BunnyChart is made by Hareloom Studios, a sole proprietorship based in British Columbia, Canada. We care about your privacy the same way you care about your rabbits. This policy explains, in plain language, what we collect, why, and the control you have. We do not sell your information, and we do not use it to train AI models.
What we collect
Only what we need to run the app for you:
- Your account: your email address (to sign you in) and an optional display name.
- Your rabbits: what you choose to add, such as names, breed, birthday, care notes, weights, vet visits, health records, symptom logs, medications, and photos.
- Location (only if you turn on heat alerts): we store a rounded, city-level location, never your home address. When you tap “Use my location,” your device’s GPS is sent to our server only to turn it into a city, and is not stored.
- Ask BunnyChart messages: the questions you send to the AI assistant and its replies, so the feature works and stays within fair-use limits.
- Notifications (only if you turn them on): if you enable browser notifications, we store the technical details your browser needs to receive them, used only to deliver your notifications.
- Technical and diagnostic data: basic information your browser sends (like your IP address), which we use to keep the service secure and prevent abuse, plus error reports that help us fix problems. Error reports are stripped of personal details.
Why we use it, and our legal basis
Under Canadian privacy law (PIPEDA), we only use your information for reasons a reasonable person would consider appropriate:
- To provide the app and the features you ask for (this is the core of our agreement with you).
- To keep the service safe and prevent abuse (our legitimate interest).
- To meet legal and tax obligations.
- For anything optional, only with your consent where the law requires it.
Your photos
Photos are stored privately and are only viewable within your own household. When you upload an image, we strip embedded data such as GPS location before storing it, and we serve photos through short-lived private links, never public URLs.
Ask BunnyChart and AI
When you use Ask BunnyChart, your question is sent to our AI provider, Anthropic, to generate a reply. Anthropic does not use the data sent through their API to train their models. The assistant shares general care information only and always points you back to your exotic vet for anything medical. It is not a diagnosis and not a substitute for a vet.
Who helps us run the app
We use a small set of trusted providers, each handling data only to do their job for us, never for their own purposes:
- Supabase stores your data and photos.
- Vercel hosts and serves the app.
- Anthropic powers Ask BunnyChart (United States).
- Resend sends our emails (such as care reminders and heat alerts).
- Sentry collects error reports, with personal details scrubbed out.
- Open-Meteo, BigDataCloud, and OpenStreetMap (Nominatim) turn a place into weather data for heat alerts (city-level only).
Where your data lives
Your information is stored and processed primarily in the United States, where our database, hosting, AI provider, email, and error-reporting services run. We rely on providers that protect your data with appropriate safeguards, and we take reasonable steps to ensure a comparable level of protection wherever it is handled. As a Canadian business, we stay responsible for your information under Canadian privacy law no matter where it is processed.
Shopping links
Our Shopping Spot includes affiliate links to trusted retailers (such as Amazon, Chewy, and Small Pet Select). If you click one, you leave BunnyChart for that retailer, whose own privacy policy then applies, and we may earn a small commission. The link can carry a referral tag so the retailer knows the visit came from us. We only recommend products that fit our care standards, and this never changes the advice in the app.
How long we keep it
We keep your information while your account is active. If you delete your account, we permanently remove your personal data, usually within 30 days, except for limited backup copies that age out within about 90 days, and anything we are legally required to keep. Memorial pages are kept for as long as you want them, and you can delete them at any time.
Your rights and how to use them
You are in control of your information. You can:
- See and download it. Settings has a one-click export of your care records and account information in a standard, machine-readable file.
- Correct it. Edit your account and your rabbits any time in the app.
- Delete it. Settings lets you permanently delete your account and everything in it.
- Withdraw consent for anything optional, and ask us questions about your data.
Most of this is self-serve in Settings under “Your data.” For anything else, email us at hareloomstudios@gmail.com. We respond within 30 days. If you are in Quebec, you also have the right to data portability, which our export already provides.
Cookies and analytics
We use only the essential cookie needed to keep you signed in. We do not run advertising, and we do not sell or rent your information to anyone. If we add usage analytics in the future to help improve the app, it will be anonymous and cookieless, will respect your browser’s Do Not Track setting, and we will name the provider here first.
Children
BunnyChart is for adults and is not directed at children. You must be at least 16 to create an account. In Quebec, a parent or guardian must consent for anyone under 14. We do not knowingly collect information from children, and we will delete it if we learn we have.
Keeping your data safe
We protect your information with encryption in transit, private photo storage, strict per-household access rules in our database, rate limiting against abuse, and removal of location data from photos. No system is perfectly secure, but we take this seriously.
If something goes wrong
If a data breach ever creates a real risk of serious harm to you, we will notify you and the appropriate privacy regulator (the Office of the Privacy Commissioner of Canada, and for Quebec residents the Commission d’accès à l’information du Québec) as the law requires.
Who is responsible, and how to reach us
Hareloom Studios is responsible for your personal information, and the owner acts as our privacy contact. For any privacy question, request, or concern, email hareloomstudios@gmail.com. You also have the right to complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca), or to your provincial regulator.
Changes to this policy
If we update this policy, we will change the date at the top, and for any significant change we will let you know in the app or by email before it takes effect.