Bunk — Privacy Policy

Effective date: October 15, 2026
Last updated: October 15, 2026

Bunk (the "app" or "service") is provided by Omar Abouelsaoud, an individual based in Texas, United States ("we", "us", or "our"). We are responsible for the information-processing practices described here. You can reach us about privacy at support@trybunk.com.

1. What Bunk is

Bunk helps people who share a home keep track of shared costs and bills, payments between housemates, chores, shopping lists, house events, and purchases they're deciding on together. Using it means sharing information with the other members of your household. That's the point of the app, not a side effect.

Bunk is for people in the United States who are 18 or older.

Bunk does not move money or connect to your bank. When you settle up, the app can open Venmo or Cash App with the payment information filled in, and you complete the payment with that service. We do not request or receive your bank or card credentials through this feature and cannot verify that a payment went through. Information voluntarily included in uploaded receipts may contain limited payment-card details, such as the last four digits.

2. Information we collect

Information you give us

• Account details: your email address and name. If you don't give a name, we use the part of your email address before the @ instead. If you create a password, our sign-in provider (Clerk) stores it; we never see it. If you sign in with Google or Apple, they share your name, email address and, for Google, profile photo with Clerk.
• Your agreement to our Terms: when you agreed to the Terms of Service, and which version.
• Profile photo, if you add one.
• Payment handles: your Venmo username and Cash App $cashtag, if you add them, so housemates can pay you.
• Household details: household names, who's in each one, invite codes, and the lease end date if someone adds it.
• Expenses and bills: descriptions, merchants, notes, amounts, tax and tip, dates, categories, who paid, and how each one is split. This includes recurring bills such as rent, with their schedule and end date.
• Payments between housemates: who paid whom, how much, how (for example Venmo or cash), an optional note, and whether the person paid confirmed it.
• Proposals: what someone suggests the house buy, with a description, a link or photo, an estimated price, and each member's vote.
• Shopping lists and favorites: item names, quantities, notes and photos, who added each item and who checked it off.
• Chores: titles, notes, schedules, whose turn it is, progress, and requests to swap or take over a turn.
• House events: titles, notes, dates, who's responsible, and their checklists.
• Votes to remove a member from a household, and each member's answer.
• Photos you upload: receipt photos attached to expenses, and photos on shopping items, favorites and proposals.
• Your settings: which notifications you get and how your Home screen is arranged.
• Messages you send us, if you email us.

Information collected automatically

• Activity history. Every change to a household's shared records is logged: who made it, when, and what changed. Your household sees it as the activity feed.
• Notification details, if you turn notifications on: a push token for your device, your device's model name (for example "Pixel 8"), and your time zone, so the morning reminder arrives in your morning.
• Subscription status: your plan, whether it's in a free trial, when it renews or ends, whether a payment has failed, which app store it's from, and which household it covers. It comes from Apple or Google through RevenueCat (see §4).
• Diagnostic and crash data: error details, app version, device and operating system type, performance timings, and the screens and actions leading up to an error. The app is configured to scrub email addresses, dollar amounts, sign-in tokens and the text of what you tapped before reports are sent. We do not intentionally attach your account name or ID to diagnostic reports or capture screenshots. A service provider may still receive connection metadata, including your IP address, when receiving a report; Sentry is set not to store IP addresses.
• Server logs. Our server records errors and unusual activity, such as hitting a rate limit, which can include your account ID.
• IP addresses. Like any internet service, our server and our providers see your device's IP address when your phone connects to them.
• Age range from your app store, where the law requires it. When you confirm you're 18 or older, the App Store or Google Play may tell the app which age range you're in. The app uses it only to check that you're an adult; it isn't stored or sent to us.

Stored only on your phone

The app keeps some things on your device: your sign-in session (in the phone's secure storage), which household you last opened, display preferences such as theme and calendar view, which activity you've already seen, and which version of the Terms this phone last saw you agree to, with your account ID. We don't receive these.

Links in proposals

When someone adds a link to a proposal, our server fetches that page once to read its title, site name and preview image, so the household sees a preview card instead of a bare address. The site sees that request as coming from our server, not from you. The preview image is then loaded by each household member's phone directly from that site, like any image on the web, so the site can see those phones' IP addresses, as it would if they opened the link themselves.

