Privacy Policy
This policy explains what personal information the Bunot app and bunot.app ("Bunot", "we") collect, why, and the choices you have. Bunot is operated by Charisse Mae Pornea in Manila, Philippines, who is the personal information controller under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).
1. What we collect
| Information | Where it comes from | Why we use it |
|---|---|---|
| Name, email address and profile photo from Google or Apple | You, when you sign in | To create your account and show your name to your groups |
| Display name, avatar, birthday (month and day, optional) | You | To show you to your groups and remind them of your birthday |
| Exchanges you create or join: group name, dates, budget, members, exclusions | You and your organizer | To run the gift exchange and the draw |
| Who you drew | Bunot's draw | To show you your pick. Only you can see it. |
| Wishlists, items, links, notes and "I'll get this" reservations | You and people you share with | To share what you'd like to receive |
| Secret questions and answers | You and your Santa | To let your Santa ask you questions without revealing who they are |
| Delivery address and mobile number (optional) | You | To let your Santa send your gift. Shown only to your Santa, only after the draw. |
| Cash gift QR image (optional) | You | To show guests your GCash, Maya or QR Ph code. Bunot never processes or holds the money. |
| Restaurant and event choices in Dining Out and Events | You | To pick one for you |
| Device and app information, push notification token, app usage events, crash reports | Your device | To send notifications, keep the app working and improve it |
| Advertising ID (if your device settings allow it) | Your device | To show ads that keep Bunot free |
We don't collect your location, contacts or payment card details. We don't sell your personal information.
2. Who we share it with
- People in your groups. Your name, avatar and wishlist are visible to members of the exchanges you join and to anyone you share a wishlist link with.
- Service providers who run Bunot for us and may only use the data for that purpose: Supabase (database, sign-in and storage, hosted in Singapore), Google Firebase and Apple (push notifications), Google AdMob (ads), PostHog (app analytics), Sentry (crash reports), Cloudflare (website and email), and Expo (app updates).
- Shops and affiliate networks. When you tap a shop link (Shopee, Lazada, Klook), you leave Bunot. The shop and our affiliate network (Involve Asia) record the click to credit the purchase. Their own privacy policies apply there.
- Authorities, when the law requires it.
3. Ads
Bunot shows ads from Google AdMob to stay free. AdMob may use your device's advertising ID to show and measure ads. On iPhone, Bunot asks before allowing tracking. On Android, you can reset or delete your advertising ID in your device settings. Ads never appear on the draw, reveal or secret question screens.
4. Where your data is stored
Your data is stored on servers in Singapore and may be processed by our service providers in other countries. We choose providers that protect personal data to a standard comparable to the Data Privacy Act.
5. How long we keep it
We keep your information while your account is active. Exchanges are kept for 2 years after the party date so you can look back at them, unless you delete them sooner. When you delete your account, we delete your information within 30 days, except where the law requires us to keep it.
6. Your rights
Under the Data Privacy Act you have the right to be informed, to access, correct and delete your personal information, to object to its processing, to data portability, and to file a complaint with the National Privacy Commission (privacy.gov.ph). To use any of these rights, email hello@bunot.app. You can delete your account any time in the app or on our account deletion page.
7. Children
Bunot is meant for people 13 and older. Children under 13 may use Bunot only with a parent or guardian managing the account. If you believe a child under 13 has given us personal information without consent, email us and we'll delete it.
8. Security
We use encryption in transit, access controls that keep each person's draw result private, and trusted providers. No system is perfectly secure, so we also keep the information we collect to what Bunot needs.
9. Changes
If we change this policy in a way that matters, we'll tell you in the app before the change takes effect.
10. Contact
Questions or requests: hello@bunot.app