US state privacy notice

Because of that, there is nothing to opt out of — but we still honor Global Privacy Control (GPC) signals from your browser as an opt-out request, without asking you to sign in, and the “Your privacy choices” link in the footer.

The categories below are those of the California Consumer Privacy Act (CCPA). The details are in the privacy policy.

• From you, or from the parent who adds you to their family.
• From your phone, watch and earbuds through the app (volume level, headphone model, posture state, earbud events).
• From Apple Health, read-only and only if you allow it (headphone and environmental audio levels).
• From the App Store (subscription status).
• From our website and dashboard (technical logs; analytics only with consent).

• To provide the service you asked for: measurements, alerts, reports, goals, family features, lost-earbud help.
• To run accounts, sign-in, pairing and subscriptions.
• To keep the service secure, prevent fraud and abuse, and fix bugs.
• To answer you and to comply with the law.

Sensitive personal information is used only for what is reasonably necessary to provide the service you requested, keep it secure and comply with the law (Cal. Code Regs. tit. 11, § 7027(m)). We do not use it to infer characteristics about you. That is why we do not offer a separate “limit” link — but you can still ask us to limit its use, and turn off any permission at any time.

• Know and access — what we collected, where from, why and who received it, and a copy (Settings → Download my data).
• Delete — Settings → Delete account, or ask us.
• Correct inaccurate information.
• Limit the use of sensitive personal information.
• Opt out of sale, sharing, targeted advertising and profiling — we do none of these.
• Non-discrimination — we will never deny service, charge a different price or give you a worse service for using your rights.

How to ask

In the app, by email to privacy [at] earbunny.app, or through the contact form. We confirm receipt within 10 business days and answer within 45 days; if we need up to 45 more days we tell you why.

Verification. To protect you, we match your request to your account: requests from the signed-in app are already verified; otherwise we ask you to confirm from the email address on the account, and may ask for more for sensitive data. We never ask for more information than needed and use it only to verify you.

Authorized agents. Someone you authorize may ask for you. We ask for your signed permission and may ask you to confirm your identity directly, unless the agent holds a power of attorney. Parents and legal guardians can act for their children.

The Washington My Health My Data Act, Nevada's consumer health data law (SB 370) and the Connecticut Data Privacy Act protect “consumer health data”. Listening levels, sound dose, Apple Health audio levels, posture state and hearing game results may count as such data, so this section applies to them.

• What we collect: the data just listed, plus precise location at drop events (which could reveal where someone has been).
• Sources: your device and earbuds through the app, and Apple Health if you allow it.
• Why: only to provide the features you or your parent turned on — measurements, alerts, summaries and reports to you and your linked parents.
• Consent: we collect and use it only with your consent (for a child, the parent's), asked for separately, and you can withdraw it at any time in the app.
• Sharing: only with service providers (processors) that run the service on our instructions, and with the linked parents you choose. Never with data brokers or advertisers. We do not sell consumer health data.
• No geofencing: we never set virtual boundaries around health care facilities.

You have the right to confirm whether we collect, share or sell your consumer health data, to access it, to get a list of all third parties and affiliates we shared it with (with contact details), to withdraw consent and to have it deleted, including from our backups within 30 days. Use the same channels as in section 6; we answer within 45 days. If we decline, you can appeal (section 8). Washington residents may contact the Washington Attorney General; Nevada residents the Nevada Attorney General.

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island and other states with privacy laws have similar rights: to confirm and access, correct (where the state provides it), delete, get a portable copy, and opt out of targeted advertising, sale and profiling. We process sensitive data only with your consent, and for a child under 13 only with a parent's consent under COPPA. For users we know are under 18 we do no targeted advertising, sale or profiling.

Appeals. If we decline your request, reply to our answer with “appeal” or write to privacy [at] earbunny.app. Someone not involved in the first decision reviews it and we answer within the time your state allows (45 to 60 days), explaining our reasons. If you disagree with the outcome, you can contact your state Attorney General.

Children's accounts are created by a parent. For children under 13, we collect data only after parental consent under COPPA — see our COPPA notice to parents. California residents under 18 can ask us to remove content they posted (such as a display name or a cheer) under Cal. Bus. & Prof. Code § 22581.

We do not disclose personal information to third parties for their direct marketing (Shine the Light, Cal. Civ. Code § 1798.83). Questions about this notice: privacy [at] earbunny.app.