Privacy policy

Who is responsible

Hunny Bunny is run by an individual in India. We decide how your data is used, so under data protection laws such as India's Digital Personal Data Protection Act and the EU and UK GDPR, we are the "data fiduciary" or "controller". For anything about your data, write to support@hunnybunny.app.

The short version

• We never record or store your video or audio.
• Text chat with strangers is not stored. Messages between friends are stored so they reach each other, for up to a year.
• We don't sell your data, and we don't use analytics or tracking tools.
• We don't save your network address (IP address) in our database.
• You can delete your account and data yourself, at any time, from Account and security in your profile.

What we collect and why

• Your Google account: email address, Google account ID, first name and profile photo (until you change them). Why: to give you an account.
• Your birth date and gender: asked once, at your first login, filled in from your Google account if it shares them, and then fixed. The full birth date is kept on your account and shown only to you, with your age and location, in your profile. People you meet see your age, never your birth date or gender. Why: to keep Hunny Bunny for adults, and for the age and gender filters.
• Your device: a random device ID in a signed cookie, the gender, birth year, country and language on it, and when it was last used. Why: to run your chats and settings, and to make suspensions stick.
• Your profile, if you fill it in: a name, an about section and a photo. Strangers see these, your age, flag and city during a chat; in anonymous mode they see "Anonymous" and your age, flag and city, with no name, photo or about. Your gender is never shown. Why: to show the people you meet who you are.
• Your 9-digit profile ID, and when you were last online, which your friends can see. Why: so friends can find you and see if you're around.
• Friends: your friends, friend requests, the messages between you and each friend, a call log, and friend streaks. Why: to deliver messages and calls between friends.
• Meetings: for a week after a one-to-one chat between two logged-in people, a record that you met, so either of you can send a friend request from your history.
• Blocks: the people you blocked, with the name, country and photo they showed then, so your blocked list can show who they were.
• Reports: who reported whom, the reason, the time, and a scrambled code made from the reporter's network address (not the address itself). It lets us spot many reports coming from one place.
• Suspensions: the device, the account, a scrambled code made from the account's email, the reason and the end date. Why: so a suspension still holds if someone deletes their account and comes back.
• Appeals: what you wrote, the email address you gave for a reply if any, and the decision.
• Verified tags, if you add one: the tag (such as iitd.ac.in), whether people with the same tag may find you, and a scrambled code made from the address so it backs only one account. The address itself is not kept.
• Plus: the order, plan, amount, date and payment reference. Why: to give you the pass, to handle refunds, and for tax and accounting records.
• Moderator actions: what a moderator did and to which account, so decisions can be checked later.
• Your consent: which version of the terms, this policy and the guidelines you accepted, and when.

What we never collect or keep

• Video and audio. Calls go straight between browsers or through our encrypted relay, and are never recorded.
• Text chat with strangers during a video chat. It is checked, passed along live and dropped.
• Video frames used by the safety checks. The checks run in your own browser, and only the fact that something was found is sent to a moderator.
• Your exact position. If you allow location, the position your browser shares, rounded to about 100 metres, is turned into a town or city on our server and then dropped. It is never saved, and never given to anyone.
• Your card, bank or UPI details.
• Your interests, filters and match history. They are kept in your own browser; the server uses your interests and filters during a search and doesn't save them.

Your network address and location

• Location, only if you allow it: when the chat opens, your browser asks for it along with your camera and microphone, and you can allow it later from the Location row in your profile. Your browser then sends its position, rounded to about 100 metres, with how accurate it is, to our server, which finds the town or city you are in from its own copy of the GeoNames list of places, updated daily. You can turn it off at any time in your browser's settings for this site, and the place then comes from your network address again.
• Without it, your place comes from your network address: Cloudflare, which carries all traffic to the site, tells our server the country, state and city it puts the address in, and our own copy of the DB-IP database fills in a state or city Cloudflare leaves out. These guesses are often wrong, sometimes by a whole city.
• The people you meet see your flag and city (in anonymous mode too, and only the flag in invisible mode). Neither your position, your address nor the place found is saved in our database, and our website logs don't contain addresses.
• Our server keeps a network address in memory for a short time to limit abuse, such as shutting out an address that sends hundreds of bad requests for half an hour.
• The video relay records some connection attempts, with network addresses, in the server's system log, which is overwritten as it fills up. We only read it to fix problems with the relay.
• Calls connect directly between the two browsers when the networks allow it, which is how video calls work everywhere. In a direct call, the other person's browser can see your network address, and someone with technical skill could find it. When a direct connection isn't possible, the call goes through our relay and your address stays hidden from them.

Automatic checks and decisions

The safety checks described in the terms run automatically: the video checks in your browser, and the text check on our server. Reports from several people in a short time suspend a device automatically for 24 hours. Every suspension can be appealed and is reviewed by a person, and a moderator looks at every case the checks send. No automatic check decides anything about you beyond hiding video, holding back a message, or a suspension that a person reviews on appeal.

What other people see

The people you meet see your video and hear your audio live, and see your profile, age, flag and city as described above. They could record their screen without telling you, even though the guidelines forbid it. Don't show anything on camera that you wouldn't want kept.

Who else handles your data

• Contabo GmbH (Germany) hosts our server in Germany. Everything we store, including backups, is on that server.
• Cloudflare, Inc. (United States, with servers worldwide) carries all traffic to hunnybunny.app and protects it from attacks, and runs the extra bot check (Turnstile) on new devices. It sees your network address and browser details as traffic passes through, and may set short-lived security cookies.
• Google LLC (United States): you log in with Google, which tells us your email address, Google account ID, first name, profile photo, and, if your Google account shares them, your birthday and gender. Google handles the login under its own privacy policy.
• Google also runs the STUN server your browser contacts when a call starts, to learn its own public network address so the call can connect. Google sees that address at that moment.

