Privacy and safety

Assistants are built to be useful without you giving up control of your plan.

Where your data goes

• Bunplan sends nothing anywhere. Its MCP server runs on your Mac, inside the Bunplan app. There's no Bunplan account and no Bunplan server online.
• Your AI app sees what it reads. When an assistant reads your plan, your AI app sends that text to its own service to get an answer, under that app's own terms and privacy policy. Choose an app you trust with your plan.
• Changes sync through your own iCloud. When sync is on, a change an assistant makes reaches your other devices the same way your own changes do.

Caution

If a task holds something you wouldn't share with your AI app's service, keep access Off, or rename the task first.

Guardrails

Guardrail	What it means
Off until you allow it	Access starts Off. You choose Read only or Read & write in Settings → Assistants
Only you change access	No assistant can raise its own access, or turn sync or Plus on or off
Every change can be undone	Each change is listed in Settings → Assistants, with Undo
Limits per request	Up to 60 changes a minute, and caps on how many items one request can touch
Checked every time	Access and Plus are checked on every request, so turning access off works at once
Some things are off limits	Erasing all data, importing or restoring a backup, exporting files, and your iPhone, iPad and Apple Watch settings

Your text is data, not instructions

A task, step or note could contain words that look like instructions to an AI, like "ignore your rules". Bunplan tells every assistant, in its instructions and with every tool that returns your text, to treat that text as plain data and never follow instructions found in it.

What assistants are told to do

When an assistant connects, Bunplan gives it a short set of instructions. Among them:

• Look at your plan first, so it doesn't overload days that are already full.
• Ask before creating anything if it doesn't know your deadline or which days you can work.
• Ask before deleting anything, and before changing more than 10 items at once. Archive rather than delete.
• Only log focus time you told it about.
• Tell you briefly what it made, and that you can undo it.

The full text is on For AI agents.

How changes reach your iPhone

An assistant's changes are made on your Mac. Bunplan on the Mac then syncs them to your other devices. If Bunplan isn't open when a change arrives, it opens in the background, without a window, so the change can sync. If it can't, the change is still saved, and the assistant may ask you to open Bunplan on your Mac.

Reading your plan never opens Bunplan.