Privacy

Last updated: see the date of the app version you're using.

The short version

Hunnybun is end-to-end encrypted. Everything you and your partner put in it (names, notes, letters, moods, photos, voice notes, doodles and date cards) is encrypted on your phone before it's sent. Our server stores only scrambled data it cannot read. We have no way to see your content, and neither does anyone who could get into the server.

How it works

When you create your space, your phone makes a random secret key. It never leaves your phones unencrypted.
When your partner opens your invite link, their phone gets the key from the link itself. The key waits on our server locked with a secret that is only in the link (the part after the #, which browsers never send to a server), so the server can't open it. The link works once, within 24 hours: only send it to your partner. Any phone after that needs your OK on a phone that's already in, and both screens show the same emojis so you can be sure it's really them.
Your recovery code is that key written out. Only you have it. If you lose every phone and the code, nobody can recover your data, including us.

Location

Location sharing is off until you turn it on, and only you can share your own location.
Every share has an end time. When you stop or it runs out, it's deleted. We don't keep a history of where you've been.
Your location is encrypted on your phone like everything else, so only your partner can see it. Your partner gets a notification when you start sharing.
The "distance apart" option uses a rough position (about 1 km) and you can turn it off at any time.
Your phone only reads your location while Hunnybun is open.

What the server does see

A random id for your space, what kind of thing each item is (for example a mood or a letter, never what it says), and when it was saved (timestamps and sizes of the encrypted items).
For notifications: the push address your phone gives us. The text of each notification is end-to-end encrypted too: your partner's phone writes it and seals it, our server only passes it on, and your phone opens it to show it on the lock screen. Until a phone has version 1.1 of the Android app, the notifications it receives can still be read by our server while they're delivered.
Standard technical logs from our host (Cloudflare), such as IP addresses, kept briefly for security.

We don't use ads, trackers or analytics, and we never sell data.

Third parties

Cloudflare hosts the app and stores the encrypted data.
Google / your browser's push service delivers notifications (encrypted in transit).
OpenStreetMap shows map tiles and turns place names you type into map pins, if you use the map.
Spotify shows song details and players, if you add songs.
Google Play or Lemon Squeezy handle the payment if you subscribe to Hunnybun Plus. They receive your payment details, we don't. We only learn whether your space's subscription is active, whether it's in a free trial, and when it renews or ends.

Deleting your data

In the app: Settings → Delete everything, for both of us removes your whole space from our server immediately, including every note, photo and file. Settings → Remove Hunnybun from this phone only removes it from your phone; your partner keeps the space. To delete just one thing (a note, letter, photo, voice note, doodle, memory or card), open it and tap Delete: it's removed from our server right away, for both of you.

If you can't open the app anymore, open hunnybun.app in any browser, tap I have a recovery code and paste your code, then go to Settings → Delete everything, for both of us. Never send your recovery code to anyone, us included: it opens your whole space. Or simply stop using it: spaces with no activity for 24 months are deleted.

What gets deleted: everything in your Hunnybun space (notes, letters, moods, photos, voice notes, doodles, locations), your phones' notification addresses, your invites and your subscription status. We keep nothing from your space. Our host's short technical logs expire on their own within a few days. Our host also keeps backups of the database for up to 30 days: they only contain the encrypted data and expire on their own. Deleting doesn't cancel a subscription: cancel Hunnybun Plus in Google Play (or from your Lemon Squeezy receipt) first. Google Play and Lemon Squeezy keep their own purchase records under their policies.

Age

Hunnybun is for adults (18+) in a relationship. Some optional content is intimate in nature.

Who's responsible, and your rights

Hunnybun is run by Davide Caputo (France), who is responsible for your data under the GDPR. The little the server can see is used only to run the service you signed up for and, if you subscribe, your subscription. The host's technical logs are kept briefly to keep the service safe.

You can ask to see, correct, export or delete your data, or object to how it's used, by writing to hello@hunnybun.app. Most of it you can already do yourself: what you store can only be read on your phones, Settings → Download our memories exports it, and Settings → Delete everything, for both of us removes it. You can also complain to the CNIL, the French data protection authority, or to the one in your country.

Questions: hello@hunnybun.app.