Privacy Policy

1. Introduction & Our Commitment

Welcome to the Bunkros Identity Lab ("Bunkros," "we," "us," "our"). Our mission is to provide a secure and affirming space for self-discovery. Your privacy is not an afterthought; it is a foundational principle of our platform.

This Privacy Policy explains in detail what information we collect, why we collect it, how we use and protect it, and how you can exercise your privacy rights. This policy is written in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and relevant Dutch data protection laws.

🔒 By using our services, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller Information

The entity responsible for processing your personal data (the "Data Controller") is:

Entity Name: Bunkros
Contact Email for Privacy Inquiries: privacy@bunkros.net
General Contact: contact@bunkros.net

3. What Personal Data We Collect

We have designed our platform to collect the minimum amount of data necessary to provide our services. We categorize the data we process as follows:

Data Category	Types of Data	Purpose	Legal Basis
Account Information	Email Address, Encrypted Password, Account Creation Date	Create and manage your secure member account, authenticate logins	Art. 6(1)(b) — Contract Performance
Test & Interaction Data	Answers to questionnaires, AI interactions, personality/identity data	Generate personalized insights, connect results to content library	Art. 9(2)(a) — Explicit Consent for Special Category Data
User-Generated Content	Journal entries, reflections, essays, public profile info	Document your journey, build personal narrative	Art. 6(1)(a) — Consent
Communication Data	Email address, content of support communications	Respond to questions, provide technical support	Art. 6(1)(f) — Legitimate Interest
Technical Data (Anonymized)	Aggregated visitor counts, traffic patterns. NO IP addresses or device IDs	Monitor server health, prevent abuse	Art. 6(1)(f) — Legitimate Interest

⚠️ Special Category Data: Information about sexual orientation, sexual life, and health receives the highest level of protection. We will not process this data without your explicit, freely-given consent. You may withdraw consent at any time.

4. Automated Decision-Making and Profiling

The Bunkros AI uses your Test Data and interactions to perform a limited form of profiling. It is crucial to understand what this means:

What it does:

Analyzes patterns in your inputs to create connections
Suggests relevant content (glossary entries, archetypes, articles)
Helps build your personalized identity map

What it does NOT do:

Make automated decisions with legal or significant effects on you
Provide medical diagnoses or clinical assessments
Render definitive judgments about your identity

💡 The AI's outputs are reflective prompts designed to aid your self-exploration, not authoritative conclusions.

5. Data Sharing and Third-Party Processors

We are committed to not selling, renting, or leasing your personal data to third parties for marketing purposes. We only share data with trusted service providers who are contractually obligated to protect your data:

Infrastructure & Hosting Providers: Secure servers within the EEA where possible
Security Services: Protection from DDoS attacks and malicious bots
Essential Functional Services: Font libraries and core functionality

We have Data Processing Agreements (DPAs) in place with all processors, ensuring GDPR compliance.

6. Data Retention

We believe in data minimization and do not keep your data longer than necessary:

Account & Test Data: Retained while your account is active. Permanently deleted within 30 days of account deletion.
User-Generated Content: Retained while account is active, or until you delete it.
Communication Data: Retained up to 24 months unless required for legal reasons.
Anonymized Technical Data: May be retained indefinitely (cannot identify you).

7. Your Rights Under GDPR

As a user in the EU, you have the following rights:

Right to Access: Request a copy of your personal data
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion of your data ("Right to be Forgotten")
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in a machine-readable format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent for Special Category Data at any time

📧 To exercise any of these rights, contact us at privacy@bunkros.net. We will respond within one month.

8. Data Security

We take security seriously and implement appropriate technical and organizational measures:

Encryption: Passwords are cryptographically hashed; all data encrypted in transit (SSL/TLS) and at rest
Access Control: Strictly limited to authorized personnel
Anonymization: Used wherever possible in analytics
Regular Audits: Ongoing reviews of security practices

⚠️ No method of transmission is 100% secure. You are responsible for keeping your account password confidential.

9. Children's Privacy

The Bunkros Identity Lab is intended for adults only. Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from anyone under 18.

If we become aware that we have collected data from a child, we will take immediate steps to delete that information and their account.

10. International Data Transfers

Our primary operations are within the European Economic Area (EEA). If we use a data processor located outside the EEA, we ensure transfers are protected by:

European Commission's Standard Contractual Clauses (SCCs)
Adequacy Decisions where applicable

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or for legal reasons. We will notify you of significant changes by:

Posting the new policy on this page
Sending a notification to your registered email (for members)