Privacy Policy

Last Updated: August 20, 2026

Bujhi.com (“Bujhi”, “we”, “us”, or “our”) respects your privacy and is committed to protecting personal data.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you visit https://bujhi.com, create a Bujhi account, create child profiles, use our AI-powered parenting assistance tools, purchase a subscription, or otherwise interact with our services.

Bujhi is designed as a parent- and adult-facing service. Parents and legal guardians may create child profiles so that Bujhi can provide more relevant and age-appropriate parenting guidance.

Please read this Privacy Policy carefully. By using Bujhi, you acknowledge the processing described in this Privacy Policy. Where applicable, we will obtain your consent before carrying out processing that legally requires consent.

1. Who We Are

For purposes of applicable data protection laws, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018, the data controller responsible for your personal data is:

Legal/business name: [INSERT YOUR FULL LEGAL BUSINESS NAME]

Website: https://bujhi.com

Registered/business address: [INSERT FULL BUSINESS ADDRESS]

Email: [INSERT PRIVACY EMAIL, e.g. privacy@bujhi.com]

Privacy contact: [INSERT PRIVACY CONTACT OR “Our Privacy Team”]

If you are located in the European Economic Area (“EEA”), this Privacy Policy may also apply to the extent that the EU General Data Protection Regulation (“EU GDPR”) applies to our processing of your personal data.

If Bujhi is required to appoint a Data Protection Officer under applicable law, details of our Data Protection Officer will be provided here:

Data Protection Officer: [INSERT IF APPLICABLE / OTHERWISE REMOVE THIS LINE]

2. Who May Use Bujhi

Bujhi is intended for adults, including parents and legal guardians.

Children are not permitted to create Bujhi accounts or use Bujhi independently. Child information may be entered into a Bujhi child profile by a parent or legal guardian for the purpose of receiving personalised parenting assistance.

You are responsible for ensuring that you have the appropriate authority to provide any personal information about a child that you submit to Bujhi.

Where we process children’s personal data, we take account of applicable children’s data protection requirements, including the UK GDPR, Data Protection Act 2018 and, where applicable, the ICO Children’s Code.

3. Personal Data We Collect

We collect only the information reasonably necessary for the purposes described in this Privacy Policy.

A. Parent / Member Account Information

When you register for or use a Bujhi account, we may collect:

Name or display name;
Email address;
Account login information;
Password information in securely protected/hashed form;
Subscription and account status;
Preferences and settings;
Information you provide when contacting customer support; and
Other information you voluntarily provide to us.

We do not store your plain-text account password.

B. Child Profile Information

If you choose to create a child profile, you may provide information such as:

Child’s name or nickname;
Age or age range;
Country or region;
Language;
School grade;
Reading level;
Learning preferences;
Personality or communication preferences;
Interests;
Topics or subjects to avoid;
Family values or preferences;
Information about accommodations or additional support needs; and
Other contextual information you voluntarily provide for the purpose of personalising Bujhi’s responses.

You should provide only information that is reasonably necessary to achieve the intended purpose of the child profile.

Please do not provide unnecessary highly sensitive information, such as a child’s full legal identity documents, exact home address, passwords, financial information, government identification numbers, medical records, or other information that Bujhi does not need to provide its service.

Some information relating to health, disability, ethnicity, religion, or other protected characteristics may constitute special category personal data under applicable data protection law. Where such information is processed, we will rely on an applicable lawful condition under the relevant data protection legislation and will apply additional safeguards where required.

You may delete or amend child profile information through your account where those functions are available.

C. Questions, Prompts and AI Inputs

When you submit a question or prompt through Bujhi, we process the information you provide in order to generate an answer.

Bujhi is designed so that questions submitted through the main answering interface are not intentionally stored as part of your persistent account history, unless a particular feature expressly tells you that information will be saved.

However, a request may temporarily exist in technical systems operated by Bujhi or our service providers, including systems used for security, error detection, abuse prevention, network operation, monitoring, or troubleshooting.

In addition, information sent to an AI service provider may be processed in accordance with that provider’s applicable terms, privacy documentation, contractual commitments, and technical configuration.

For this reason, you should not submit unnecessary sensitive personal information, confidential information, passwords, financial information, government identification numbers, or other information that Bujhi does not need.

D. Payment and Subscription Information

Bujhi uses third-party payment providers to process subscription payments.

Our current payment processor is:

Stripe, Inc.

