App Privacy
BuntiBox Privacy
This page describes the privacy principles for BuntiBox. BuntiBox is currently in preparation and not yet publicly available. All information below reflects the intended design and will be reviewed and confirmed before launch.
Last updated: May 27, 2026. This document describes the planned privacy design. The final legally binding version will be published with the app release.
1. Controller
Anatoli Bystrow
Uhlenbrooksweg 20
28865 Lilienthal
Germany
Email: support@luminova-labs.com
2. Data processed by BuntiBox
BuntiBox is planned as a private family archive for children's artwork. The app may process the following data entered by the user:
- Photos and scans of children's artwork
- Notes and text descriptions
- Names or pseudonyms of children
- Dates and other context information
3. Local processing
The app is designed to store and process all personal content locally on the user's device. Data is not transmitted to external servers unless a feature explicitly requires it and the user actively enables it.
Legal basis (planned): Art. 6(1)(a) GDPR — consent, given when the user enters data into the app. For purely local processing, GDPR obligations of the controller are limited. The user acts as the data subject and primarily controls their own data on their own device.
4. Cloud, analytics, advertising, and tracking
Version 1 is planned without advertising, tracking, or behavioural analytics. If crash reporting or technical diagnostic services are used, this will be decided before launch and documented here transparently, including the legal basis and the service provider.
5. Export and deletion
Export and deletion features will be documented once they are implemented and tested in the app. Content stored locally can be removed through the app or via the device's app data management. Deleting the app removes all locally stored data.
6. Your rights
Where the GDPR applies to the processing of your data, you have the following rights:
- Right of access (Art. 15 GDPR): You may request information about the personal data processed about you.
- Right to rectification (Art. 16 GDPR): You may request correction of inaccurate data. In the app, you can edit entries directly.
- Right to erasure (Art. 17 GDPR): You may request deletion of personal data. Locally stored data can be deleted directly in the app or by removing the app.
- Right to restriction of processing (Art. 18 GDPR): You may request that processing be restricted under certain circumstances.
- Right to object (Art. 21 GDPR): Where processing is based on legitimate interests, you may object at any time.
To exercise any of these rights, contact us at support@luminova-labs.com.
7. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for the controller is:
Die Landesbeauftragte für den Datenschutz Niedersachsen (LfD)
Prinzenstraße 5
30159 Hannover
Germany
Phone: +49 511 120-4500
Email: poststelle@lfd.niedersachsen.de
8. Contact
Privacy questions about BuntiBox can be sent to support@luminova-labs.com.