Privacy Policy

Last updated: August 18, 2026

Viremist LLC ("Viremist," "we," "us," or "our") operates AskBuni and is committed to protecting the privacy of our users, especially children. This Privacy Policy explains how we collect, use, and protect information when you use our website (askbuni.ai) and our applications.

1. Information We Collect

Website visitors:

We do not use cookies, analytics, or third-party tracking on our website.
If you contact us via email, we collect your email address and message content solely to respond to your inquiry.

App users:

Account information: When you sign in with Apple, we receive a unique user identifier. We do not receive or store your Apple ID email unless you choose to share it.
Child profile: A parent-provided age range (4–5, 6–8, or 9–12 years) for their child. We store an age range rather than an exact birth date to minimize data collection. The child's nickname is stored only on the device and is never sent to our servers.
Questions and answers: Voice questions from children are transcribed using Apple's speech recognition service. The transcribed text is sent to our servers to generate an age-appropriate answer. Both the question and answer are stored in our database so parents can review them. Buni sometimes asks your child a follow-up question. What your child says back is transcribed, sent to our AI providers to generate Buni's response, and stored with the question so you can review it.
Stories: Personalized stories are generated from your child's questions and stored in our database. Your child can also create a story by speaking their own story idea; that spoken idea is transcribed to text, sent to our AI providers to write the story, and stored alongside the story so you can review it. Story audio narration is stored in our cloud storage.
Music: Your child can turn an answer into a short song, or create a custom song from a music idea or their own words. The text of the question or song idea is sent to our music provider to generate the song; only text is sent, no personal identifiers. The generated song is stored in our cloud storage so it can be replayed without regenerating it. Your child can also record themselves singing over a generated backing track, and those recordings stay entirely on your device (see on-device recordings below).
Games and activities: In interactive activities like Real Life, and in Music, your child can speak answers and short song ideas. These are transcribed and sent to our AI providers the same way questions are, to generate Buni's response. We do not store what your child says during a game; we keep only a record of which activity was played, so you can see their history. A song your child creates is stored in our cloud storage so it can be replayed and reviewed.
Voice data (speech-to-text): Speech-to-text for your child's spoken questions and story ideas is performed by Apple's speech recognition service, which transmits captured audio to Apple's servers to produce a transcript. Apple's handling of that audio is governed by Apple's privacy policy and may, depending on the user's device-level Improve Siri & Dictation setting (Settings → Privacy & Security → Analytics & Improvements), be used by Apple to improve its services. We do not receive or store that audio — only the transcribed text.
On-device voice recordings (story voice clips and sing-along recordings): Your child can optionally record short voice clips — sounds, brief lines, or singing along to a music track — to play inside their own stories or songs. These recordings are created, stored, and played back entirely on your device. They are never uploaded, transmitted, synced, backed up to our servers, shared, or analyzed; we never receive them and no third party ever receives them. They are used only to replay your child's own story or song on that device, cannot be shared, and are removed when you delete the recording, sign out, or delete your account.
Feedback messages: Messages sent through the in-app feedback feature are stored in our database. Our team reads these messages to respond to your inquiry and improve the app. Messages are retained for up to 2 years or until you delete your account, whichever comes first.

2. How We Use Information

To provide and improve our services
To generate age-appropriate answers to children's questions
To create personalized stories from children's questions
To create songs and music from children's questions or song ideas
To power interactive activities (like Real Life) by generating Buni's responses to what your child says
To generate voice narration for stories
To enable parents to review and approve answers before children hear them
To display question history and curiosity insights to parents
To respond to feedback and support inquiries

3. Children's Privacy (COPPA)

We take children's privacy seriously. Our app is designed for children ages 4-12, used under parental supervision.