Payment card information is entered and processed through Stripe’s payment infrastructure. Bujhi does not intentionally collect or store your complete payment card number, card security code (CVC/CVV), or other full payment-card credentials on our own servers.

We may receive or store limited payment-related information necessary to manage your subscription, such as:

Subscription status;
Subscription plan;
Transaction or payment identifiers;
Billing dates;
Payment status; and
Limited card information, such as card brand or last four digits, where supplied by Stripe and used by our application.

The precise information available to Bujhi depends on our Stripe integration.

For more information, please see Stripe’s privacy information.

E. Technical, Security and Usage Information

When you access Bujhi, certain technical information may be collected automatically, including:

IP address;
Browser type and version;
Device type;
Operating system;
Approximate location derived from IP address where necessary;
Referring website or URL;
Date and time of access;
Session information;
Security and authentication information;
Error and diagnostic information; and
Other technical information necessary to operate and protect the service.

We use this information primarily for security, fraud prevention, troubleshooting, service operation, and performance monitoring.

Where analytics or cookies are used for purposes that require consent, we will request consent in accordance with applicable law.

4. How We Use Personal Data

We may use personal data for the following purposes:

To create and manage your Bujhi account;
To provide Bujhi’s parenting assistance services;
To generate personalised answers using information you choose to provide in a child profile;
To process subscriptions and payments;
To provide customer support;
To communicate with you about your account, subscription, security, or service changes;
To maintain, secure, troubleshoot, and improve our website and services;
To detect and prevent fraud, abuse, spam, and other misuse;
To comply with legal and regulatory obligations;
To establish, exercise, or defend legal claims; and
For other purposes explained to you at the time information is collected or where otherwise permitted by applicable law.

We do not sell children’s personal data.

We do not use child profile information for targeted advertising to children.

We do not use child profile information for unrelated purposes unless permitted by applicable law and appropriately disclosed.

5. Lawful Bases for Processing

Depending on the circumstances, we rely on one or more of the following lawful bases under the UK GDPR and, where applicable, the EU GDPR:

Performance of a Contract

We may process personal data where it is necessary to provide the Bujhi services you have requested, including:

Creating and maintaining your account;
Providing subscription services;
Providing personalised AI-generated answers;
Managing your subscription; and
Providing customer support.

Consent

We may rely on your consent where applicable law requires or permits consent, including for certain optional processing activities such as non-essential cookies, marketing communications, or processing certain categories of sensitive information where consent is the appropriate legal condition.

Where we rely on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Legitimate Interests

We may process personal data where necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.

Examples may include:

Maintaining and securing our systems;
Preventing fraud and abuse;
Protecting users and our services;
Responding to support requests;
Maintaining and improving service reliability; and
Establishing, exercising, or defending legal claims.

Where required, we assess and document our legitimate interests.

Legal Obligation

We may process personal data where necessary to comply with a legal obligation, including applicable accounting, tax, regulatory, fraud prevention, or law enforcement requirements.

Special Category Data

Where information contained in a child profile constitutes special category personal data under applicable law, such as certain information concerning health, disability, ethnicity, or religious beliefs, we will process that information only where an applicable Article 9 condition under the UK GDPR/EU GDPR is available in addition to an Article 6 lawful basis.

We will not assume that merely providing information automatically makes all processing lawful. We will apply the appropriate safeguards and conditions required by applicable law.

6. Artificial Intelligence and Third-Party AI Providers

Bujhi uses third-party artificial intelligence services to generate answers.

Depending on the service and configuration used by Bujhi, information submitted through the Bujhi answering tool may be transmitted to an AI provider for processing.

This information may include:

Your question or prompt;
Relevant information from the selected child profile; and
Other information necessary to generate the requested response.

We aim to provide AI providers only with the information reasonably necessary to generate the requested response.

AI Provider Data Use

Bujhi will configure and use AI services in accordance with the applicable contractual and technical settings available to us.

Bujhi does not intentionally instruct third-party AI providers to use Bujhi customer prompts or child-profile information to train general-purpose AI models where our applicable agreement or configuration prevents such use.

However, third-party providers may process information for purposes such as providing the requested service, security, abuse prevention, service operation, or other purposes permitted under their applicable terms and contractual arrangements.

The AI providers currently used by Bujhi are:

[INSERT ACTUAL AI PROVIDER(S), e.g. OpenAI]
[INSERT ACTUAL AI PROVIDER(S), e.g. Google]
[REMOVE ANY PROVIDER NOT ACTUALLY USED]

We may change AI providers from time to time. Where required, we will update this Privacy Policy.

