Privacy

Bukit · last updated 21 September 2026

Nothing about how you use Bukit leaves your phone unless you switch it on. Sharing is off when you install the app, and it stays off until you turn it on in Settings.

What stays on your phone

Your reading, your saved words and sentences, your review history, your streak and your settings are stored on the device and are not uploaded. There is no progress sync yet. If you delete the app, that goes with it.

If you add your own Anthropic API key, it is held in the iOS Keychain, marked device-only, and is never sent anywhere except to Anthropic when you use it.

What is sent if you turn sharing on

Settings → “Share to improve the app”. With it on, Bukit sends a log of what happened, not what you wrote:

• Event names such as opening the app, finishing a lesson, reviewing a card, or playing a song.
• A fixed, short list of properties alongside them — the lesson title, the language, a tier, a score, a duration, a pass or fail. Free text is never included; anything not on that list is dropped before sending.
• A random identifier created on this device. It is not your Apple ID, your advertising ID, or anything that identifies you personally.
• App version, iOS version, device model (for example iPhone17,1), and your locale.
• Performance figures from iOS: launch time, time the app spent unresponsive, crashes, and whether iOS shut the app down for memory.

This is used to see which parts of the app are worth keeping and which are broken. It is not sold, not shared with advertisers, and not used to build a profile of you.

Talking to Rara

Bukit’s conversation partner is a language model. What you type in a chat is sent off the device — it has to be, for a reply to come back. It goes to Bukit’s server and on to Anthropic, which generates the reply. This happens whether or not sharing is switched on, because it is the feature working rather than analytics.

Anthropic does not train models on it. Bukit keeps a count of how many conversations you have had, to apply the weekly free allowance, and a short note of things you have told the partner about yourself so it can remember them next time. You can read and clear those notes in Settings → Privacy.

Accounts

Bukit gives your device an anonymous account so chat can work without asking you for anything. It holds an identifier and nothing else — no email, no name.

If you sign in with Google or with an emailed code, Bukit stores your email address, so your account can be found again on another phone. That is the only personal detail it holds.

Deleting it

Settings → Delete account and data removes everything held on the server for you — the account, the events, the chat counts — and cannot be undone. What is on your phone is yours and is left alone; delete the app to remove that.

You can also clear the log on the device at any time with Settings → “Clear learning events”, and turn sharing off again whenever you like.

Children

Bukit is not aimed at children under 13 and does not knowingly collect anything from them.

Who runs it

Bukit is made by one person. Data is held in a Supabase project in the EU. If you want to ask something, or want your data removed and cannot use the button, write to aaron@trybukit.com.