Sharing with authorities

We give information to the police, courts or other authorities when the law requires it, or when we believe in good faith that it is needed to protect someone from serious harm, including to report sexual content involving children. We don't share your data with anyone else, and we don't sell it.

If Hunny Bunny changes hands

If Hunny Bunny is sold, merged or passed to someone else, your data goes with it to the new owner, who must keep to this policy. We will tell you in the app before that happens, so you can delete your account first if you want.

Numbers that don't identify anyone

We publish some totals, such as the weekly safety numbers on the Safety Center (suspensions, reports reviewed). They are counts only and never say who.

Emails from us

We don't send marketing emails or newsletters. We only write to you to answer something you sent us, such as an appeal or a privacy request, using the address you gave for it.

Links to other sites

This policy covers hunnybunny.app only. Pages we link to, such as Google, the payment company or a helpline, have their own privacy policies.

Cookies and storage on your device

• nk_s: keeps your device logged in. It lasts up to 400 days and is renewed on each visit.
• nk_oauth and nk_pending: used for a few minutes while you log in with Google.
• nk_u: set for a year if someone on this browser said they were under 18, so the browser stays locked.
• In your browser's own storage: your preferences, filters and interests, match history, Data saver setting, whether you accepted the terms, whether you have seen the swipe hint, and whether you hid the Plus banner.
• All of these are needed for the site to work, so we don't ask for consent to them. There are no advertising or analytics cookies.

How long we keep it

• Profile photos: deleted as soon as you change or remove them, or delete your account.
• A device that never starts a chat: 7 days. Any other device that isn't logged in: 100 days after it was last used, unless it is suspended. A logged-in device: until you log out, delete your account or log in on another device (an account is logged in on one device at a time).
• Your account: until you delete it. When you do, you are logged out everywhere at once and the account is deleted 30 days later, on the 31st day, by itself; logging in again before then keeps it. An account with no devices and no running pass is deleted after a year.
• Messages between friends: one year, or until either of you unfriends, blocks or deletes their account.
• Records of meetings: 7 days. Blocks: one year.
• Reports: until a moderator has looked at them, then 180 days. Suspensions: 90 days after they end. Moderator actions: two years.
• Appeals: kept, so that a later appeal can be judged with the earlier ones. You can ask us to delete yours once the suspension has ended.
• Unpaid orders: 30 days. Paid orders: as long as tax and accounting law requires, even after you delete your account.
• Backups of the database are kept for 14 days, on the same server, so something you delete can stay in a backup until then.

Why we're allowed to use it

Under the EU and UK GDPR, we use your data because it is needed to provide the service you asked for (your account, chats, friends and Plus), because of our legitimate interest in keeping the service safe and working (age checks, reports, suspensions, the automatic checks, abuse limits and security), and because the law requires some of it (tax records, and answering lawful requests). Under India's Digital Personal Data Protection Act, you give consent when you create an account and accept this policy, and you can withdraw it at any time by deleting your account; some data is kept after that as described above, where the law allows or requires it.

Your rights

• See and change: your name, about section and photo can be changed at any time in Edit profile. Your birth date and gender can't be changed in the app after your first login; if one is wrong, write to us. You can ask us for a copy of the data we hold about you.
• Delete: under Account and security in your profile you can delete your preferences, history and account, including your email address. You are logged out on every device at once, and the account is deleted 30 days later. Reports and suspensions are kept as described, so deleting data can't be used to escape them.
• Object, restrict or move: you can ask us to stop or limit a use of your data, or to give you your data in a common format.
• Withdraw consent and nominate: under India's data protection law you can withdraw consent, and nominate someone to act for you if you die or can't act yourself.
• To use any of these, write to support@hunnybunny.app from the email address of your account. We reply within 30 days. We may ask you to confirm it is you.
• Complain: you can complain to your data protection authority, such as the Data Protection Board of India, the data protection authority in your EU country, or the UK Information Commissioner's Office. Please contact us first so we can try to help.

If you live in the United States

We don't sell or share personal information for advertising, and we don't use it for anything except running Hunny Bunny. Residents of California and other states with privacy laws can ask to know, correct or delete their personal information as described above, and we won't treat you differently for using these rights.

Data outside your country

Our server is in Germany, in the European Union. If you use Hunny Bunny from another country, your data goes there, and through Cloudflare's network, which has servers in many countries. Google and Cloudflare also process data in the United States, under their own terms, which use the European Commission's standard contractual clauses for data leaving the EU.

Children

Hunny Bunny is only for adults. If someone says they are under 18, or Google says so, no account is kept and the browser is locked. If we learn that an account belongs to someone under 18, we suspend it, and they or a parent can ask us to delete its data. We keep only what we need to stop them coming back or to report a crime.

Security

Everything between your browser and our server is encrypted, and calls are encrypted end to end between the browsers, including through the relay. Cookies are signed so they can't be forged, the database is reachable only from the server itself, and only the person who runs Hunny Bunny has access to it. No system is perfectly secure. If a breach puts your data at risk, we will tell you and the authorities as the law requires.

Changes to this policy

If we change what we collect or why, we will update this page and change the date below, and tell you in the app before a change that takes away a protection applies.