Privacy Policy
Bunkr is built so that we know as little about you as possible. This policy explains exactly what data the app touches, where it goes, and what never leaves your phone. It applies to the Bunkr iOS app, operated by Jayenderprises ("Bunkr," "we," "us").
The short version
- No accounts. You never create a login, and we never collect your name, email address, or contacts.
- Your app choices stay on your phone. Which apps you block is handled by Apple's Screen Time system and is never visible to us.
- Mission photos are checked once, then discarded. They are never stored, never used for training, and never used for anything except deciding your mission.
- No ads, no tracking, no sale of data. We have nothing to sell because we keep almost nothing.
What stays on your device
The core of Bunkr runs entirely on your iPhone:
- Blocked apps and categories. Your selections are managed by Apple's Screen Time (Family Controls) framework. Apple seals this data on the device: Bunkr's servers cannot read which apps you block, and neither can we.
- Schedules, sessions, streaks, and activity history. Stored locally on your phone. Deleting the app deletes them.
- Settings and diagnostics logs. Kept on the device to help you (and us, only if you choose to share a screenshot) understand what the app did.
What we process on our server
One feature requires a server: AI verification of missions. When you complete a mission by taking a photo, the following happens:
- The photo is sent over an encrypted connection (HTTPS) to our verification service.
- Our service forwards it to Anthropic's AI vision API with a single question: does this image show the required item or action? Anthropic processes the image to answer and does not use it to train models.
- The photo is not saved by our service. Once the answer comes back, the image is gone.
- We keep a cryptographic fingerprint (a SHA-256 hash) of the image for up to 30 days. A fingerprint cannot be turned back into a photo; it exists only to stop the same image from being replayed to pass future missions.
Our service also applies rate limiting to prevent abuse, which involves temporarily processing standard connection information (such as an IP address). This information is used only for abuse prevention.
Subscriptions
Payments are handled by Apple through your App Store account. We never see your payment details. To know whether your subscription is active, we use RevenueCat, a subscription-management service, which identifies your app installation by a random anonymous ID — not by your name, email, or Apple ID. Apple's handling of your purchase is governed by Apple's own privacy policy, and RevenueCat's processing is governed by theirs.
What we don't do
- No advertising, and no advertising identifiers.
- No analytics that profile you.
- No selling, renting, or sharing of personal information with data brokers.
- No reading your photo library — Bunkr only receives the single photo you take inside a mission.
Data retention
- Mission photos: not retained.
- Image fingerprints: up to 30 days, then deleted automatically.
- Everything on your device: retained until you delete it or delete the app.
- Anonymous subscription records: retained while needed to operate your subscription.
Your choices and rights
- You can stop all photo processing by not using photo missions.
- You can delete all on-device data by deleting the app.
- You can manage or cancel your subscription anytime in your App Store settings.
- Depending on where you live (for example the EEA, UK, or California), you may have rights to access or delete personal data. Because we hold no account and almost no personal data, most requests are satisfied by the deletions above — but you can always contact us and we will help.
Children
Bunkr is not directed at children under 13, and we do not knowingly collect personal information from them.
Security
All communication between the app and our service is encrypted in transit. Verification requests are authenticated so that only the Bunkr app can use the service, and the service is designed to fail closed — if verification cannot be completed safely, it does not unlock anything.
Changes to this policy
If we change this policy, we will update the effective date above and, for meaningful changes, note it inside the app. Continued use of Bunkr after a change means the updated policy applies.
Contact
Questions or requests: SUPPORT-EMAIL-HERE.