We conduct appropriate due diligence when selecting third-party AI providers and take reasonable steps to ensure that their processing arrangements provide appropriate data protection safeguards.

7. AI-Generated Answers Are Not Professional Advice

Bujhi provides AI-generated parenting assistance and educational information.

Bujhi’s responses are not a substitute for professional medical, psychological, legal, educational, safeguarding, or other professional advice.

AI-generated responses may contain errors, omissions, inaccuracies, or inappropriate recommendations.

Parents and guardians remain responsible for deciding whether and how to use information provided by Bujhi, particularly where a question involves a child’s health, safety, mental wellbeing, safeguarding, or other serious matter.

8. Who We Share Personal Data With

We do not sell your personal data.

We may share personal data with carefully selected service providers where necessary to operate Bujhi.

These may include:

Service Provider	Purpose
Stripe, Inc.	Payment processing and subscription management
AI service providers	Processing prompts and relevant contextual information to generate AI responses
Hosting/cloud infrastructure providers	Hosting our website, database and application infrastructure
Security and monitoring providers	Security, fraud prevention, error monitoring and service reliability
Email/service communication providers	Sending transactional communications and customer support messages
Professional advisers	Legal, accounting, insurance, compliance, or professional services where necessary
Authorities or other parties	Where disclosure is required by law or necessary to protect legal rights, safety, or prevent fraud/abuse

We require processors that process personal data on our behalf to provide appropriate contractual and security protections as required by applicable law.

A current list of material processors may be made available upon request where appropriate.

9. International Data Transfers

Some of our service providers may process personal data outside the United Kingdom or European Economic Area.

Where a restricted international transfer occurs, we will use a lawful transfer mechanism required by applicable data protection law.

Depending on the circumstances, this may include:

An applicable adequacy regulation or adequacy decision;
The UK International Data Transfer Agreement (“UK IDTA”);
The UK Addendum to the EU Standard Contractual Clauses;
EU Standard Contractual Clauses where applicable; or
Another lawful transfer mechanism or exception permitted by applicable law.

Where required, we will also implement appropriate supplementary measures and transfer risk assessments.

Because the exact transfer mechanism depends on the provider, destination, and legal circumstances, we do not represent that a single transfer mechanism applies to every provider.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to provide the service, comply with legal obligations, resolve disputes, enforce agreements, and protect our legitimate interests.

Account and Child Profile Data

Your account and saved child profile information will generally be retained while your account remains active.

If you delete a child profile, we will delete or anonymise the relevant information from our active systems within a reasonable period, subject to:

Technical backup cycles;
Security requirements;
Legal obligations;
Fraud prevention requirements; and
Other circumstances where applicable law permits or requires retention.

Target deletion period: [INSERT ACTUAL PERIOD, e.g. 30 days]

Questions and Prompts

Bujhi does not intentionally retain questions submitted through the main answering interface as persistent account history unless a feature specifically indicates otherwise.

Temporary copies or technical records may nevertheless exist for a limited period in infrastructure, security, error-monitoring, or third-party systems.

The applicable retention period depends on the systems involved.

Billing and Financial Records

We retain financial and transaction information for as long as necessary to meet applicable tax, accounting, audit, fraud-prevention, and legal requirements.

Applicable retention period: [INSERT PERIOD AFTER CONFIRMING WITH YOUR ACCOUNTANT/LEGAL ADVISER]

Technical and Security Logs

Technical and security logs are retained only for as long as reasonably necessary for security, fraud prevention, troubleshooting, and service operation.

Target retention period: [INSERT ACTUAL PERIOD, e.g. 90 days]

Different systems may have different retention periods.

11. Your Data Protection Rights

Depending on your location and applicable law, you may have the right to:

Request access to personal data we hold about you;
Request correction of inaccurate or incomplete personal data;
Request deletion of your personal data;
Request restriction of processing;
Object to certain processing;
Withdraw consent where processing is based on consent;
Request data portability where applicable;
Object to direct marketing;
Request information about certain automated decision-making or profiling; and
Lodge a complaint with a relevant data protection supervisory authority.

These rights are subject to applicable legal limitations and exceptions.

Child Profile Data

Where you have created a child profile, you may generally access, modify, or delete that profile through your Bujhi account where those features are available.

You may also contact us to request access to, correction of, restriction of, or deletion of relevant personal data.

