Privacy policy

1. About this policy

Acadia Labs Inc., based in Vancouver, British Columbia, Canada, operates Bunpy, a recipe-saving, meal-planning, and grocery-list app, and bunpy.app. This policy explains how we handle information when you use these services or contact us.

Some features use optional device permissions or third-party processing. Review the relevant sections below before sharing recipes, photos, dietary preferences, or location information.

2. Information we handle

• Account information: account identifier, email address, display name, avatar or uploaded profile photo, and sign-in provider information. Apple or Google may supply information you authorize. Apple’s Hide My Email provides a relay address.
• Recipes and kitchen information: saved and imported recipes, source URLs, public post content and creator details, recipe photos, edits, favorites, folders, cooking history, meal plans, grocery lists, and kitchen inventory. Some information is stored on your device.
• Preferences: onboarding answers, dietary and allergy preferences, cooking goals, reminder settings, and other settings you choose. Dietary and allergy information can be sensitive; only provide information you are comfortable using for these features.
• Location: if you choose local ingredient-cost estimates, the app can request foreground location permission to determine your city. The app retains city, region, and country for this feature; precise coordinates and street addresses are not persisted or sent to Bunpy’s backend by this feature.
• Purchases: product and transaction identifiers, purchase and expiry dates, entitlement status, and information used to validate or restore purchases. Your store handles payment details; Bunpy does not receive your full payment-card number.
• Technical and support information: support correspondence, reports, import errors, operational logs, and information processed by infrastructure and purchase providers, such as IP addresses, app version, device or operating-system information, and request timestamps.

3. How we use information

We use information to provide and secure your account; store, import, organize, and display recipes; provide recipe recommendations, meal planning, kitchen inventory, and grocery features; remember preferences; process recipe scans and estimates; validate subscriptions and free-plan limits; restore purchases; respond to support and safety reports; and diagnose failures or misuse.

Optional dinner reminders are scheduled on your device when you allow notifications. AI-generated ingredient quantities, nutrition, cost estimates, and allergy flags can be inaccurate and should be checked before use.

4. Providers and AI processing

We use service providers for the following purposes:

• Supabase: authentication, database and image storage, and server functions.
• RevenueCat and your app store: subscription validation, entitlement management, purchase restoration, and related technical processing.
• OpenRouter and selected AI model providers, including Google: relevant recipe text, submitted recipe images or video links, ingredients, servings, and, for local cost estimates, city/region/country may be processed to extract or generate recipe details and estimates.
• Recipe websites, social platforms, and extraction services such as HikerAPI or Apify: source URLs or post identifiers may be processed to retrieve available public recipe content, creator details, and media.
• Website hosting and infrastructure providers: process requests, IP addresses, and technical logs needed to deliver and protect the website.

Using an import, scan, or estimation feature sends the relevant content to the providers needed for that feature. Their processing is also subject to their own policies and applicable service terms. We may disclose information when legally required, to address fraud or security issues, or to protect the rights and safety of users and our services.

5. Photos, camera, and permissions

The app asks for camera or photo access when you choose to scan a recipe or add a recipe or profile picture. Selected images may be uploaded and recipe scans may be sent for AI processing. Avoid including unrelated personal information in images.

Recipe and profile images are served through public image URLs. Anyone with an image’s URL may be able to view it. Public recipe content, source attribution, and community contributions such as reviews may be visible to other users where the relevant feature presents them.

You can manage camera, photo, location, and notification permissions in device settings. Declining a permission can limit the feature that needs it.

6. Website cookies and tracking

This website currently includes no advertising trackers, analytics scripts, newsletter signup, or nonessential cookies. Fonts and artwork are hosted with the site. Hosting infrastructure may still process technical request information to serve the pages and protect the service.

Links to app stores, source platforms, and other websites lead to services with their own privacy practices. If we add analytics or other data-collection features, we will update this policy and provide any choices or consent required for them.

7. Retention and deletion

We retain account and cookbook information while needed to provide the service and for the purposes described here. You can delete recipes and request account deletion through Profile → Settings → Delete account. See our account-deletion guide.

Account deletion removes the account, profile, associated saved recipes and cooking history, and uploaded account images from active app storage. Device data, shared caches of publicly available recipe content, and service-provider records may have separate retention periods. Limited information may remain in backups, security logs, support correspondence, and purchase records for operational or legal purposes. We do not promise a fixed deletion period for every provider or backup.

Deleting your account does not cancel an app-store subscription. Cancel renewal separately in your store account settings.

8. Your choices and privacy requests

You can edit your profile, manage preferences and permissions, delete recipes, restore purchases, and delete your account in the app. Depending on applicable law, you may have rights to access, correct, delete, or receive a copy of your personal information, withdraw consent, or object to or restrict certain processing.

Send requests to contact@acadialabs.co. We may need to verify your identity. If a request cannot be fully fulfilled, we will explain the relevant limits. You may also contact the privacy regulator responsible for your location.

9. Security and international processing

We use authentication and access controls to protect information. No system guarantees absolute security. Information may be processed in Canada, the United States, and other countries where our providers operate. Privacy laws in those locations may differ from those where you live.

10. Children’s information

Bunpy is not directed to children under 13. Do not create an account if you are under 13 or below the minimum age for providing valid consent where you live. If you believe a child has provided personal information that should be removed, contact us so we can investigate and respond under applicable law.

11. Changes to this policy

We may update this policy as Bunpy changes. The current version will appear here with an updated effective date. We will provide additional notice of material changes where required.

12. Contact us

Acadia Labs Inc.
Vancouver, British Columbia, Canada
contact@acadialabs.co