Last Updated · June 19, 2026
Buny uses Aptabase, an open-source analytics tool I self-host on a Hetzner server in Germany. Your data stays on that server. It never goes to Aptabase's cloud or anywhere else.
Using the app generates events that tell me how features are being used. Each event can include:
Automatically included with every event:
Some events also include:
I don't collect your name, email, Apple ID, or any payment information.
Apple assigns the vendor identifier; it's the same across all of Buny's developer's apps on your device. EU law counts it as personal data, so this policy covers it. It can't be tied to your name, Apple ID, or any other account.
I use this data to understand which features people actually use, how often the app opens, and whether an update broke something. The server is mine and only I (nomad) can access it.
The legal basis under GDPR is legitimate interests (Article 6(1)(f)). Without analytics I have no way to tell if an update broke something or which features anyone actually uses. Using the app means this data gets sent. There's no toggle; if you use Buny, the analytics come with it.
iCloud sync is always on. Your library, reading progress, themes, and backups go through Apple's CloudKit. CloudKit is governed by Apple's Privacy Policy, which covers how they handle your iCloud data. Apple participates in the EU–US Data Privacy Framework, which is the transfer mechanism for any iCloud data that crosses from the EU to the US.
If you haven't agreed to Apple's iCloud terms, your data stays local. The app still tries to use CloudKit, but nothing leaves your device.
I keep analytics on my own server, hosted by Hetzner GmbH in Germany under a Data Processing Agreement, and don't share or sell it to anyone. The only outside service is Apple's iCloud, covered above.
The analytics server uses encrypted connections (TLS) for data in transit. Access to the server is restricted to me.
Buny doesn't use your data for automated decision-making and doesn't build profiles about you.
Events are kept for 24 months, then deleted. Events are linked to an Apple vendor identifier, not your name or Apple ID. See §09 for how to make a data request.
If this policy changes, the date at the top updates. Bigger changes will also show up in the app's release notes.
Under GDPR you have the right to access, correct, delete, restrict, or object to processing of your data, and to ask for a portable copy. Since I'm using legitimate interests as the legal basis, you can object by emailing me. The analytics data can't be tied to your name or Apple ID, so there's very little to retrieve or hand over. If you think that's wrong, email me and I'll check.
If you object to processing under legitimate interests, email me and I'll assess it. If I can't show a compelling reason that overrides your interests, I'll stop processing your data. Practically, analytics are tied to using the app and can't be selectively disabled — but stopping use means nothing more gets sent, and uninstalling all of Buny's developer's apps causes Apple to reset the vendor identifier.
You can also file a complaint with a data protection authority. The lead supervisory authority for Buny's analytics (the server is in Germany) is theBfDI, but you can use your local DPA in any EU country.
You can always email me to ask what data I have on your device, or to have it deleted. I'll do it.
The data lives in structured log entries, so what I send you may look like raw records rather than a clean summary. I'll make it as readable as I can, but I won't pretend I can always produce something tidy.
Email support@buny.app with "Data Request" or "Deletion Request" in the subject. If you know your Apple vendor identifier, include it. If not, I can help you look it up. I'll respond within one month.
If you're a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) give you additional rights.
Categories of personal information collected in the past 12 months:
All of this is collected solely for app improvement and crash detection. I do not sell or share your personal information for cross-context behavioral advertising, so no "Do Not Sell or Share" opt-out applies.
Your California rights:
To exercise these rights, see §09 above or email support@buny.app. I'll respond within 45 days.
Questions? Email me:
support@buny.app