Privacy Policy

Last updated: September 4, 2026

Viremist LLC ("Viremist," "we," "us," or "our") operates AskBuni and is committed to protecting the privacy of our users, especially children. This Privacy Policy explains how we collect, use, and protect information when you use our website (askbuni.ai) and our applications.

1. Information We Collect

Website visitors:

We do not use cookies, analytics, or third-party tracking on our website.
If you contact us via email, we collect your email address and message content solely to respond to your inquiry.

App users:

Account information: When you sign in with Apple, we receive a unique user identifier. We do not receive or store your Apple ID email unless you choose to share it.
Child profile: A parent-provided age range (4–5, 6–8, or 9–12 years) for their child. We store an age range rather than an exact birth date to minimize data collection. The child's nickname is stored only on the device and is never sent to our servers.
Questions and answers: Voice questions from children are transcribed using Apple's speech recognition service. The transcribed text is sent to our servers to generate an age-appropriate answer. Both the question and answer are stored in our database so parents can review them. Buni sometimes asks your child a follow-up question. What your child says back is transcribed, sent to our AI providers to generate Buni's response, and stored with the question so you can review it.
Stories: Personalized stories are generated from your child's questions and stored in our database. Your child can also create a story by speaking their own story idea; that spoken idea is transcribed to text, sent to our AI providers to write the story, and stored alongside the story so you can review it. Story audio narration is stored in our cloud storage.
Music: Your child can turn an answer into a short song, or create a custom song from a music idea or their own words. The text of the question or song idea is sent to our music provider to generate the song; only text is sent, no personal identifiers. The generated song is stored in our cloud storage so it can be replayed without regenerating it. Your child can also record themselves singing over a generated backing track, and those recordings stay entirely on your device (see on-device recordings below).
Games and activities: In interactive activities like Real Life, and in Music, your child can speak answers and short song ideas. These are transcribed and sent to our AI providers the same way questions are, to generate Buni's response. We do not store what your child says during a game; we keep only a record of which activity was played, so you can see their history. A song your child creates is stored in our cloud storage so it can be replayed and reviewed.
Voice data (speech-to-text): Speech-to-text for your child's spoken questions and story ideas is performed by Apple's speech recognition service, which transmits captured audio to Apple's servers to produce a transcript. Apple's handling of that audio is governed by Apple's privacy policy and may, depending on the user's device-level Improve Siri & Dictation setting (Settings → Privacy & Security → Analytics & Improvements), be used by Apple to improve its services. We do not receive or store that audio — only the transcribed text.
On-device voice recordings (story voice clips and sing-along recordings): Your child can optionally record short voice clips — sounds, brief lines, or singing along to a music track — to play inside their own stories or songs. These recordings are created, stored, and played back entirely on your device. They are never uploaded, transmitted, synced, backed up to our servers, shared, or analyzed; we never receive them and no third party ever receives them. They are used only to replay your child's own story or song on that device, cannot be shared, and are removed when you delete the recording, sign out, or delete your account.
Feedback messages: Messages sent through the in-app feedback feature are stored in our database. Our team reads these messages to respond to your inquiry and improve the app. Messages are retained for up to 2 years or until you delete your account, whichever comes first.

2. How We Use Information

To provide and improve our services
To generate age-appropriate answers to children's questions
To create personalized stories from children's questions
To create songs and music from children's questions or song ideas
To power interactive activities (like Real Life) by generating Buni's responses to what your child says
To generate voice narration for stories
To enable parents to review and approve answers before children hear them
To display question history and curiosity insights to parents
To respond to feedback and support inquiries

3. Children's Privacy (COPPA)

We take children's privacy seriously. Our app is designed for children ages 4-12, used under parental supervision.

We do not collect direct identifiers (name, email, photo, location) from children. Voice questions spoken by the child are transcribed and the resulting text is sent to our servers under parental consent. All account creation and profile setup is done by a parent.
Children interact with the app only through voice. They do not enter text, create accounts, or provide personal information. Any voice clips a child records for their own stories or songs — including singing along to a music track — stay on the device and are never transmitted to us, so we receive no audio recordings or other personal information from the child.
The child's nickname is stored only on the parent's device and is never transmitted to our servers.
Parents can review the questions their child asks, what their child says back to Buni, and the answers, stories, and songs AskBuni creates for them. Some things your child says during games are used only to generate Buni's reply in the moment and are not stored.
Parents can delete all data at any time via Settings → Delete Account in the app.
We do not serve advertising to children.
We do not share children's information with third parties except as necessary to provide the service (see Section 4).

