Privacy Policy

Our Commitment

At Bunorden, privacy isn't a feature—it's the foundation. This policy explains how we handle your data across all our applications. The short version: we use end-to-end encryption, so we can't read your data even if we wanted to.

What We Collect

Account Information

When you create an account, we collect:

• Email address (for authentication and account recovery)
• Password (hashed with Argon2id, never stored in plaintext)
• Account creation date

Encrypted Application Data

Your application data (notes, financial records, etc.) is encrypted on your device before transmission. We store this encrypted data but cannot decrypt or read it. Your encryption keys never leave your device.

Technical Information

We collect minimal technical data for service operation:

• IP address (for security and abuse prevention)
• Device type and browser (for compatibility)
• Usage timestamps (for service monitoring)

How We Use Your Data

We use your information solely to:

• Provide and maintain our services
• Authenticate your account access
• Send critical service updates (security alerts, system maintenance)
• Prevent fraud and abuse
• Comply with legal obligations

We never sell your data. We never use your data for advertising. We never share your data with third parties except as required by law.

End-to-End Encryption

All sensitive data is encrypted on your device using AES-256-GCM before transmission. Your encryption keys are derived from your password using Argon2id and never leave your device. This means:

• We cannot read your encrypted data
• We cannot recover your data if you lose your password
• Government requests cannot compel us to decrypt your data (we can't)
• Data breaches cannot expose your plaintext information

Data Retention

We retain your data as long as your account is active. When you delete your account:

• Encrypted data is permanently deleted within 30 days
• Account metadata is deleted within 90 days
• Backups are purged within 180 days

Your Rights

Under GDPR and similar privacy laws, you have the right to:

• Access: Request a copy of your data
• Rectification: Correct inaccurate data
• Erasure: Delete your account and data
• Portability: Export your data in standard formats
• Objection: Object to data processing

To exercise these rights, contact us at privacy@bunorden.com

Contact Us

Questions about this policy? Contact our privacy team: