Privacy Policy

Last updated: May 24, 2026

Viremist LLC ("Viremist," "we," "us," or "our") operates AskBuni and is committed to protecting the privacy of our users, especially children. This Privacy Policy explains how we collect, use, and protect information when you use our website (askbuni.ai) and our applications.

1. Information We Collect

Website visitors:

We do not use cookies, analytics, or third-party tracking on our website.
If you contact us via email, we collect your email address and message content solely to respond to your inquiry.

App users:

Account information: When you sign in with Apple, we receive a unique user identifier. We do not receive or store your Apple ID email unless you choose to share it.
Child profile: A parent-provided age range (4–5, 6–8, or 9–12 years) for their child. We store an age range rather than an exact birth date to minimize data collection. The child's nickname is stored only on the device and is never sent to our servers.
Questions and answers: Voice questions from children are transcribed using Apple's speech recognition service. The transcribed text is sent to our servers to generate an age-appropriate answer. Both the question and answer are stored in our database so parents can review them.
Stories: Personalized stories are generated from your child's questions and stored in our database. Story audio narration is stored in our cloud storage.
Voice data: We do not store audio recordings of your child's voice. Speech-to-text is performed by Apple's speech recognition service, which transmits captured audio to Apple's servers to produce a transcript. Apple's handling of that audio is governed by Apple's privacy policy and may, depending on the user's device-level Improve Siri & Dictation setting (Settings → Privacy & Security → Analytics & Improvements), be used by Apple to improve its services. We do not receive or store the audio — only the transcribed text.
Feedback messages: Messages sent through the in-app feedback feature are stored in our database. Our team reads these messages to respond to your inquiry and improve the app. Messages are retained for up to 2 years or until you delete your account, whichever comes first.

2. How We Use Information

To provide and improve our services
To generate age-appropriate answers to children's questions
To create personalized stories from children's questions
To generate voice narration for stories
To enable parents to review and approve answers before children hear them
To display question history and curiosity insights to parents
To respond to feedback and support inquiries

3. Children's Privacy (COPPA)

We take children's privacy seriously. Our app is designed for children ages 4-12, used under parental supervision.

We do not collect direct identifiers (name, email, photo, location) from children. Voice questions spoken by the child are transcribed and the resulting text is sent to our servers under parental consent. All account creation and profile setup is done by a parent.
Children interact with the app only through voice. They do not enter text, create accounts, or provide personal information.
The child's nickname is stored only on the parent's device and is never transmitted to our servers.
Parents have full visibility into all questions their child asks and all answers generated.
Parents can delete all data at any time via Settings → Delete Account in the app.
We do not serve advertising to children.
We do not share children's information with third parties except as necessary to provide the service (see Section 4).

4. Third-Party Services

We use the following third-party services to operate our app:

Apple — Provides Sign in with Apple authentication and speech recognition. When a child speaks a question, audio is sent to Apple's speech recognition service, transcribed, and returned to the app as text. Audio is not stored by us.
Supabase — Database, authentication, and file storage hosting
Google (Gemini) — Primary AI provider used to generate answers to children's questions and personalized stories. Question text only is sent; no personal identifiers. Google does not use API data to train its models.
OpenAI — Alternative AI provider used to generate answers and stories when our primary provider is unavailable. Question text only is sent; no personal identifiers. OpenAI does not use API data to train its models and retains API data only briefly for abuse monitoring.
Amazon Web Services (Polly) — Text-to-speech synthesis for both answers and bedtime story narration. Text only is sent; no personal identifiers.
Cloudflare — Edge compute and content delivery platform that hosts our API endpoints and our shared public pages. All requests to our service (including question and answer text) are routed through Cloudflare's network. Cloudflare does not retain request content beyond what is necessary for transmission and standard security monitoring.

We do not sell, rent, or share personal information with third parties for marketing purposes.

Sharing screening. When you tap "Share," we screen the content for personal information (phone numbers, email addresses, postal addresses) and refuse to publish anything that matches. We also show you the exact text and surface inline warnings for soft signals (family member names, school names, employer mentions, health context, specific locations) so you can review before publishing. You remain responsible for the content you choose to share.

5. Data Security

We use industry-standard security measures to protect your information, including encrypted connections (HTTPS/TLS), secure authentication via Sign in with Apple, and row-level security on our database.

6. Data Retention and Deletion

We retain data only as long as needed to provide the service:

Questions and answers are kept for 1 year, then automatically deleted. Questions you mark as favorites or share publicly are kept until you remove them.
Stories are kept for 1 year. Stories you mark as favorites or share publicly are kept until you remove them.
Account information and subscription state are kept for the life of your account.
Feedback messages are kept for up to 2 years.

You can delete your account and all associated data at any time via Settings → Delete Account in the app, or by contacting us. We complete deletion requests within 30 days. Our full retention policy is available on request.

7. Your Rights

You have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your data
Withdraw consent at any time

8. State Privacy Rights (California, Colorado, Virginia, Connecticut, Utah)

If you are a resident of California or another U.S. state with a comprehensive consumer privacy law, you have additional rights under that state's law:

The right to know what personal information we have collected about you and how it is used.
The right to request deletion of your personal information.
The right to correct inaccurate personal information.
The right to opt out of the sale or sharing of personal information.
The right to limit the use of sensitive personal information.

We do not sell or share personal information. We do not engage in targeted advertising. We do not use personal information for profiling that produces legal or similarly significant effects. We do not knowingly collect information from children under 13 without parental consent, and we never sell children's personal information.

To exercise these rights, contact us at [email protected]. We will respond within the timeframe required by your state's law (typically 45 days, extendable to 90 days if needed). We will not discriminate against you for exercising your rights.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes through our app or website. Continued use of our services after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at [email protected].

Viremist LLC