BUNYAD
Data Safety
Effective 14 August 2026 · Bunyad for Android
(com.bunyad.expense)
This is the long form of what Google Play shows on Bunyad's store listing. It lists every kind of data the app collects, what it is for, and whether it goes anywhere else. The privacy policy covers the same ground in prose.
Nothing is shared, and nothing is sold. Bunyad carries no advertising, no analytics, no crash reporting and no third-party SDKs of any kind. Data goes from your phone to the Bunyad server and stops there. The only people who ever see a project are the ones you personally invite onto it.
Data the app collects
| Data | Collected | Shared | Required | Why |
|---|---|---|---|---|
| Name | Yes | No | Required | Identifies your account, and shows who logged an entry on a shared project. |
| Email address | Yes | No | Required | It is how you sign in, and how a project is shared with you. |
| Password | Yes, as a bcrypt hash | No | Required | Signing in. The password itself is never stored and cannot be read back. |
| Photos | Yes | No | Optional | The bill or delivery slip you attach to an expense. |
| Financial information (expense amounts) |
Yes | No | Required to use the app | The amounts, quantities and dates that make up your expense book. No payment instrument is ever involved. |
| Other personal information (vendor name and contact number you type) |
Yes | No | Optional | Recording who you bought from, where you choose to note it. |
| Other user content (project name, typed location, plot size, notes) |
Yes | No | Optional | Describing the build the expenses belong to. |
Data the app does not collect
- Device or GPS location. A project's "location" is a line of text you type. The app never asks the device where it is and holds no location permission.
- Device or advertising identifiers. None are read or transmitted.
- App activity, usage or diagnostics. There is no analytics SDK and no crash reporting.
- Contacts, calendar, microphone, SMS, call logs, files or health data.
- Payment information. Bunyad records what you say you spent. It does not take payments and never sees a card.
Permissions the app asks for
| Permission | When | What for |
|---|---|---|
| Internet | Always | Bunyad is a client for your Bunyad server; without it there is nothing to show. |
| Camera (optional) | Only at the moment you choose to photograph a bill | Taking the picture. The app opens the system camera and receives one image back. |
| Photo picker | Only when you choose to attach an existing picture | You pick the file; the app receives only what you picked and never browses your library. |
Security practices
- Data is encrypted in transit. The released app connects over HTTPS and is built to refuse plain unencrypted connections.
- Passwords are hashed with bcrypt at a work factor of 12, never stored in a readable form.
- The sign-in token is held in Android's EncryptedSharedPreferences, not in ordinary app storage.
- You can request deletion, and you can carry it out yourself from inside the app — see Deleting your account.