Privacy policy

Who we are

Buenjo is made by Buenhoj Technologies Inc., Mississauga, Ontario, Canada ("we"). Questions about privacy: support@buenhoj.com.

What stays on your Mac

These never leave your Mac:

• everything you say to Buenjo in chat, and its replies (they're rule-based, with no AI service);
• your to-dos, notes and reminders;
• your calendar's contents, and any screenshots;
• speech, which uses macOS's own voices on your Mac.

Buenjo never watches what you type. Its helpers read only local things: your to-dos and reminders, your calendar if you allow it, your battery, and the name of the app in front.

What goes online, and why

The update check

About once a day, the released app reads the list of available versions from GitHub. It downloads an update only when you agree. No system details are sent.

Your account (optional)

You can use Buenjo without an account. If you make one:

• we keep your name, email and password. The server stores only a hash of your password, never the password itself;
• we send email verification codes to confirm your email;
• the app keeps a session token in the macOS Keychain, so you stay signed in;
• "Log out" ends the session, and you can delete your account from the app.

One Mac per account

An account works on one Mac at a time. So the server can tell Macs apart, each account request carries a machine ID: a keyed hash of your Mac's hardware UUID. The UUID itself never leaves your Mac, and the server stores only a hash of that ID. The request also carries your Mac's model name and macOS version, to show which Mac the account is on.

No serial number, user name or computer name is sent, and there's no IP-based tracking.

The heartbeat

While you're signed in, about every five minutes the app says it's still running, so your account shows as online to Buenjo's admins. It sends only the app's version number: nothing about you, or what you or the character are doing.

Plan checks

Plan checks send a random install ID, so the server can sign the plan for that Mac. Without an account, the app asks only which guest features are available, sending the random install ID and nothing else.

The free trial

There's one free trial per person and one per Mac. To keep it that way, we keep a hash of your normalized email address and your Mac's hashed ID, even after the account is deleted.

Payments

Payments are processed through Stripe Managed Payments. For your purchase, Stripe's Link acts as the seller of record: it collects any sales tax or VAT and handles your payment details under Stripe's own privacy policy. We never see your card details. We receive only your subscription's status and dates.

The vault (beta)

The vault is optional. It keeps logins, secure notes and API keys in a file encrypted on your Mac, unlocked with your passphrase or Touch ID. It hasn't been reviewed by an independent security firm.

• Its contents never reach any server. Buenjo never uploads the vault, what's in it, your passphrase, its keys or your recovery key, and the account calls, heartbeat and update check carry no vault data.
• Signing you in happens on your Mac. If you turn it on, Buenjo opens the website in your browser and fills in the login through macOS Accessibility, on your Mac. Buenjo makes no request of its own: the username and password go only into that site's sign-in form, so that website receives them, as if you'd typed them.
• Nobody else can open it. Without your passphrase or recovery key, the vault can't be opened, not by us either.

Permissions Buenjo may ask for

macOS asks you before Buenjo can use any of these. Each is asked for only when a feature needs it, and everything happens on your Mac.

• Calendar: reminders before your events.
• Accessibility: moving, closing and minimizing windows, and pressing a dialog's buttons, when you ask it to (for example "close TextEdit without saving"). Buenjo never moves your mouse.
• Automation (Apple Events): finding Dock icons, moving windows you ask it to kick or lift, lassoing desktop icons (Finder), reading the calendar, and seeing what's playing in Music.
• Desktop and Downloads folders: tidying screenshots into a folder, and moving downloads untouched for 30 days into an "Old Downloads" folder, only when you ask. It moves files; it never deletes them.
• Screen Recording: for screenshots, the colour picker and the telescope (which magnifies the text in a window, kept in memory only). Screenshots are saved on your Mac.
• Accessibility settings: only to point you to macOS's Spoken Content and Personal Voice settings.
• Personal Voice: only if you choose to have Buenjo speak with your own voice.

What we never do

• No ads.
• We never sell data.
• No AI service, and nothing you say to Buenjo leaves your Mac.

How long we keep things

We keep your account details while you have an account. When you delete your account, we delete your account details (name, email, password hash, sessions and plan) within 30 days, except the free-trial records described above and records the law requires us to keep.

Payment and invoice records are kept as long as tax and accounting law requires (in Canada, generally six years).

Your choices and rights

• You can use Buenjo without an account.
• You can change your name, email and password, and delete your account, in the app.
• You can say no to any macOS permission, and the features that need it won't run.
• For anything else, email support@buenhoj.com.

Depending on where you live (for example under Canada's PIPEDA, the EU or UK GDPR, or California's CCPA), you can ask to see, correct, export or delete your personal information, or object to how it's used. Email support@buenhoj.com and we'll answer within 30 days.

We use your information to provide your account and subscription (our contract with you) and, in our legitimate interests, to prevent trial abuse and keep the service secure.

You can also complain to a data protection authority, such as the Office of the Privacy Commissioner of Canada.

This website

This website uses no cookies, no analytics and no trackers, and it loads nothing from other companies: its fonts and images are served from this site.

If you use "Pause animations", that choice is saved in your own browser (local storage) so it stays paused on your next visit. It's never sent to us.

This website is hosted on Amazon Web Services (AWS Lightsail). Like any web server, it keeps standard request logs (such as IP address, browser and page) for security and troubleshooting, for up to 30 days.

Changes to this policy

If we change this policy, we'll update this page and the date at the top. If we make an important change, we'll tell account holders by email or in the app before it takes effect.

Contact

Buenhoj Technologies Inc., Mississauga, Ontario, Canada. Email: support@buenhoj.com.