We may need to verify your identity and, where appropriate, your authority to make a request concerning a child’s personal data before completing certain requests.

12. How to Exercise Your Rights

To exercise your privacy rights or ask questions about this Privacy Policy, contact:

Email: [INSERT PRIVACY EMAIL]

Postal address: [INSERT BUSINESS ADDRESS]

We will respond to valid requests within the period required by applicable law.

In some circumstances, we may need additional information to verify your identity before responding to a request.

13. Children’s Privacy

Bujhi is designed for adults, parents, and legal guardians and is not intended for children to create or manage accounts independently.

We do not knowingly permit children to register for Bujhi accounts or use the service independently.

Parents and legal guardians may voluntarily create child profiles for use in connection with Bujhi’s parenting assistance service.

Parents and guardians should avoid entering unnecessary sensitive information about their children.

Where Bujhi processes children’s personal data, we consider applicable children’s privacy requirements and seek to apply principles including:

Data minimisation;
Purpose limitation;
Appropriate security;
Transparency;
Limited data sharing;
Appropriate retention periods; and
The best interests and rights of children.

If you believe that a child has provided personal data to Bujhi without appropriate parental or guardian involvement, please contact us at [INSERT PRIVACY EMAIL].

14. Cookies and Similar Technologies

Bujhi may use cookies and similar technologies to operate the website, maintain security, remember preferences, measure performance, and, where applicable, analyse website usage or provide other functionality.

Cookies that are strictly necessary for the operation of the service may be used where legally permitted without consent.

Where applicable law requires consent for analytics, advertising, or other non-essential cookies, we will request consent before using them.

You may be able to manage cookies through your browser settings or through our cookie consent mechanism.

[IF YOU HAVE A SEPARATE COOKIE POLICY, INSERT LINK HERE: Cookie Policy]

15. Data Security

We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss, destruction, or other unlawful processing.

Measures may include:

Encryption of data in transit using HTTPS/TLS;
Secure password hashing;
Access controls;
Authentication and authorisation controls;
Security monitoring;
Infrastructure security measures;
Backups and recovery procedures;
Least-privilege access where appropriate; and
Appropriate contractual controls with service providers.

No internet transmission or storage system can be guaranteed to be completely secure.

16. Personal Data Breaches

If we become aware of a personal data breach, we will assess the breach and take appropriate action in accordance with applicable data protection law.

Where legally required, we will notify the relevant supervisory authority and/or affected individuals within the applicable statutory timeframes.

17. Automated Processing and Profiling

Bujhi uses AI systems to generate responses based on information supplied by users and, where applicable, child-profile information.

The AI-generated response is intended to provide personalised parenting assistance.

Bujhi does not intend to make legally significant or similarly significant decisions about children based solely on automated processing.

If our use of automated processing changes in a way that triggers additional rights or obligations under applicable data protection law, we will review and update our practices accordingly.

18. Third-Party Websites and Services

Bujhi may contain links to third-party websites or services.

We are not responsible for the privacy practices, content, or security of third-party websites.

You should review the privacy policy of any third-party service before providing personal information to it.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

Changes to Bujhi’s services;
Changes to our data processing practices;
Changes to our service providers;
Changes in applicable law or regulatory guidance; or
Security or operational requirements.

When we make material changes, we will take reasonable steps to notify users, such as displaying a notice on the website or sending an email where appropriate.

The “Last Updated” date at the beginning of this Privacy Policy indicates when it was most recently revised.

20. Complaints

If you have concerns about how Bujhi handles your personal data, please contact us first so that we can try to resolve your concern.

You also have the right to complain to the data protection supervisory authority applicable to you.

If you are in the United Kingdom, the relevant supervisory authority is the:

Information Commissioner’s Office (ICO)

Website: https://ico.org.uk/

If you are located in the EEA, you may generally complain to the data protection authority in the country where you live, work, or where you believe an infringement occurred.

21. Contact Us

For privacy questions, data protection requests, or concerns about this Privacy Policy, contact:

Bujhi.com

Legal entity: [INSERT FULL LEGAL BUSINESS NAME]

Address: [INSERT FULL BUSINESS ADDRESS]

Privacy email: [INSERT PRIVACY EMAIL]

Website: https://bujhi.com

Important: Bujhi’s services are intended to assist parents and guardians. Bujhi does not replace professional medical, psychological, legal, educational, safeguarding, or other professional advice. Parents and guardians remain responsible for decisions concerning their children.