Privacy Policy

Updated 2026-10-11

What we collect

We only collect what Buntra needs to work:

• Your school email.
• Your posts, comments, votes, poll answers and chat messages.
• Your nickname and Vía score.
• Reports you send and people you block.
• Photos and GIFs you post.
• Your phone's push token, if you turn notifications on.
• IP addresses and server logs, to run and protect the app.
• When you accepted the terms, and the school you suggested, if any.
• A note when a post of yours suggests you may need help, so we can show support information.
• Crash reports when the app fails, without your email, name or anything you wrote.
• Once ads are on: the advertising identifier your phone allows.

Why

To run the app, keep the community safe, and follow Vietnamese law. We will never sell your data.

What others will see

Other students only see your animal name, never your email or real name.

Admins act on reported content, but cannot see who wrote it.

When a conversation is reported, admins can read its most recent messages. Messages you unsent or deleted on your side are still kept; admins and the competent authorities can see them when needed.

Where it is stored

Your data is stored on Supabase's servers in Singapore, the closest place to Vietnam where this provider operates.

Some services we use are in the United States (see Services that process data).

When you agree to data processing at sign-up, you agree to this transfer abroad, to Singapore and the United States.

Your account data

Your data is kept while your account is active.

When you delete your account, your content is removed at once. After 30 days we delete for good the data the law does not require us to keep. Data the law requires us to keep, such as messages, is kept until the legal period ends, then deleted.

Your rights

Under the Personal Data Protection Law, you can:

• Ask what data we hold about you.
• Get a copy of your data.
• Ask us to correct wrong data.
• Ask us to restrict or stop processing your data.
• Delete your account and data: Settings, then Delete account.
• Withdraw your consent, by deleting your account.
• Complain to the personal data protection authority.

How to ask

Write to admin@buntra.app; we answer within 30 days.

If something goes wrong

If data leaks, we will tell the authority within 72 hours and tell you, and do everything we can to fix it.

Under 16

Buntra is only for people 16 and older, high-school students included. At sign-up you confirm you are 16 or older. If we learn an account belongs to someone under 16, we delete it.

Contact

For any question about your data, write to admin@buntra.app.

Services that process data

We use these services, and each gets only the data it needs:

• Supabase — stores data and runs the app's servers (Singapore).
• Cloudflare — the admin panel and these policy pages (global).
• Anthropic — checks photos before they are posted (United States).
• Google AdMob — ads, only once your school has them on; high schools get only non-personalised ads (United States).
• GIPHY — shows GIFs; GIPHY receives your IP address when your phone loads a GIF (United States).
• Expo — push notifications and app updates (United States).
• Sentry — crash reports, without your email, name or anything you wrote (United States).
• Resend — sends sign-in codes by email (United States).