BunnyHop AI ("we", "our", "us") is an AI-powered companion and chat app operated by Aviral Srivastava, a sole proprietorship registered in India. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have. By using BunnyHop AI — whether through our iOS app, Android app, or website at getbunnyhop.com — you agree to the practices described here.
This policy applies to all users globally, including users in the European Union (GDPR), California (CCPA/CPRA), and India (DPDP Act, 2023).
1. Who Can Use BunnyHop AI
BunnyHop AI is intended exclusively for users who are 17 years of age or older. We do not knowingly collect personal data from anyone under 17. If we discover that a user is under 17, we will immediately delete their account and all associated data.
If you are a parent or guardian and believe your child has used BunnyHop AI, contact us immediately at getbunnyhopapp@gmail.com.
2. Data We Collect
a. Data You Provide
- Name (first name, as entered during onboarding)
- Age (entered during onboarding — used to enforce 17+ requirement)
- Bio and self-description (optional, entered during onboarding)
- Interests and intent (selected during onboarding to personalise matches)
- Google user ID and email address (for Android users who sign in with Google Sign-In)
- Apple user ID and email address on first sign-in only (for iOS users who sign in with Apple Sign-In)
- Email address (only if you sign up via our website's early access form)
b. Data Generated by Your Use
- Device ID — a legacy identifier for accounts created before Google/Apple Sign-In was introduced; stored in device secure keychain for backwards compatibility
- JWT authentication token — generated server-side and stored securely on your device
- Conversation history — which AI characters you've started conversations with, and all messages exchanged, stored in our database to power persistent memory
- Conversation memories — structured summaries (facts, preferences, and moments you've shared) extracted periodically from your conversation history to power the Memory Panel feature. Generated using Together AI's Llama model and stored in our database.
- In-app purchase records — which products were purchased, timestamps, and whether you have an active premium entitlement (processed via Apple IAP / Google Play Billing / RevenueCat)
- Push notification token — used to deliver message notifications to your device
c. Technical & Usage Data
- Device type, operating system, and app version
- IP address (logged transiently by our server infrastructure on Railway)
- App usage patterns (e.g., screens visited, features used) — collected only in aggregate
- Crash logs and error reports
d. Data We Do NOT Collect
- No photos or camera access
- No location data (GPS or otherwise)
- No contacts or address book
- No social media profiles or linked accounts
- No payment card numbers (all payments handled entirely by Apple / Google)
3. How We Use Your Data
| Purpose | Data Used | Legal Basis |
|---|
| Authenticate your account | Device ID, JWT token | Contractual necessity |
| Personalise AI character discovery | Name, age, interests, bio, intent | Contractual necessity |
| Power AI conversations and memory | Conversation history | Contractual necessity |
| Extract and display conversation memories (Memory Panel) | Conversation history, processed via Together AI's Llama model | Contractual necessity |
| Process in-app purchases | Purchase records via Apple/Google/RevenueCat | Contractual necessity |
| Send push notifications | Push token | Consent (you can withdraw anytime in Settings) |
| Proactive character messages | Conversation history, last message timestamp | Legitimate interest (re-engagement) |
| Improve the app | Aggregate usage data, crash logs | Legitimate interest |
| Early access waitlist | Email address | Consent |
| Legal compliance | Any data required by law | Legal obligation |
We do not sell your personal data to any third party. Ever.
4. AI Conversations — Important Notice
All characters on BunnyHop AI are fictional AI personas. They are not real people. Conversations are powered by Meta's Llama model via Together AI, which processes your messages on Together AI's servers to generate responses.
Your conversation history is stored in our database (PostgreSQL on Railway) and sent to Together AI with every message to maintain the character's memory of your past conversations. Additionally, every few messages, we use Together AI's Llama model to extract structured memories from your conversation — such as your interests, things you've shared, and notable moments — which are stored in our database and displayed in the Memory Panel within the app. This extraction is a separate inference call to Together AI's servers.
Together AI's use of this data is governed by Together AI's Privacy Policy.
Do not share sensitive personal information — such as your full legal name, financial details, or medical information — in conversations with AI characters.
5. Third-Party Services
We use the following third-party services, each with their own privacy policy:
Hosts our backend server and PostgreSQL database. Your data is stored on Railway's infrastructure.
Hosts AI character images served via CDN.
Powers AI character conversations and Memory Panel extraction. Your messages are sent to Together AI's servers to generate responses. Together AI's Llama model is also used periodically to extract structured memories from conversation history.
Manages in-app purchase entitlements and subscription status across Apple and Google.
Processes payments for iOS users. Apple handles all billing and payment data.
Processes payments for Android users. Google handles all billing and payment data.
Authenticates Android users. Google user ID and email are shared with BunnyHop on sign-in.
Authenticates iOS users. Apple user ID and email (on first sign-in) are shared with BunnyHop.
Used to build and distribute the app. May collect crash diagnostics.
6. Data Retention
- Account data — retained while your account is active
- Conversation history — retained while your account is active; required to power AI memory
- Purchase records — retained for 7 years to comply with Indian tax law (GST)
- Early access emails — retained until you request deletion
- On account deletion — we delete all messages, conversations, memories, purchases, and user records immediately. Device ID and JWT token are cleared from your device.
7. Your Rights
Depending on where you live, you may have some or all of these rights:
- Right to access — request a copy of the data we hold about you
- Right to correction — update your name, bio, interests, or intent directly in the app's Profile screen
- Right to deletion — delete your account via Profile → Delete Account in the app, or email us
- Right to data portability — request your conversation history in a machine-readable format
- Right to object — opt out of push notifications anytime in Settings
- Right to withdraw consent — for early access emails, reply with "unsubscribe" to any email
To exercise any right, email getbunnyhopapp@gmail.com. We respond within 30 days.
8. Data Security
- All API communication uses HTTPS/TLS encryption
- Your Device ID and JWT token are stored in your device's secure keychain (iOS Keychain / Android Keystore) — not in plain AsyncStorage
- Our server requires a secret JWT signing key at startup — no insecure defaults
- Database access is restricted to our backend server; no public database exposure
- We do not store payment card numbers — all payments flow through Apple or Google
No system is 100% secure. If you discover a security vulnerability, please report it to getbunnyhopapp@gmail.com.
9. International Data Transfers
Our servers are hosted on Railway infrastructure, which may be located outside India. By using BunnyHop, you consent to your data being transferred to and processed in countries where our service providers operate. We ensure these transfers are covered by appropriate safeguards (standard contractual clauses or equivalent mechanisms where required).
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top and, where appropriate, notify users via push notification or email. Your continued use of BunnyHop after changes take effect constitutes acceptance of the updated policy.
11. Contact
For privacy-related questions or requests:
