at any time in Settings, and for keeping the service working and paid for, a legitimate interest. For the waitlist, your consent, given by submitting the form and withdrawn by asking to be taken off.

How long it is kept

Your diary stays until you delete it or delete your account. Deleting your account removes your profile, your diary and your photographs from Bunvi's servers, and asks RevenueCat to delete its record of your purchases.

One thing deliberately survives: if your account used its free trial, a one-way coded value derived from your sign-in identity remains, so that deleting an account and signing straight back in does not grant an endless series of free trials. It contains no email address, no name, no identifier that can be turned back into you, and no part of your diary.

Your rights, and how to use them

You can get a copy of your data, correct it, delete it, or object to how it is used. Two of these are buttons in the app:

• Delete Account — Settings → Delete Account. It removes the account and its contents from the server, not just from the phone.
• Correct anything — tap a line in your diary and rewrite it.

For a copy of your data or anything else, write to support@bunvi.app. If you think Bunvi has handled your data badly you may complain to your national data protection authority.

Children

Bunvi is not intended for children under 13, and accounts are not knowingly created for them.

Where your data is handled

Bunvi's servers and the services listed above may process data outside your country, including in the United States, under the transfer safeguards those providers offer.

Changes

If this policy changes, the date at the top changes with it, and a significant change will be announced in the app.