We do not collect direct identifiers (name, email, photo, location) from children. Voice questions spoken by the child are transcribed and the resulting text is sent to our servers under parental consent. All account creation and profile setup is done by a parent.
Children interact with the app only through voice. They do not enter text, create accounts, or provide personal information. Any voice clips a child records for their own stories or songs — including singing along to a music track — stay on the device and are never transmitted to us, so we receive no audio recordings or other personal information from the child.
The child's nickname is stored only on the parent's device and is never transmitted to our servers.
Parents can review the questions their child asks, what their child says back to Buni, and the answers, stories, and songs AskBuni creates for them. Some things your child says during games are used only to generate Buni's reply in the moment and are not stored.
Parents can delete all data at any time via Settings → Delete Account in the app.
We do not serve advertising to children.
We do not share children's information with third parties except as necessary to provide the service (see Section 4).

4. Third-Party Services

We use the following third-party services to operate our app:

Apple — Provides Sign in with Apple authentication and speech recognition. When a child speaks a question, audio is sent to Apple's speech recognition service, transcribed, and returned to the app as text. Audio is not stored by us.
Supabase — Database, authentication, and file storage hosting
Google (Gemini) — Primary AI provider used to generate answers to children's questions and personalized stories (including stories your child requests by voice). Only the text of what your child says (questions, answers, story and song ideas) is sent; no personal identifiers. Google does not use API data to train its models.
OpenAI — AI provider used to generate answers and stories when our primary provider is unavailable, to help write song lyrics, and to generate Buni's responses in interactive activities. Only the text of what your child says (questions, answers, story and song ideas) is sent; no personal identifiers. OpenAI does not use API data to train its models and retains API data only briefly for abuse monitoring.
Amazon Web Services (Polly) — Text-to-speech synthesis for both answers and bedtime story narration. Text only is sent; no personal identifiers.
ElevenLabs — Music provider used to generate songs from your child's question or song idea. Only text is sent; no personal identifiers. We have opted out of ElevenLabs using our content to train its models.
Cloudflare — Edge compute and content delivery platform that hosts our API endpoints. All requests to our service (including the text your child speaks and the answers generated) are routed through Cloudflare's network. Cloudflare does not retain request content beyond what is necessary for transmission and standard security monitoring.

We do not sell, rent, or share personal information with third parties for marketing purposes.

5. Data Security

We use industry-standard security measures to protect your information, including encrypted connections (HTTPS/TLS), secure authentication via Sign in with Apple, and row-level security on our database.

6. Data Retention and Deletion

We retain data only as long as needed to provide the service:

Questions and answers are kept for 1 year, then automatically deleted. Questions you mark as favorites are kept until you remove them.
Stories are kept for 1 year, then automatically deleted. Stories you mark as favorites are kept until you remove them.
Songs are kept for 1 year, then automatically deleted. Songs you mark as favorites are kept until you remove them.
Account information and subscription state are kept for the life of your account.
Feedback messages are kept for up to 2 years.

You can delete your account and all associated data at any time via Settings → Delete Account in the app, or by contacting us. We complete deletion requests within 30 days. Our full retention policy is available on request.

7. Your Rights

You have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your data
Withdraw consent at any time

8. State Privacy Rights (California, Colorado, Virginia, Connecticut, Utah)

If you are a resident of California or another U.S. state with a comprehensive consumer privacy law, you have additional rights under that state's law:

The right to know what personal information we have collected about you and how it is used.
The right to request deletion of your personal information.
The right to correct inaccurate personal information.
The right to opt out of the sale or sharing of personal information.
The right to limit the use of sensitive personal information.

We do not sell or share personal information. We do not engage in targeted advertising. We do not use personal information for profiling that produces legal or similarly significant effects. We do not knowingly collect information from children under 13 without parental consent, and we never sell children's personal information.

To exercise these rights, contact us at info@viremist.ai. We will respond within the timeframe required by your state's law (typically 45 days, extendable to 90 days if needed). We will not discriminate against you for exercising your rights.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes through our app or website. Continued use of our services after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at info@viremist.ai.

Viremist LLC