Who we are
Bunch is a family communications app. It is run by [Company name], [registered address], Ireland ("we", "us"). We are the "data controller" for the personal data described here.
Questions about privacy: [privacy email address, for example privacy@yourdomain.ie]
What Bunch is for
Bunch brings family chat, calls, a shared calendar, music, a family map and other everyday tools into one simple app, so families can stay in touch with older relatives. A family has an organiser who sets it up and invites others.
What information we collect
Information you give us
- Your name, the name you want to be shown as, and your email address.
- Your password (stored securely, never in readable form).
- Optional profile details: a mobile number, a home address, a profile photo, and how you are related to the family.
- Messages, photos, voice messages and other things you share in Family Chat.
- Calendar events you create, including who is looking after them and reminders.
- Settings you choose, such as which tiles show on your Home screen.
Information created when you use Bunch
- Push notification details for your device, so we can send you reminders, messages and call alerts.
- Call information: who started a call, who was invited and when. We do not record calls.
- Check-in replies: whether someone said they were okay and when. No location is shared with a check-in.
- Basic technical information, such as your device type and when you last used the app.
Location
- Bunch does not track your live location. If you switch on "Show my home on the Family Map", other members of your family can see the home address you saved, on a map. Only you can switch this on or off.
If you use the "Draw me" avatar
- The photo you upload is sent to an AI image service to create the drawing. We keep only the avatar you choose. [Confirm: we do not keep the original photo if you choose the drawing.]
Payment information
- If you subscribe, payment is handled by our payment provider, Stripe. We never see or store your full card details. We receive confirmation of whether the subscription is active. [Confirm once Stripe is connected.]
Why we use your information
- To run the app and provide the features you ask for (our contract with you).
- To send notifications you have turned on.
- To keep Bunch safe and working, and to fix problems.
- To manage subscriptions and payments.
- To meet legal obligations.
We do not sell your information. We do not use your messages, photos or calls for advertising.
Who can see your information
- Your family. Members of the family you belong to can see the things that are shared with them: chats you post in, the shared calendar, the names and photos of other members, and the home address of anyone who has chosen to show it on the map. Private one-to-one chats and private groups are visible only to the people in them.
- The family organiser. The organiser can manage members, invites and some settings for the family.
- Our service providers, who process data for us under contract:
- Hosting, database and file storage: [Lovable Cloud / Supabase / Firebase: confirm provider and region]
- Push notifications: [Firebase Cloud Messaging]
- Voice and video calls: Daily (daily.co)
- Maps and address lookup: Google Maps
- AI drawing of avatars: [Gemini via Lovable AI: confirm]
- Payments: Stripe
- Email: [email provider, if used]
- Authorities, where the law requires it.
Where your data is stored
Your data is stored with our hosting providers in [region, for example the EU]. Some of our providers may process data outside the European Economic Area. Where they do, we rely on approved safeguards, such as the EU's standard contractual clauses. [Confirm with providers.]
How long we keep it
- Your account details and content are kept while your account is open.
- If you delete your account, we delete your personal data within [30 days], except where we must keep something by law.
- Call and check-in records are kept for [90 days]. [Confirm.]
- Backups are deleted on a rolling basis within [35 days]. [Confirm.]
Your rights
Under the GDPR you can ask us to:
- show you the information we hold about you,
- correct it,
- delete it,
- restrict or object to how we use it,
- give you a copy you can take elsewhere.
You can delete your own account in Me. For anything else, email [privacy email]. We will reply within one month. You also have the right to complain to the Data Protection Commission (dataprotection.ie).
Children
Bunch is for families, so children may appear in a family space. A parent or guardian, usually the organiser, is responsible for any child's information shared in Bunch and for agreeing to this policy on their behalf. We do not knowingly let children under [16] create their own accounts. [Confirm age and consent approach with a solicitor.]
Older relatives and care
Some families use Bunch to stay in touch with older relatives. Bunch is not a medical or emergency service. Do not rely on it to call for help or to monitor someone's safety.
Security
We use access controls so that only members of a family can see that family's information, and we protect data in transit and at rest. No system is perfectly secure. If a breach affects you, we will tell you and the regulator as the law requires.
Changes
We may update this policy. If we make an important change, we will tell you in the app.