Privacy Policy

Last updated 22 September 2026

Bunvi is a food diary. To work out what you ate it has to handle what you write, say and photograph. This page says exactly what happens to each of those, where it goes, and how to get rid of it.

Who is responsible

Bunvi is operated by Orman Gurbanli. For anything on this page — including a request to see, correct or delete what Bunvi holds about you — write to support@bunvi.app. A person reads it.

What Bunvi stores about you

On Bunvi's servers, tied to your account:

• Your account. The email address, name and profile picture your Apple or Google sign-in gives us, and an account identifier.
• Your food diary. Everything you log — the words you typed or dictated, the food names and the calorie and macronutrient figures Bunvi worked out, and the day each belongs to.
• Photographs of food you take or choose in the app.
• Your profile. The goals you set, the language you read Bunvi in, the country you are from and the country you are in.
• Your subscription. Whether a trial or subscription is running and the Apple transaction identifier behind it. Bunvi never sees your card — Apple handles the payment.
• Counts of AI requests per day, to enforce fair use.

Kept only on your phone, never uploaded:

• Your weight history and your water tally.
• Apple Health data. If you switch Health on, Bunvi reads the energy you burned and your weight, and writes the food you log back to Health. That exchange happens on the device. Bunvi does not copy Health data to its servers, and never uses it for advertising.
• Your settings — appearance, language, goal bar layout.

Location

Location is optional and off unless you turn it on. When it is on, Bunvi asks the phone where it is, turns that into a country, and keeps only the country. It is used to pick which country's nutrition sources to search, so a burger bought in Estonia is priced by Estonian sources rather than by the country you are from. Your coordinates never leave the phone and are not stored. Turning the switch off deletes the remembered country.

Who else sees your data

Working out what a food is means asking services that are better at it than a phone. When you log something, these receive the parts they need:

• Exa (search) receives the description of the food, in order to find nutrition sources for it.
• Google (Gemini) receives the description of the food and, when you log by photograph, the photograph, in order to identify the dish and estimate its nutrition.
• OpenAI (Whisper) receives the audio when you dictate in a language your iPhone cannot transcribe on its own — which includes Latvian, Lithuanian and Estonian. In languages the phone handles itself, the audio never leaves it.
• Supabase hosts Bunvi's database, file storage and server code, so everything in the first list above is stored on their infrastructure.
• Apple handles sign-in and every payment, and Google handles sign-in if you choose it.

None of these are given your data to sell, to advertise against, or to build a profile of you. Bunvi has no advertising, no analytics SDK and no trackers, and does not sell or share personal data.

Why Bunvi is allowed to do this

Under the GDPR: to give you the service you asked for (a contract), for the optional parts you switch on — location, the microphone, Health, photographs — your consent, which you can withdraw at any time in Settings, and for keeping the service working and paid for, a legitimate interest.

How long it is kept

Your diary stays until you delete it or delete your account. Deleting your account removes your profile, your diary and your photographs from Bunvi's servers.

One thing deliberately survives: if your account used its free trial, a one-way coded value derived from your sign-in identity remains, so that deleting an account and signing straight back in does not grant an endless series of free trials. It contains no email address, no name, no identifier that can be turned back into you, and no part of your diary.

Your rights, and how to use them

You can get a copy of your data, correct it, delete it, or object to how it is used. Two of these are buttons in the app:

• Delete Account — Settings → Delete Account. It removes the account and its contents from the server, not just from the phone.
• Correct anything — tap a line in your diary and rewrite it.

For a copy of your data or anything else, write to support@bunvi.app. If you think Bunvi has handled your data badly you may complain to your national data protection authority.

Children

Bunvi is not intended for children under 13, and accounts are not knowingly created for them.

Where your data is handled

Bunvi's servers and the services listed above may process data outside your country, including in the United States, under the transfer safeguards those providers offer.

Changes

If this policy changes, the date at the top changes with it, and a significant change will be announced in the app.