4. Third-Party Services

We use the following third-party services to operate our app:

Apple — Provides Sign in with Apple authentication and speech recognition. When a child speaks a question, audio is sent to Apple's speech recognition service, transcribed, and returned to the app as text. Audio is not stored by us.
Supabase — Database, authentication, and file storage hosting
Google (Gemini) — Primary AI provider used to generate answers to children's questions and personalized stories (including stories your child requests by voice). Only the text of what your child says (questions, answers, story and song ideas) is sent; no personal identifiers. Google does not use API data to train its models.
OpenAI — AI provider used to generate answers and stories when our primary provider is unavailable, to help write song lyrics, and to generate Buni's responses in interactive activities. Only the text of what your child says (questions, answers, story and song ideas) is sent; no personal identifiers. OpenAI does not use API data to train its models and retains API data only briefly for abuse monitoring.
Amazon Web Services (Polly) — Text-to-speech synthesis for both answers and bedtime story narration. Text only is sent; no personal identifiers.
ElevenLabs — Music provider used to generate songs from your child's question or song idea. Only text is sent; no personal identifiers. We have opted out of ElevenLabs using our content to train its models.
Cloudflare — Edge compute and content delivery platform that hosts our API endpoints. All requests to our service (including the text your child speaks and the answers generated) are routed through Cloudflare's network. Cloudflare does not retain request content beyond what is necessary for transmission and standard security monitoring.

We do not sell, rent, or share personal information with third parties for marketing purposes.

5. Data Security

We use industry-standard security measures to protect your information, including encrypted connections (HTTPS/TLS), secure authentication via Sign in with Apple, and row-level security on our database.

Viremist LLC will notify affected individuals and the relevant regulator without undue delay of any personal data breach that poses a risk to individuals, and maintains an internal register of security incidents.

6. Data Retention and Deletion

We retain data only as long as needed to provide the service:

Questions and answers are kept for 1 year, then automatically deleted. Questions you mark as favorites are kept until you remove them.
Stories are kept for 1 year, then automatically deleted. Stories you mark as favorites are kept until you remove them.
Songs are kept for 1 year, then automatically deleted. Songs you mark as favorites are kept until you remove them.
Account information and subscription state are kept for the life of your account.
Feedback messages are kept for up to 2 years.

You can delete your account and all associated data at any time via Settings → Delete Account in the app, or by contacting us. We complete deletion requests within 30 days. Our full retention policy is available on request.

7. Your Rights

You have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your data
Withdraw consent at any time

8. State Privacy Rights (California, Colorado, Virginia, Connecticut, Utah)

If you are a resident of California or another U.S. state with a comprehensive consumer privacy law, you have additional rights under that state's law:

The right to know what personal information we have collected about you and how it is used.
The right to request deletion of your personal information.
The right to correct inaccurate personal information.
The right to opt out of the sale or sharing of personal information.
The right to limit the use of sensitive personal information.

We do not sell or share personal information. We do not engage in targeted advertising. We do not use personal information for profiling that produces legal or similarly significant effects. We do not knowingly collect information from children under 13 without parental consent, and we never sell children's personal information.

To exercise these rights, contact us at [email protected]. We will respond within the timeframe required by your state's law (typically 45 days, extendable to 90 days if needed). We will not discriminate against you for exercising your rights.

9. International Users

AskBuni is operated from the United States. The information we process is stored and handled on servers in the United States and in other countries where our service providers operate. If you use AskBuni from outside the United States, you consent to the transfer of your and your child's information to the United States for processing as described in this policy.

New Zealand. We handle personal information in a manner consistent with the Privacy Act 2020 and its Information Privacy Principles, including those governing the cross-border disclosure of personal information (IPP 12). You have the right to request access to, and correction of, your personal information.

Australia. We handle personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). We notify you of our collection practices when we collect your information. We may disclose personal information to overseas recipients, primarily our service providers in the United States, and we take reasonable steps to ensure they handle it consistently with the APPs. Where a child uses AskBuni, we rely on the consent of the child's parent or guardian. You may request access to and correction of your personal information, and you may complain to the Office of the Australian Information Commissioner (OAIC). If we become aware of an eligible data breach likely to result in serious harm, we will notify affected individuals and the OAIC as required by the Notifiable Data Breaches scheme.