Our website

Our website, trybunk.com, has no sign-up forms, cookies, analytics or advertising. Cloudflare hosts it and, like any web host, sees visitors' IP addresses and keeps request logs.

Where information comes from

We receive information (1) directly from you when you sign up, make household entries, upload photos or contact us; (2) from other household members when they add your name to shared expenses, payments or other records; (3) from Clerk and Google or Apple if you choose those sign-in methods; (4) from Apple, Google and RevenueCat about purchases and subscriptions; and (5) automatically from the app, your device, our servers and the service providers listed below when Bunk is used.

What information is required or optional

An email address, an authentication method and the information needed to operate your account are required to use Bunk. Joining or creating a household also requires household membership information and agreement to our Terms. Other details—such as a profile photo, payment handles, lease end date, uploaded receipt, shopping-item photo and optional notes—are voluntary. Individual features may not work without the information needed for them; for example, a shared expense needs an amount and a split, and push notifications require a device token and notification permission.

Information we do not intentionally request

We do not request precise device location, your address book or contacts, bank login information, full card credentials, or health information. Please do not include sensitive personal information in notes, uploaded photos or other shared records. Images and text you voluntarily submit can contain information you choose to include, such as an address or masked card number on a receipt. Bunk does not use advertising identifiers or advertising/behavioral-analytics trackers, and we do not track you across other apps or websites. Because we don't track you, we don't change what we do in response to a browser's Do Not Track signal.

3. How we use information

We use personal information for the purposes of operating, protecting and supporting Bunk:

• To provide the app: showing your household its shared records, working out balances and splits, adding recurring bills to the household on their due dates, and suggesting a category for an expense from your household's past expenses.
• To send the notifications you've allowed, such as a payment to confirm, a vote that closed, a bill that was added, or the 8 am reminder of the day's chores and events.
• To manage subscriptions: checking whether a household is covered and limiting it to read-only when it isn't (see the Terms of Service).
• To keep Bunk secure: verifying sign-ins, checking that you belong to a household before showing it, checking uploads, and limiting how often actions can be repeated.
• To find and fix problems using diagnostic data.
• To respond to you when you contact us.

The categories above serve these purposes: account and device information supports sign-in, security and notifications; household records and uploaded content support the features you and your housemates use; purchase information controls subscription access; and diagnostic and network information supports performance, security and troubleshooting. We need some of this information to provide the service you request; other processing follows the choices you make when you add optional content or enable a feature. Where a law requires consent for a particular activity, we will request it.

Clerk sends sign-in and verification codes to your email on our behalf. We don't send marketing emails.

Bunk calculates splits, recurring expenses, category suggestions and saving tips from rules and household records. These are not decisions about your eligibility for housing, credit, employment or other similarly significant services. We do not use automated decision-making to make those decisions about you.

We do not sell personal information, including for monetary or other valuable consideration, or share it for cross-context behavioral advertising. We have not done so in the preceding 12 months. We do not use your information to target ads or to train AI models. We do not offer discounts or other financial benefits in exchange for your personal information or for giving up privacy rights.

4. Who can see your information

Your household

Everyone in a household can see that household's records, including what you added:

• your name, profile photo, and Venmo and Cash App handles;
• expenses, splits, balances and recurring bills;
• payments and whether they were confirmed;
• proposals and how each member voted;
• shopping lists, chores, events, checklists and photos;
• the activity feed;
• votes to remove a member;
• who pays for the household's subscription, if anyone does.

Any member can edit or delete any shared expense. This is on purpose: housemates are equals, and typos happen. Every change is recorded in the activity feed, so corrections are visible, not silent.

Members of one household can't see your other households.

Service providers

These companies provide sign-in, infrastructure, storage, messaging, subscriptions and diagnostics. The categories of information they receive are listed below. They operate under their own terms and applicable data-protection arrangements; their systems may also process technical metadata such as IP addresses and request logs.

Notification text names your household and a short message, which can include a housemate's name and an amount, for example "Maple St: Alex says they paid you $30.00."

Other companies you choose to use

• Apple App Store and Google Play process subscription payments under their own privacy policies. We never see your payment details.
• Google and Apple sign-in, if you use them, share your details with Clerk under their own policies.
• Venmo and Cash App: when you tap to settle up, Bunk opens their app or website with the amount, a note and, if your housemate added one, their username filled in. What happens next is between you and them.

Legal reasons and changes of ownership

We may disclose information when required by law, to respond to lawful requests, or where reasonably necessary to protect safety, rights or security, including investigating fraud or misuse of Bunk.

If Bunk is transferred to a company formed to operate it, or is involved in a sale, merger or reorganization, relevant information may transfer as part of that transaction. We will provide any notice required by law, and the information will remain subject to this policy unless and until it is lawfully updated.

5. Photos

Photos you upload are stored with ImageKit. Each is assigned a web address containing a long, hard-to-guess string, and Bunk displays the photo in your household. Those image addresses are not password-protected: anyone with the exact address can open the image, even if they are not a member of your household. Profile photos are managed by Clerk and may also be accessible through their image URLs. Avoid uploading images you do not want potentially viewed by someone with the link.

Receipts often show things like a store address or the last digits of a card. Bunk keeps receipt photos exactly as you upload them and doesn't read or remove anything from them, so crop out anything you'd rather not share.

When photos are deleted:

• When someone removes or replaces a photo, its file is deleted from ImageKit within two days.
• When an expense, shopping item, favorite or proposal is deleted, its photo is kept for 30 days, so restoring the item brings the photo back. The file is then deleted within a day.
• Photos uploaded but never saved to anything are deleted within two days.
• When you delete your account, see §7.

Deleting a photo from Bunk does not remove copies someone already downloaded or saved. To ask us to delete a particular photo sooner, email support@trybunk.com and identify it. We will review and handle the request under applicable law.

6. Leaving a household

You can leave a household once you're settled up with everyone in it. Other members can remove you only if every other member agrees, and only once you're settled up. Each step of that vote is shown to the household.

When you leave or are removed:

• You lose access to the household.
• Your existing expenses, payments and history remain associated with you while your account is active, because other members' records depend on them. Money owed does not disappear because someone leaves.

When the last member leaves, the household is archived and its invite code stops working. Its records are kept, not deleted.

7. Deleting your account

You can delete your account at any time in the app: More → Delete account. You don't have to be settled up first.

What happens straight away:

• Your sign-in account is deleted from Clerk, along with your email address, password and profile photo, and you're signed out everywhere.
• You leave every household. Any money you owe or are owed stays on your former housemates' balances.
• Your account display name is replaced with "Deleted User" in shared record attribution, and your profile photo, Venmo and Cash App handles, time zone and Home layout are removed from our database. Names or identifying details that someone typed into shared notes, descriptions or uploaded photos may remain in that content.
• Photos on shopping items, favorites and proposals you added are taken off them, and their files are deleted from ImageKit within two days. Receipt photos stay; see below.
• If you signed in with Apple, we ask Apple to end Bunk's access to your Apple sign-in.
• Your push tokens and notification settings are deleted.
• Any payment waiting for you to confirm it is marked confirmed, and any vote to remove you is called off.

What stays, and why:

Expenses, splits, payments, receipt photos, proposals, votes, lists, chores, events and activity history remain with each household; account attribution is changed to "Deleted User" where supported. This is shared household recordkeeping, including financial records, such as receipts, on which other members may rely. You can request review or removal of specific retained content by emailing us; we will assess applicable deletion rights and the effect on other household members.

A reduced account record remains in our database with an internal ID, the former Clerk account ID, the recorded Terms version and agreement date, and technical record dates. It no longer includes your account name, email address or profile photo. Because persistent identifiers can sometimes still be linked to other records held by service providers, we do not describe this record as completely anonymous.

Deleting your account doesn't cancel your subscription. Apple or Google keep charging until you cancel in the App Store or Google Play. While it renews, the subscription keeps covering the household it was bought for. RevenueCat keeps the record of your purchases.

Some copies may remain temporarily in diagnostics, server logs, background-job history and backups. Some third-party subscription records remain under the providers' retention policies. Section 8 describes these retention periods and limitations.

If you sign up again with the same email address, you start as a new user. Your old activity isn't restored.

