BunnyChart is made by Hareloom Studios, a sole proprietorship based in British Columbia, Canada. We care about your privacy the same way you care about your rabbits. This policy explains, in plain language, what we collect, why, and the control you have. We do not sell your information, and we do not use it to train AI models.
What we collect
Only what we need to run the app for you:
- Your account: your email address (to sign you in) and an optional display name.
- Your rabbits: what you choose to add, such as names, breed, birthday, care notes, weights, vet visits, health records, symptom logs, medications, and photos.
- Location (only if you turn on heat alerts): we store a rounded, city-level location, never your home address. When you tap “Use my location,” your device’s GPS is sent to our server only to turn it into a city, and is not stored.
- Ask BunnyChart messages: the questions you send to the AI assistant and its replies, so the feature works and stays within fair-use limits.
- Notifications (only if you turn them on): if you enable browser notifications, we store the technical details your browser needs to receive them, used only to deliver your notifications.
- Technical and diagnostic data: basic information your browser sends (like your IP address), which we use to keep the service secure and prevent abuse, plus error reports that help us fix problems. Error reports are stripped of personal details.
Why we use it, and our legal basis
Under Canadian privacy law (PIPEDA), we only use your information for reasons a reasonable person would consider appropriate:
- To provide the app and the features you ask for (this is the core of our agreement with you).
- To keep the service safe and prevent abuse (our legitimate interest).
- To meet legal and tax obligations.
- For anything optional, only with your consent where the law requires it.
Your photos
Photos are stored privately and are only viewable within your own household. When you upload an image, we strip embedded data such as GPS location before storing it, and we serve photos through short-lived private links, never public URLs.
Ask BunnyChart and AI
When you use Ask BunnyChart, your question, along with relevant care context about your rabbit (such as a symptom, weight, or note you are asking about), is sent to our AI provider, Anthropic, to generate a reply. Anthropic does not use the data sent through their API to train their models. The assistant shares general care information only and always points you back to your exotic vet for anything medical. It is not a diagnosis and not a substitute for a vet.
Who helps us run the app
We use a small set of trusted providers, each handling data only to do their job for us, never for their own purposes:
- Supabase stores your data and photos.
- Vercel hosts and serves the app, and provides a simple, cookieless count of page visits.
- Anthropic powers Ask BunnyChart (United States).
- Resend sends our emails (such as care reminders and heat alerts).
- Sentry collects error reports, with personal details scrubbed out.
- PostHog measures how the app is used, so we can improve it (European Union). It runs without tracking cookies, does not collect your IP address, and never receives your rabbits’ health details or your email.
- Open-Meteo, BigDataCloud, and OpenStreetMap (Nominatim) turn a place into weather data for heat alerts (city-level only).
Where your data lives
Your information is stored and processed primarily in the United States, where our database, hosting, AI provider, email, and error-reporting services run. Our usage-analytics data is processed in the European Union (Germany) by PostHog. We rely on providers that protect your data with appropriate safeguards, and we take reasonable steps to ensure a comparable level of protection wherever it is handled. As a Canadian business, we stay responsible for your information under Canadian privacy law no matter where it is processed.
Shopping links
Our Shopping Spot includes affiliate links to trusted retailers (such as Amazon, Chewy, and Small Pet Select). If you click one, you leave BunnyChart for that retailer, whose own privacy policy then applies, and we may earn a small commission. The link can carry a referral tag so the retailer knows the visit came from us. We only recommend products that fit our care standards, and this never changes the advice in the app.
How long we keep it
We keep your information while your account is active. If you delete your account, we permanently remove your personal data, usually within 30 days, except for limited backup copies that age out within about 90 days, and anything we are legally required to keep. Memorial pages are kept for as long as you want them, and you can delete them at any time.
Your rights and how to use them
You are in control of your information. You can:
- See and download it. Settings has a one-click export of your care records and account information in a standard, machine-readable file.
- Correct it. Edit your account and your rabbits any time in the app.
- Delete it. Settings lets you permanently delete your account and everything in it.
- Withdraw consent for anything optional, and ask us questions about your data.
Most of this is self-serve in Settings under “Your data.” For anything else, email us at hareloomstudios@gmail.com. We respond within 30 days. If you are in Quebec, you also have the right to data portability, which our export already provides.
Cookies and analytics
We use only the essential cookie needed to keep you signed in. We do not run advertising, and we do not sell or rent your information to anyone.
To understand how the app is used and to make it better, we use PostHog, a privacy-respecting analytics tool. It records simple usage events, like which pages and features you open and the steps you take through the app, so we can see what is working and what to improve. It runs without tracking cookies, it does not follow you across other websites, and we have turned off collection of your IP address. Before you sign in, this activity is not linked to you. After you sign in, it is tied only to your account so we can see how features are used. We never send your rabbits’ health details, your photos, or your email into analytics. Your care records stay in your private account and never go to PostHog. We also use Vercel’s built-in, cookieless count of page visits.
This usage data is processed in the European Union (Germany) and kept for a limited time, then deleted. If you would rather not be included, your browser’s Do Not Track or Global Privacy Control setting is honored automatically, and you can also email us any time to opt out.
Children
BunnyChart is for adults and is not directed at children. You must be at least 16 to create an account. In Quebec, a parent or guardian must consent for anyone under 14. We do not knowingly collect information from children, and we will delete it if we learn we have.
Keeping your data safe
Your rabbits’ health, symptom, and vet records are sensitive personal information, and we treat them that way: stored privately, accessible only within your own household, and never sold or shared.
We protect your information with encryption in transit, private photo storage, strict per-household access rules in our database, rate limiting against abuse, and removal of location data from photos. No system is perfectly secure, but we take this seriously.
If something goes wrong
If a data breach ever creates a real risk of serious harm to you, we will notify you and the appropriate privacy regulator (the Office of the Privacy Commissioner of Canada, and for Quebec residents the Commission d’accès à l’information du Québec) as the law requires.
Who is responsible, and how to reach us
Hareloom Studios, a sole proprietorship registered in British Columbia, Canada (CRA Business Number 777601576, BC Registries number FM1108566) and located in Delta, British Columbia, is responsible for your personal information, and the owner acts as our privacy contact. For any privacy question, request, or concern, email hareloomstudios@gmail.com. You also have the right to complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca), or to your provincial regulator.
Changes to this policy
If we update this policy, we will change the date at the top, and for any significant change we will let you know in the app or by email before it takes effect.