Last updated: 2026-08-06 · Status: Invite-only beta
This Privacy Policy explains what information Bunny collects when you use the app, why we collect it, who we share it with, and the choices you have. It applies to the Bunny mobile app and any connected services.
Account information you give us. Name, email, an optional @handle, role/company (free text, not a fixed list), an optional one-line bio, and an optional profile photo. During onboarding you also tell us what you're there for (your "intent" — e.g., meeting investors, finding collaborators) — this personalizes what Bunny shows you and is never shown to other users as a verbatim quote without your action.
Location. Only when you use location-dependent features (like finding nearby events), and only "when in use" (foreground) — we don't run background location tracking, and we don't persist a history of everywhere you've been. If you deny location access, the app's location-dependent features simply degrade honestly (no nearby results) rather than guessing.
Contacts (optional). If you choose to grant contacts access, we use it to help you find people you already know who are also on Bunny. We match using a hashed comparison, not by uploading or retaining your contacts' raw phone numbers or emails on our servers. This is entirely opt-in — declining it doesn't limit any other part of the app.
Content you create. Messages inside Circles, notes/tags on your connections, event RSVPs and plans, circle memberships, and any photos or memories you specifically choose to attach to a connection.
Device and usage information. Push notification tokens (so we can notify you about things you've opted into — event reminders, connection requests, circle messages), and basic app usage/diagnostic data. Product analytics (which screens are used, which actions are taken) is collected through PostHog only when enabled for your build — Bunny ships with an explicit event taxonomy (no blanket "track everything") and a runtime kill switch that can turn analytics off entirely.
What we do NOT collect. We don't collect your precise background location, we don't read your messages outside of what you send inside Bunny, and we don't buy data about you from third parties to build your profile.
We use the information above to: run your account and let you sign in; show you relevant events and connections based on your stated intent and activity; power Circle chat, coordination, and safety features (like Bunny Safe); let confirmed connections see the profile info you've made visible to them; send you the notifications you've opted into; keep the app secure and prevent abuse; and improve the product based on aggregate usage patterns (never by reading your private messages).
Other Bunny users. Your public profile fields (name, photo, role, city, and any "why I'm here" you write) are visible within the app per your own visibility settings. A more detailed set of fields (including your role/company as free text) becomes visible to a confirmed connection — someone you've mutually connected with — for search and display. Fields you haven't made visible, and people you haven't connected with, don't see your details. If you export your connections list (CSV), that export is intentionally restricted to name, role, met-context, and your own private notes/tags — it does not include another person's email, company, or other contact fields, regardless of what's visible to you in-app, because that data isn't yours to redistribute.
Event hosts. If you RSVP to an event, the host may see that you're going (and, where relevant, your check-in status) so they can run their event.
Service providers who process data on our behalf, under agreements that limit their use of it to providing the service to us: our backend/database/auth provider (Supabase); push notification delivery services (Apple/Google); Sign in with Apple and Google, if you use them to sign in; and, when enabled, PostHog for product analytics. We also ingest publicly available event listing data from third-party event platforms (like Luma) to populate Discover — that's public listing data about events, not personal data about you.
We do not sell your personal information.
We keep your account information for as long as your account is active. If you delete your account, we remove your personal profile and content within a reasonable period, except where we need to retain something for a legitimate reason (for example, safety reports, or aggregate/de-identified records that no longer identify you).
We use industry-standard practices (encryption in transit, access controls, and row-level database security policies scoped to each user) to protect your information. No system is perfectly secure, and we can't guarantee absolute security, but we treat unauthorized access seriously and will notify affected users where required by law.
Bunny is not intended for anyone under 18, and we don't knowingly collect information from anyone under 18. If we learn we've collected information from someone under 18, we'll delete it.
Bunny is an invite-only beta. As we build out features (for example, deeper partner integrations with event platforms, or new social features), the specific data we collect and how it's used may evolve — we'll update this policy and flag material changes in-app rather than changing behavior silently.
We may update this Privacy Policy as the product evolves. We'll update the "Last updated" date above and, for material changes, flag it in-app.
Questions about this Privacy Policy, or to exercise any of the choices in §5: ryuk@bunny.events
See also: Terms of Service