Privacy Policy

Overview

BunnyEars AI (“BunnyEars,” “we,” “us,” or “our”) operates Warren, a family assistant that helps parents stay on top of their children’s school deadlines, activity sign-ups, camp registrations, and appointments. Warren connects to your Gmail inbox, identifies child-related emails, and delivers organized summaries via SMS.

We built BunnyEars to be minimal, transparent, and trustworthy. We store the minimum data needed to operate the service. We do not sell your data. We do not use it for advertising.

Questions? Email us at privacy@bunnyears.ai

What We Access

Gmail (read-only)

We request read-only access to your Gmail inbox using the gmail.readonly scope. We use this access solely to identify emails related to your children — school communications, camp registrations, permission slips, activity sign-ups, and medical appointments.

• We do not read, store, or process emails unrelated to your children’s activities and schedules
• We never send, delete, or modify any email on your behalf
• We do not store the content of your emails — emails are read, processed to extract action items, and immediately discarded
• We do not use Gmail data for advertising, AI model training, or any purpose other than generating your family digest

Google Calendar (read-only)

We request read-only access to your Google Calendar using the calendar.readonly scope to include upcoming family events in your weekly digest. Only event titles and dates are used. Calendar content is not stored.

Google Profile

We access your basic Google profile (name and email address) to identify your account. We do not access contacts, Drive, or any other Google services.

What We Store

• Account details: Your name, phone number, and Gmail address
• Your children’s info: Names, ages, and schools — used only to personalize your digest
• OAuth tokens: Encrypted refresh tokens that allow Warren to access your Gmail and Calendar on your behalf. These are stored securely and never exposed in client-side code.
• Extracted action items: The actionable summaries Warren identifies from your emails (e.g., “Return permission slip by June 3”). Not the emails themselves — only the extracted item. Auto-deleted after 90 days or when marked done.
• SMS conversation history: Your messages to Warren and his replies, retained for up to 90 days to provide conversational continuity.

We do not store full email content. We do not store email body text, attachments, or message threads.

AI Processing

Warren uses Anthropic’s Claude API to classify emails and generate responses. Email subjects, senders, and relevant snippets are sent to Anthropic’s API for processing. Anthropic does not retain API inputs and does not use them to train models. See Anthropic’s Privacy Policy.

How We Use Your Information

• Weekly digest: Every Monday we scan your Gmail and Calendar, extract child-related action items, and send you an organized SMS summary.
• Deadline alerts: When we detect a deadline within 36 hours, we send an immediate SMS alert.
• Conversational responses: When you text Warren a question, we use your stored digest data and may re-read relevant emails to answer.
• Service improvement: Aggregated, non-identifying usage data helps us improve accuracy. Individual data is never used for this purpose.

We do not use your data for advertising. We do not build profiles for marketing. We do not sell your data to anyone.

Third-Party Services

We use a small number of trusted services to operate BunnyEars:

• Supabase — database and authentication infrastructure
• AWS (Amazon Web Services) — SMS message delivery
• Anthropic — AI processing for email classification and conversation
• Vercel — website hosting
• Railway — backend service hosting

These providers process data on our behalf and may not use your data for their own independent purposes. No Gmail or Calendar data is shared with third parties beyond what is necessary to deliver the service.

Security

• OAuth tokens are stored encrypted and never exposed in client-side code
• All data is transmitted over HTTPS/TLS
• Row-level security ensures each family’s data is isolated from other users
• Access to production systems is restricted to authorized personnel

Data Retention & Deletion

• Email & calendar content: never stored — processed in memory and discarded immediately after your digest or reply is generated.
• Extracted action items & SMS history: retained up to 90 days, then automatically deleted.
• On deleting your account (or revoking Gmail access): we immediately stop all processing and revoke & delete your Google OAuth tokens; remaining stored data (extracted items and message history) is deleted within 90 days.
• Delete anytime: text DELETE MY ACCOUNT to Warren, or email privacy@bunnyears.ai.

Children’s Privacy

BunnyEars is a service for parents and guardians. We collect limited information about children (names, ages, schools) solely to personalize your digest. Children do not interact with our service directly and we do not knowingly collect personal information from anyone under 13.

Your Controls

• Revoke Gmail access anytime: Visit myaccount.google.com/permissions and remove BunnyEars. This immediately stops digest delivery.
• Stop SMS: Reply STOP to any message from Warren.
• Request your data or deletion: Email privacy@bunnyears.ai. We will respond within 30 days.
• California residents (CCPA): You have the right to know what we collect, request deletion, and opt out of data sales. We do not sell personal data.

Changes to This Policy

We may update this policy as the service evolves. Material changes will be communicated via SMS. The “Last updated” date at the top reflects the most recent revision.

Contact