What BunoChat is

BunoChat is a company's internal chat and calling app, for its employees only. There is no sign-up: the company's administrators create the accounts. All data is kept on the company's server (bunochat.com), and the company is the data controller.

What is collected

• Account: name, user ID, profile photo, and a phone number if an administrator links one (used to send sign-in codes).
• What you send: messages, photos, videos, audio, files, and your location only when you choose to share it.
• Contacts you add in the app.
• Devices and security: device name, IP address and sign-in time, used to warn you of new sign-ins and to approve sign-ins.
• Calls: who joined and when. Audio and video pass encrypted through the company's call server and are not recorded.

Encryption, and what the company can access

Private chats and groups are end-to-end encrypted; the server stores only encrypted messages. The company announcements room is not encrypted.

So that you can read old messages on a new device, the app keeps your recovery key on the company's server, encrypted with a server key. This means the company, and anyone who controls that server, can recover your encrypted message history.

Data that is not end-to-end encrypted, such as names, profile photos, the contacts you add and the announcements room, is visible to the server and the company's administrators.

What is not done

No advertising, no tracking across apps or websites, no usage analytics, no automatic error reports, and no sale of data.

Service providers

• Cloudflare protects bunochat.com's network; data passes encrypted (HTTPS).
• An SMS provider sends sign-in codes to your phone, when the company turns this on.
• OpenStreetMap: map images are loaded through the company's server, so OpenStreetMap does not learn who is looking.
• Telegram: if you link your Telegram account, messages in linked Telegram chats pass through a bridge on the company's server and are also subject to Telegram's policies.

Keeping and deleting data

Data is kept until you or the company delete it. When you leave or ask to close your account, an administrator can deactivate it and erase your data. Ask your company's administrator to see, correct or delete your data.

Other

BunoChat is for employees and not designed for children. Changes to this policy are announced on this page with their effective date. Questions go to your company's BunoChat administrator; see also the help page.