Privacy policy
This policy explains what personal data the Buksi mobile app (the “app”) and the buksiapp.com website process, why, for how long, and what your rights are. It is based on the EU General Data Protection Regulation (GDPR) and Hungarian data protection law.
1. The controller
| Controller | [NÉV / CÉGNÉV] (sole proprietor, Hungary) |
|---|---|
| Registered address | [SZÉKHELY] |
| Tax number | [ADÓSZÁM] |
| Registration number | [NYILVÁNTARTÁSI SZÁM] |
| hello@buksiapp.com | |
| Website | https://www.buksiapp.com |
2. Who uses the app?
- Check-in person: the person who checks in daily to say they are OK (e.g. a parent or friend living alone). They have no e-mail or password account: their phone gets an anonymous random identifier, and they connect to a watcher with a 6-digit code (or QR code).
- Watcher: the family member or friend who receives check-ins and alerts. Watchers have an account (Google sign-in or e-mail sign-in link).
3. What data we process, why, and on what legal basis
| Data | Whose | Purpose | Legal basis |
|---|---|---|---|
| E-mail address, sign-in method, name or nickname, optionally phone number and profile photo | Watcher | Account, sign-in, notifications, contact within the family | Contract (GDPR Art. 6(1)(b)) |
| Nickname, optionally profile photo, town (for weather warnings) | Check-in person | Providing the service, personal messages | Contract; entered by the watcher on their behalf |
| Check-in times, short messages, help requests, “Call me” requests, pause mode | Check-in person | Daily check-in and alerts, history | Contract; for alerts, vital interests (Art. 6(1)(d)) |
| Settings (deadline, reminder, grace period, sound, read-aloud, text size) | Both | Providing the service | Contract |
| Helper info (spare key, neighbour, pet) | Check-in person | So the family can help quickly in an alert | Contract; no health data |
| Location (coordinates and accuracy) – only at check-in and help requests | Check-in person | So watchers see where the check-in happened (Premium) | Consent (Art. 6(1)(a)), can be withdrawn any time |
| Battery level and charging state – only at check-in and when the app is opened | Check-in person | Low-battery warning (Premium) | Contract |
| Photos and voice messages with check-ins; photos and notes from the family | Both | Messaging within the family (Premium) | Contract |
| Device token for notifications; the check-in person's anonymous identifier | Both | Delivering notifications; identifying the check-in person without an account | Contract |
| Pairing and invitation codes (valid 24 hours, single use) | Both | Connecting | Contract |
| Subscription status (plan, expiry, purchase token) | Watcher | Providing Premium features | Contract |
| Consent and terms-acceptance log (when, which version) | Both | Proof of consent | Legal obligation (GDPR Art. 7(1)) |
| Referral and gift codes | Watcher | Crediting referral and gift Premium | Contract |
| E-mails with us | Anyone | Handling questions and complaints | Legitimate interest (Art. 6(1)(f)) |
Camera: the app uses the camera only to scan QR codes and take photos, at your request. No image is stored when scanning a QR code.
What we don't process: health data, continuous background location tracking, contacts, advertising IDs, or payment card data (payments are handled entirely by Google Play).
4. Location and consent
Only the check-in person can turn on location sharing on their own phone, after an explanation screen; watchers can only request it. The app asks for “while using the app” permission only and never tracks location in the background. Location is saved only at the moment of a check-in or help request. It can be turned off any time in settings, effective immediately.
5. Children
Only people aged 18 or over may create a watcher account. If the check-in person is under 16, the parent or legal guardian acting as watcher sets up the app and gives any required consent (e.g. for location sharing) on the child's behalf.
6. Who can access the data?
- The family: a check-in person's data is visible only to the watchers paired with them.
- Processors working on our behalf under contract:
| Processor | Task | Where |
|---|---|---|
| Supabase Inc. | Database, sign-in, file storage, server functions | EU (Frankfurt, Germany) |
| Google Ireland Ltd. (Firebase Cloud Messaging) | Push notifications | EU / global infrastructure |
| Google Ireland Ltd. (Google Play) | Subscriptions and payment | EU / global infrastructure |
| Resend Inc. | Alert and sign-in e-mails | [Resend EU region or USA – as configured] |
| Cloudflare Inc. | Website hosting | Global network |
For weather warnings we only send the town's coordinates to MET Norway; this is not personal data. Where a processor may handle data outside the EU, this is covered by an EU adequacy decision (e.g. the EU–US Data Privacy Framework) or standard contractual clauses.
7. How long we keep data
| Data | Retention |
|---|---|
| Account and settings | Until the account is deleted |
| Check-ins, messages, alerts (history) | While the check-in person is connected to at least one watcher, or until account deletion |
| Photos and voice messages | 30 days, then deleted automatically |
| Location | With the history; on request immediately when sharing is turned off |
| Consent log | 5 years after withdrawal (limitation period) |
| E-mails with us | 1 year after the matter is closed |
| Backups | Deleted data disappears from backups within 30 days |
8. Security
Data travels over encrypted connections (HTTPS/TLS). Row-level security in the database ensures everyone can only access their own data and that of the people paired with them. Photos and voice messages are stored privately and opened only with short-lived signed links.
9. Your rights
You have the right of access, rectification, erasure, restriction, objection, data portability, and to withdraw consent at any time. Write to hello@buksiapp.com; we reply within one month. See also Delete your account and data.
10. Complaints
Please contact us first. You may also lodge a complaint with the Hungarian supervisory authority (NAIH, 1055 Budapest, Falk Miksa utca 9–11, www.naih.hu) or the data protection authority in your EU country, or go to court.
11. This website
buksiapp.com uses no cookies, analytics or trackers. Fonts are served from our own server. The server may briefly keep technical logs (IP address, time) needed for operation.
12. Changes
If this policy changes materially, we will announce it in advance in the app and on this page.