Privacy Policy

Version: 3.1
Effective Date: August 27, 2026
Last Updated: August 27, 2026

1. Overview and Scope

Bonded ("Bonded," "we," "us," or "our") operates a subscription-based relationship support application available via mobile and web (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect personal information.

This Policy applies to residents of the United States only.

Bonded is intended for individuals 18 years of age or older. We do not knowingly collect personal information from individuals under 18. If we learn that we have collected personal information from an individual under 18, we will promptly delete such information.

2. Information We Collect

Bonded is designed around data minimization. We collect only the information needed to operate the structured tools within the Service. We do not offer free-text partner messaging or photo/media uploads, and we do not collect that type of content.

Account Information

• Name
• Email address
• Date of birth (age verification)
• Password (managed and secured by our authentication provider; we do not store your password in readable form)
• Partner connection information

Relationship Content

• Private personal journal entries (visible only to you unless you explicitly mark an entry as shared)
• Structured reflections and responses to guided prompts
• Shared goals, milestones, and calendar/planning data
• Conflict, communication, and check-in entries created through our structured tools

Assessment Data

• Emotional check-ins and mood/status updates
• Quizzes, assessments, and responses
• Communication and relationship preferences
• Usage activity (features accessed, time spent)

Billing Information

• Subscription status
• Billing address
• Purchase history
• (Payment details are processed by Apple, Google Play, or Stripe and are not stored directly by Bonded.)

Automatically Collected Information

• Device type and operating system
• Session data and diagnostics
• Approximate location (via IP address only)
• Crash logs
• We do not collect precise GPS location data.

3. Sensitive Information

Bonded stores highly personal relationship content. This may include emotional reflections, assessment results, and private journal entries.

Access to your content is controlled by row-level security rules. Private journal entries and personal assessments are readable only by you. Content becomes visible to your connected partner only through structured tools that are explicitly designed to be shared, or when you deliberately mark an item as shared.

By using the Service, you acknowledge:

• You choose to store this information.
• You understand the risks of storing personal information online.
• You are responsible for informing your partner about content you choose to share.
• Content you intentionally share with your connected partner may remain accessible in your partner's account even if you delete your own account.

4. AI Processing Disclosure

Bonded uses artificial intelligence to generate relationship insights and suggestions.

Important:

• AI-generated content is automated.
• It may contain inaccuracies.
• It is not therapy, medical advice, or professional counseling.
• It should not be relied upon as your sole source of guidance.

We do not use your identifiable personal content to train public AI models. AI providers may temporarily process your content solely to generate responses and operate the Service under contractual confidentiality obligations.

5. How We Use Information

We process personal information based on:

• Your consent
• The need to perform our contractual obligations to you
• Compliance with legal obligations
• Our legitimate business interests, such as improving the Service and ensuring security

We use information to:

• Provide and maintain the Service
• Process subscriptions
• Generate AI responses
• Improve features using aggregated, de-identified data
• Prevent fraud and abuse
• Comply with legal obligations

6. Information Sharing

We do not sell or share personal information for cross-context behavioral advertising.

We may share information with:

Payment Providers

• Apple App Store
• Google Play
• Stripe

Infrastructure Providers

• Supabase
• Cloud hosting providers

AI Service Providers

• Used solely to generate AI responses under confidentiality obligations

Legal Authorities

• When required by law or to protect rights, safety, or security

Business Transfers

• If Bonded is acquired, merged, reorganized, or undergoes a business transition, your information may be transferred as part of that transaction. We will provide notice of any material change in ownership or control of personal information.

7. Data Retention

We retain personal information while your account is active.

Upon account deletion:

• Account data is deleted within 30 days
• Backups may retain data for up to 90 days for disaster recovery
• Aggregated, de-identified data may be retained for analytics

Payment transaction records may be retained for up to seven (7) years for tax, accounting, and legal compliance.

Information subject to legal obligations or disputes may be retained as required by law.

8. Security

We implement:

• Encryption in transit (TLS/HTTPS)
• Encryption at rest for stored data
• Row-level security and role-based access controls that restrict each record to the users authorized to view it
• Secure authentication managed by our authentication provider

No online system is completely secure. We are not responsible for unauthorized access resulting from your failure to safeguard your login credentials.

9. Your Privacy Rights (U.S. Residents)

Depending on your state of residence, you may have the right to:

• Access your personal information
• Request deletion
• Request correction
• Opt out of the sale of personal information (we do not sell data)

To submit a request, email: privacy@bonded.app

We may require verification of your identity before fulfilling requests. We respond within legally required timeframes.

10. Data Deletion

You may delete your account within the app under:

Settings → Account → Delete Account

You may also request deletion by emailing privacy@bonded.app

Deletion requests are subject to verification and applicable legal retention obligations.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a revised "Last Updated" date. Continued use of the Service after changes constitutes acceptance of the updated Policy.

12. Contact

Bonded
United States
Email: privacy@bonded.app

END PRIVACY POLICY