Bunnyki Privacy Policy

Last updated: 27 August 2026

This policy covers both the Bunnyki app (used by owners, managers, and staff for scheduling, availability, and timesheets) and the Bunnyki Clock app (used on tablets at a business location for staff clock-in/out). Both are operated by EatFuh for use by its own staff and locations — these apps are internal workforce tools, not public consumer products, and are not available for general sign-up.

What we collect

• Account and profile information: name, email address, role (owner/manager/staff), and organisation/location assignment.
• Scheduling data: shifts, availability, and timesheet records you or your employer enter.
• Clock-in/out data: timestamps, location (which business location, not GPS), and a hashed PIN used to verify identity at the kiosk — the PIN itself is never stored in plain text.
• Clock-in/out photos (Bunnyki Clock only): a photo taken by the tablet's front camera at each clock event, used to help prevent buddy-punching. This is photo capture only — no facial recognition is performed.
• Device pairing credentials (Bunnyki Clock only): a per-device identifier and secret, stored securely on the tablet, used to link that specific device to a business location.
• Diagnostic data: crash reports and error logs, collected automatically to help us fix bugs.

How we use it

Solely to operate the workforce scheduling and time-tracking service: building rosters, recording attendance, calculating worked hours for payroll, preventing buddy-punching, and keeping the apps running reliably. We do not use this data for advertising, and we do not sell it to anyone.

Who we share it with

We use the following third-party service providers to operate Bunnyki, each of which processes data on our behalf under their own security commitments:

• Supabase — database, authentication, and backend hosting.
• Cloudflare — storage for clock-in/out photos (R2) and this website.
• Resend — sending transactional emails (invites, password resets, shift notifications).
• Sentry — crash and error reporting.

We do not share your data with any other third party, and we do not sell personal information.

Data retention and deletion

Data is retained for as long as your account is active with your employer, and afterward as needed to meet payroll and record-keeping obligations. To request deletion or correction of your data, contact your employer (who administers your account) or reach us directly at the email below.

Children's privacy

Bunnyki and Bunnyki Clock are workforce tools for employees and are not directed at or intended for use by children.

Contact

Questions about this policy or your data can be sent to appshiftflow2026@gmail.com.