Tindlo Inc.

Privacy Policy

Draft updated: October 13, 2026. Effective when Runny Bunny is publicly released. This draft should be reviewed by qualified counsel before launch.

This Privacy Policy explains how Tindlo Inc. (“Tindlo,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects information when you use the Runny Bunny website, mobile applications, and related services.

1. Information we collect

Listening without an account

You can browse, search, and listen without creating an account. The website does not require your name, email address, or precise location for playback. Basic network and security logs, such as IP address, request time, browser or device type, and error information, may be processed by our hosting providers to deliver and protect the service.

Account information

If you create an account, we may collect your email address, password credential or third-party sign-in token, email-verification status, account identifier, saved podcasts, hearts, notification settings, and profile preferences. Passwords are intended to be handled by a managed authentication provider and not stored by Tindlo in readable form.

Waitlist

If you join the mobile-app waitlist, we collect your email address, consent status, submission time, and limited request metadata used to prevent abuse. The public website can add an address but cannot read the list.

Listening and recommendation activity

After content actively plays for at least 30 seconds, we may record a podcast or episode identifier, playback time, category, a pseudonymous installation or account identifier, and an optional broad area code. We use these events to produce recommendations and rankings and to prevent artificial ranking manipulation.

Community content

If hearts, comments, reports, or other community features become available, we may process the content you submit, its associated account identifier, timestamps, moderation status, and reports or blocks you create. Public comments will be visible to other users.

Support

If you contact us, we collect your email address, message, and any information you choose to include. Do not send passwords, verification codes, payment details, or other unnecessary sensitive information.

2. Optional approximate location

Location is requested only after you choose the “Within 10 miles” feature. Runny Bunny requests foreground approximate location, converts coordinates on your device to a broad area cell, and immediately discards the coordinates. We do not request background location and do not retain precise GPS coordinates. Nearby rankings appear only when enough listeners are represented to reduce re-identification risk; otherwise we show a broader ranking.

3. How we use information

  • provide playback, search, accounts, synchronization, notifications, and support;
  • personalize and rank English-language podcast recommendations;
  • calculate aggregate U.S., Canadian, and optional nearby trends;
  • moderate comments, respond to reports, and protect users;
  • detect fraud, spam, security threats, and ranking manipulation;
  • debug, maintain, and improve the service;
  • comply with law and enforce our agreements.

Where GDPR or similar law applies, our legal bases may include performance of a contract, consent, legal obligations, and legitimate interests such as security, abuse prevention, debugging, and service improvement.

4. Service providers and third-party content

We use Amazon Web Services for hosting, content delivery, logs, and private waitlist storage in the United States. Podcast catalog results may be obtained through Apple’s public catalog services. Podcast audio and artwork are delivered by publishers and their hosting providers. YouTube videos, when offered, use Google or YouTube services. These providers receive network and device information needed to answer requests and deliver media, and their own terms and privacy notices apply. We do not authorize providers to use account or waitlist information for their own advertising.

5. Sharing and sale

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We may disclose information to service providers operating under contractual restrictions, when you direct us to, to protect users and the service, in a corporate transaction subject to appropriate safeguards, or when required by law.

6. Cookies and local storage

We may use essential cookies or local storage for session security, preferences, locally saved hearts, and recent listening history. Optional analytics or advertising cookies will not be enabled without any consent required by applicable law. Refusing optional tracking will not prevent basic browsing or playback.

7. Retention and deletion

  • Ranking events: no more than 30 days unless aggregated or de-identified.
  • Waitlist email: until the launch-notification campaign ends, or earlier on request.
  • Account and synchronized data: while your account is active, then queued for deletion and removed from active systems within 30 days unless law requires retention.
  • Public comments: until deleted by you, removed through moderation, or the account is deleted, subject to limited legal or safety retention.
  • Support messages: normally up to six months after resolution unless a longer period is required for legal or security reasons.
  • Security logs: only as long as reasonably needed for threat detection, investigation, and legal compliance.

Backups may retain encrypted residual copies for a limited rotation period before automatic deletion.

8. International transfers

Runny Bunny is designed for users in the United States and other regions, and information may be processed in the United States and countries where our service providers operate. Where required, we use appropriate safeguards such as contractual data-protection terms. Network transmissions use HTTPS/TLS where supported.

9. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, restrict, object to processing of, or receive a portable copy of personal information; withdraw consent; opt out of sale or sharing; and appeal certain decisions. You may refuse location, disable notifications, delete local data, remove comments, and delete your account. Submit requests to bunny@tindlo.com. We may need to verify your request. You may also complain to your local privacy authority.

10. Security

We use measures intended to protect information, including encrypted transport, restricted AWS access, least-privilege permissions, private database access, and managed authentication. No system is completely secure, so we cannot guarantee absolute security. If a breach creates a legally reportable risk, we will notify affected users and regulators as required.

11. Children

Runny Bunny is not directed to children under 13, and account or community features are not intended for anyone below the minimum digital-consent age applicable where they live. We do not knowingly collect personal information from such children. Contact us if you believe a child provided information so we can investigate and delete it.

12. Changes

We may update this policy as the service changes. We will post the updated date and give additional notice for material changes when required by law, including email or in-app notice where appropriate.

13. Contact

Privacy questions, rights requests, and deletion requests: Tindlo Inc., Suite 2, 6th Floor, 85 Seonyu-ro, Yeongdeungpo-gu, Seoul, Republic of Korea; bunny@tindlo.com. Account deletion instructions are available here.