Privacy Policy for Bunvle
Last updated: September 18, 2026
This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.
We process personal information to provide the features described below, operate accounts and hosted content, respond to requests, and protect the Service. This Policy describes the current Bunvle implementation; it does not describe planned features as if they were already available.
The words whose initial letters are capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.
For the purposes of this Privacy Policy:
Bunvle is a video-editing application with local drafts, a hosted template catalog, public comments, account profiles, a preset-based editing assistant, and editing guides. The current app does not provide live camera capture, beauty effects, biometric face analysis, or a user workflow for uploading edited videos to a public feed.
When you register or sign in, Supabase Auth processes your email address or generated account alias, password, account identifier, and authentication requests. Session access and refresh tokens and a cached profile are stored in the iOS Keychain. Profile data includes your nickname, biography, and selected avatar. The app sends these fields to Supabase when you save your profile.
If you choose the Apple sign-in option, Apple processes the authorization request. The app uses the Apple-provided user identifier on this device to locate saved Supabase credentials in Keychain. On first registration it generates a random alias under bunvletok.com and a password. The alias is an account identifier, not a personal inbox or Apple private-relay address. Apple may also supply a name during authorization, which can be used for the initial profile.
This flow does not provide cross-device recovery from the Apple identifier. Its Keychain entries are configured for this device and are not synchronized through iCloud Keychain. If the saved credentials are lost, this sign-in flow cannot recover that account, and the server does not return a password based only on the Apple identifier. Signing out retains the generated Apple-linked credentials for later sign-in; successful account deletion removes the associated credentials known to this installation.
The system picker lets you select videos for editing and a photo for your avatar. Bunvle receives the items you select; it does not request unrestricted access to your photo library for browsing. Saving an exported video or animated GIF requests add-only Photos permission. You can manage permission in iOS Settings.
Selected editing videos are copied into local app storage. Trimming, merging, speed changes, cropping, compression, audio extraction, muting, and GIF creation run on the device. Drafts contain copied media, a thumbnail, editing settings, and playback position. Imported editing videos, drafts, and exports are not uploaded to Supabase by these editing features. Avatar selection is different: saving an avatar uploads that image.
Drafts are stored for this app installation, not in separate cloud-account folders. The My Drafts entry requires sign-in, but that check does not make existing device drafts private to a particular account. Someone with access to the same installation may access its drafts through available editing features. System backups, iCloud Photos, or a destination you choose when sharing may process copies under their own settings and policies.
Exported files remain in Photos or the destination you choose. If you use the system share menu, the chosen recipient or service receives the shared file. Deleting a draft does not delete the original source in Photos or an exported copy.
Purpose: the assistant matches your typed message on the device against a prepared library of editing tips and presets. It is not a live generative-AI service. Apply opens media selection and uses the selected editing settings in the local editor; it does not upload your media for AI analysis.
Uploads and sharing: the app downloads preset records from Supabase, but the assistant does not send your typed messages, selected editing videos, or draft media to Supabase or an AI provider. Download requests can still generate ordinary service connection logs.
Storage: messages and replies are held in the current conversation's memory. The prepared library is hosted on Supabase and loaded into app memory. Applying a preset can create a local draft with media, settings, and a thumbnail.
Retention: conversation history is not saved for the next launch. It is released when the conversation closes and any pending work releases it. Local drafts have no automatic expiry; delete them in My Drafts or remove the app's data. Closing the conversation does not delete a draft or export created from it.
The app downloads public template titles, descriptions, categories, publisher names and avatars, covers, and videos. Sample content is labeled Sample. Current template cards and video files are supplied by the hosted catalog; using a template opens its video in the editor and is not a request to publish your own media.
When you post a comment, Supabase stores its text, author account identifier, an author-name and avatar-path snapshot, the work identifier, and a timestamp. Comments and displayed author information are publicly readable, including by visitors who have not signed in. Do not post private or sensitive information. Editing a profile does not automatically rewrite older author snapshots.
Reporting stores the reporter account identifier, the selected reason, the target work or comment identifier, and a timestamp. Report records are restricted to the reporting account through the client API and are available to authorized service administration. A successful report hides that specific item from the reporting account's list. The Block option currently has the same item-level effect; it does not block every contribution by an author or delete content for everyone.
A like in the template preview is currently a local UI state, not a persistent account favorite or a public like count. The app does not provide a completed virtual-gift purchase flow.
Supabase provides hosted authentication, database, storage, and account-deletion functions. Apple handles Apple authorization, system media selection and permissions, and system-controlled services you choose to use. Public avatars, covers, and template videos are accessible through public URLs; do not treat an uploaded avatar as private.
Hosted requests may expose IP addresses, request times, requested resource paths, response details, and authentication-related information needed for operation and security. Visiting hosted policy pages may also expose connection information to their hosting provider. The current app has no implemented advertising or cross-app tracking feature. This Policy does not promise that providers collect no operational logs.