8. How long we keep information

• Your account: until you delete it; after that, as described in §7.
• Household records: while the household is active and after it is archived, unless records are later removed through an applicable request or system change. There is currently no automatic deletion schedule for archived households. Deleting a shared item in the interface can soft-delete it rather than erase its underlying record; deleted expenses can be restored.
• Invite codes: they expire 7 days after they're made, or sooner if a member makes a new one.
• Push tokens: until you sign out, delete your account, or your phone stops accepting notifications (for example, when the app is uninstalled).
• Photos: as described in §5.
• Diagnostic data (Sentry): up to 90 days.
• Server logs (Railway): up to 90 days.
• Background-job logs (Trigger.dev): up to 30 days for logs, depending on the plan. Trigger.dev may retain individual job records and their inputs for additional time under its retention terms; these records do not currently have a confirmed fixed deletion period. Account-update jobs can include the account ID, display name and profile-photo address.
• Database backup and restore history: older data may remain in recovery systems for up to 7 days after a change or deletion. Such copies are used for recovery rather than ordinary household access.
• Subscription records: RevenueCat, Apple and Google keep these under their own policies.

9. Security

• Everything travels over encrypted (HTTPS) connections. Release versions of the app refuse to talk to our server any other way, and the server refuses unencrypted requests.
• Your sign-in session is kept in your phone's secure storage.
• Passwords are handled by Clerk; we never see or store them.
• Every request is checked against your household membership before anything is shown or changed.
• Photos are uploaded with one-time permission from our server and checked before they're saved.
• We restrict access to Bunk's administrative systems to the developer and use service providers with their own infrastructure security controls. Their storage encryption practices depend on the provider and configuration.

No system is perfectly secure, and photo addresses can be opened by anyone who has them (see §5). If a breach affects your personal information, we'll notify you and any authority as the law requires.

10. Your choices and rights

In the app, you can:

• change your name and profile photo, and add, change or remove your Venmo and Cash App handles;
• turn each kind of notification on or off;
• allow or block camera, photo and notification access in your phone's settings;
• edit or delete shared records, which your household will see in the activity feed;
• leave a household, once you're settled up;
• delete your account.

By email: to request access to or a copy of your information, request correction or deletion, or raise a privacy concern, email support@trybunk.com. When possible, write from the email address associated with your Bunk account; we may need to verify your identity before disclosing or changing personal information. We aim to respond within 45 days, or sooner when applicable law requires. If we deny a request, we will explain the reason where required; you may reply to appeal that decision, and we will explain any applicable options for further review or contacting a state attorney general.

If you no longer have the app: you may request deletion of your Bunk account and associated personal information by emailing support@trybunk.com, as described at https://trybunk.com/delete-account. Please identify the account email address and state that you want your account deleted. Do not send passwords or payment credentials. Any applicable identity-verification and retention limitations will still apply.

When a request affects other members' shared financial records, we may retain information where legally permitted or required, while removing account-level identifiers as described in §7. We will explain any applicable limitation. The fact that data is shared does not automatically exempt it from a legal deletion requirement.

Depending on applicable state law and whether that law applies to Bunk, you may have rights to confirm processing, access, correct, delete or obtain a portable copy of certain personal information, and to opt out of sale, targeted advertising or certain automated profiling. As explained in §3, Bunk does not engage in those sale, advertising or consequential profiling activities. We will not unlawfully discriminate against you for exercising an applicable privacy right. You can withdraw optional app permissions in your device settings, turn off notifications in Bunk, or stop using optional features; this will not necessarily delete information already shared.

11. Children

Bunk is only for people 18 and older. We don't knowingly collect information from anyone under 18. Where the law requires it, we check the age range your app store reports when you confirm your age, and don't let anyone it reports as under 18 continue. If we learn that someone under 18 has an account, we'll delete it. If you believe this has happened, contact support@trybunk.com.

12. Where your information is processed

Bunk is offered to users in the United States. We currently use U.S.-based infrastructure regions for our principal app services, but some providers may access or process information from other locations, including through global notification, support or network services. Such processing is subject to the applicable privacy and security terms governing those services. We do not currently offer Bunk to users outside the United States.

13. Changes to this policy

If we make a material change, we will provide notice before it takes effect when reasonably practicable and as required by law, such as through the app or by email. If the change requires new consent, we will ask for it before the affected processing begins. We will update the "Last updated" date and make the current policy available through Bunk.

14. Contact

Questions, privacy requests, account-deletion requests or complaints: support@trybunk.com

Omar Abouelsaoud (individual developer)
925 S Mason Rd, Suite 546
Katy, TX 77450-3874
United States