Singapore. We handle personal information in accordance with the Personal Data Protection Act 2012 (PDPA), overseen by the Personal Data Protection Commission (PDPC). We may transfer personal information to service providers in the United States and other countries under contractual protections requiring a comparable standard of protection. Where a child uses AskBuni, we rely on the consent of the child's parent or guardian. You may request access to, correction of, and deletion of your personal information. Questions or complaints may be directed to our Privacy Officer at [email protected] or to the Personal Data Protection Commission (PDPC).

Philippines. We handle personal information in accordance with the Data Privacy Act of 2012, overseen by the National Privacy Commission (NPC). We may transfer personal information to service providers in the United States and other countries under contractual protections requiring a comparable standard of protection. Where a child uses AskBuni, we rely on the consent of the child's parent or guardian. You may request access to, correction of, and deletion of your personal information. Questions or complaints may be directed to our Privacy Officer at [email protected] or to the National Privacy Commission (NPC).

Hong Kong. We handle personal information in accordance with the Personal Data (Privacy) Ordinance (PDPO), overseen by the Office of the Privacy Commissioner for Personal Data (PCPD). We may transfer personal information to service providers in the United States and other countries under contractual protections requiring a comparable standard of protection. Where a child uses AskBuni, we rely on the consent of the child's parent or guardian. You may request access to, correction of, and deletion of your personal information. Questions or complaints may be directed to our Privacy Officer at [email protected] or to the Office of the Privacy Commissioner for Personal Data (PCPD).

Malaysia. We handle personal information in accordance with the Personal Data Protection Act 2010, overseen by the Personal Data Protection Commissioner. We may transfer personal information to service providers in the United States and other countries under contractual protections requiring a comparable standard of protection. Where a child uses AskBuni, we rely on the consent of the child's parent or guardian. You may request access to, correction of, and deletion of your personal information. Questions or complaints may be directed to our Privacy Officer at [email protected] or to the Personal Data Protection Commissioner.

United Kingdom. If you use AskBuni from the United Kingdom, we process personal information in accordance with the UK GDPR and the Data Protection Act 2018. Our lawful basis is the consent of the holder of parental responsibility and the performance of our contract with you. You have the right to access, correct, delete, restrict, or object to the processing of your personal information, to data portability, and to withdraw consent at any time. Personal information is transferred to and processed in the United States by our service providers under appropriate safeguards, including the UK Extension to the EU-US Data Privacy Framework and the UK International Data Transfer Agreement or Addendum. You may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Our representative in the United Kingdom under Article 27 of the UK GDPR is DataRep (Data Protection Representative Limited, trading as DataRep): DataRep, 107-111 Fleet Street, London, EC4A 2AB, United Kingdom, or via DataRep's online form at www.datarep.com/data-request. Please address any correspondence to "DataRep." For questions about AskBuni itself, contact us at [email protected].

European Economic Area. If you use AskBuni from the European Economic Area, we process personal information in accordance with the EU General Data Protection Regulation (GDPR). Our lawful basis is the consent of the holder of parental responsibility and the performance of our contract with you. You have the right to access, correct, delete, restrict, or object to the processing of your personal information, to data portability, and to withdraw consent at any time. Personal information is transferred to and processed in the United States by our service providers under appropriate safeguards, including the EU-US Data Privacy Framework and the European Commission's Standard Contractual Clauses. You may lodge a complaint with your local data protection authority.

Our representative in the Union under Article 27 of the GDPR is DataRep (Data Protection Representative Limited, trading as DataRep): DataRep, 77 Camden Street Lower, Dublin, D02 XE80, Ireland, or via DataRep's online form at www.datarep.com/data-request. Please address any correspondence to "DataRep." For questions about AskBuni itself, contact us at [email protected].

Sensitive topics. Because your child asks questions in their own words, what they say may sometimes include sensitive information such as health, religious beliefs, or ethnic background. We use this only to answer your child and keep the experience safe. We do not use it to build a profile, infer traits, or make decisions about your child, and never for advertising. Where the law requires it (for example in the UK and EU), we rely on the explicit consent you give when you set up AskBuni.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes through our app or website. Continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at [email protected].

Our Privacy Officer can be contacted for privacy questions, to exercise your rights, or to report a privacy concern at [email protected].

Viremist LLC