Where applicable, legal bases include providing the service you request, legitimate interests in operating and protecting the Service where recognized by law, compliance with legal duties, and consent where required. Public display of comments and avatars supports the features you choose to use. Optional device permission can be changed in Settings; withdrawing it does not automatically delete information already submitted.
The current subscription screen presents plan information and pending-function notices; purchase and restore transactions are not implemented. Bunvle does not currently collect payment-card details or create local gift-transaction records.
Accounts and profiles: hosted account and profile records remain while the account exists, subject to deletion requests and applicable legal requirements. The account-deletion function revokes refresh sessions, removes avatar files under the account's avatar folder, and deletes the authentication user. Linked profile, comment, report, and publisher-linked work records are removed through the current database relationships. Shared catalog media and files outside that avatar folder are not automatically erased by this flow.
Comments and reports: these are persistent hosted records, not temporary chat messages. There is no automatic time-based deletion schedule configured in the app. Reporting hides an item for the reporter; it does not erase the original record. Account deletion removes records linked to that account through the current relationships. Contact us about a specific comment or other hosted record.
Local drafts: saved in the app's Application Support storage until you delete the draft or remove the app's local data. They are not cleared by account sign-out or deletion. Temporary editor working folders are normally removed when the editor is released; interrupted sessions may leave files for later system cleanup.
Template caches: the work-list freshness interval is 24 hours; older cached data may be used when a refresh fails. Image and video cache freshness is 30 days, with configured limits of approximately 120 MiB for images and 512 MiB for videos. Expiry is not a promise of physical deletion at that moment: eviction happens when the cache is accessed or updated, or when iOS clears it. Completed cached video files can be reused after relaunch.
Keychain and other device records: session and cached-profile data are cleared by the sign-out or deletion flow as implemented. Apple-linked generated credentials can remain after sign-out; uninstalling the app must not be relied upon to erase Keychain items. Account-specific hidden-work identifiers are stored locally and are not automatically erased by sign-out or deletion. Downloaded avatar or catalog caches can also remain until eviction or app-data removal.
Exports and copies held elsewhere: an export remains until removed from its chosen destination. Other users may have downloaded or copied publicly available content. Account deletion cannot immediately remove copies outside the Service's control.
Publication item requiring confirmation: the Supabase deployment region, operational-log retention, backup retention, and any legal retention exceptions must be verified for the actual production project before publication. No specific region, automatic erasure deadline, or backup purge period is asserted here.
Hosted information may be processed outside your country, depending on the actual Supabase project region, hosting configuration, and providers involved. The production processing locations require confirmation; this Policy does not assert a hosting or operating location that has not been confirmed.
Where applicable law requires safeguards for an international transfer, the operator must establish the required transfer mechanism and provide information about it on request. Do not interpret use of a provider or acceptance of this Policy as a waiver of data-protection rights.
You can edit your nickname, biography, and avatar in the app. While signed in, use Settings > Delete Account to request the implemented account-deletion flow. Signing out and uninstalling are not equivalent to deleting a hosted account. Delete individual drafts in My Drafts and exported media using Photos or the relevant destination.
Depending on applicable law, you may request access, correction, deletion, restriction, portability, or object to certain processing; you may withdraw consent where processing relies on consent and complain to the competent supervisory authority. Contact GuynesMeeds67@outlook.com and identify the relevant account or record. We may need proportionate information to verify a request; do not send your password. Losing local Apple-linked credentials may prevent access through that sign-in flow, but does not by itself waive any statutory right to submit a request.
Requests and any retention exceptions are handled under applicable law. This Policy does not promise an unverified fixed deletion deadline, or deletion from third-party backups and recipients outside our control.
If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.
Under certain circumstances, the Company may disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).
The Company may disclose Your Personal Data in the good-faith belief that such action is necessary to:
The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure. While We strive to use commercially reasonable means to protect Your Personal Data, We cannot guarantee its absolute security.
The Service is not directed to, and We do not knowingly collect Personal Information from, anyone under the age of 16.
If You are a parent or guardian and You believe Your child has provided Us with Personal Information, please contact Us. If We become aware that We have collected Personal Information from anyone under the age of 16, We will take steps to remove that information from Our servers as soon as reasonably possible.
Some countries and states set a higher age at which an individual can consent to the processing of their own Personal Information. Where We rely on consent as a legal basis and the law applicable to a User sets an age higher than 16, We may require the consent of that User's parent or guardian before We collect and use their Personal Information.
Our Service may contain links to other websites that are not operated by Us. If You click on a third-party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.
Third-party sites have their own terms and privacy practices. This does not remove our responsibilities for providers processing information on our behalf or any obligations that cannot be excluded by law.
We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.
Where required by applicable law, We will provide notice of material changes through available contact information or a prominent notice in the Service and update the "Last updated" date at the top of this Privacy Policy.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
If You have any questions about this Privacy Policy, You can contact Us: