trust & safety
Built for kids. Trusted by parents.
How Buni handles accessibility, privacy, safety, and parental controls — written plain for parents, educators, and Apple's editorial team.
Accessibility
- VoiceOver complete. Every drawing tool, every navigation control, every art result has an accessible label.
- Dynamic Type to XXL.All UI text scales with the child's preferred reading size.
- Reduce Motion respected. All animations check
UIAccessibility.isReduceMotionEnabledand short-circuit when on. - WCAG 2.2 AA contrast on every surface.
- Apple Pencil support on iPad with pressure + tilt.
Privacy
- No ads. No trackers. No data sold. Ever.
- No third-party SDKs for analytics or attribution. SKAdNetwork only.
- Photos discarded server-side immediately after processing. Never stored on our servers.
- Guest mode works for the entire app — no account required to color, save, or print.
- Sign in with Appleis the only optional auth method (Apple's privacy-first login).
- COPPA-compliant.Built to the Children's Online Privacy Protection Act.
- EU GDPR-K-aware. DSA Trader status declared.
- Full Privacy Policy and Privacy Choices are public.
Generation Safety
Every generation passes through a two-stage safety pipeline before it ever reaches a child:
- Google Gemini safety filters set to
BLOCK_LOW_AND_ABOVEon all four harm categories (Harassment, Hate Speech, Sexually Explicit, Dangerous Content). - Buni custom block list— additional server-side filtering for weapons, blood, monsters, skeletons, and a curated set of categories that are technically “safe” for the Gemini filter but inappropriate for ages 4–7.
- Long-press to report. Every generated image in the app is long-pressable to open a Report sheet. Reports go to a moderation queue and are reviewed within 24 hours.
- Failure-safe.If any stage of the safety pipeline errors, we return a benign “try another photo” message rather than serving the candidate image.
Parental Controls
- Parental gate before account creation and before any in-app purchase — a math challenge a typical 4–7 year old cannot solve.
- Settings → Account → Delete Account permanently deletes the Clerk user and subscription record.
- Family Sharing enabled on Buni Pro Annual — one subscription serves the whole family.
- Ask-to-Buy compatible: paywall politely waits for parent approval.
Editorial Advisory
Buni's onboarding, parental gate, and safety pipeline have been reviewed by a three-person educator advisory board (K–2 teachers from public, private, and Montessori settings).