Privacy
Privacy Policy
Last updated · November 4, 2026
Bondary is built around something private: how you feel about the people you date. We take that seriously. This policy explains what we collect, how we use it, who we share it with, and the choices you have.
This Privacy Policy applies to the Bondary mobile app and related services (together, the “Service”), provided by Bondary, Inc. (“Bondary,” “we,” “us”). By using the Service, you agree to the practices described here.
If you use Bondary through TestFlight or another beta testing channel, this Privacy Policy still applies to the information you provide and the data we collect during testing.
Who can use Bondary
Bondary is intended only for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.
Information we collect
Information you provide
- Account and profile information. When you sign up, we collect your email address and name. During setup you may also provide your date of birth and a few preferences (such as the kind of relationship you are looking for and the tone you prefer for Bondary’s reflections). If you sign in with Google or Apple, we receive a basic profile identifier, your email address, and any name you choose to share from that provider so we can create, authenticate, and secure your account.
- Your entries. The heart of Bondary is what you write: notes about your dates, the people you are seeing, and the moments and reflections you log over time. You decide what to write. We store it so the Service can reflect patterns back to you. Photos or screenshots you attach to an entry (for example, a screenshot of a conversation) are stored with that entry and sent to our AI provider for processing, as described under “How AI is used in Bondary.”
- Messages to us. If you email us or submit feedback, we keep that correspondence.
- Purchases and subscriptions. If you subscribe, Apple processes the payment; we never receive your card or bank details. Apple and our subscription provider, RevenueCat, tell us which plan you bought, its price and currency, when it started, when it renews or ends, whether it was a first-month offer, and whether a renewal payment failed. We keep this with your account to give you the plan you paid for and to show your billing status in the app.
Information collected automatically
- Usage and device data. Basic technical information such as app version, device type, operating system, and general activity needed to operate the app, fix bugs, and keep accounts secure.
- Analytics and product usage. We use a third-party product analytics tool (PostHog) to understand how people use the app, such as which features are used and how the interface performs, so we can improve it. We also capture session replays of how the interface is used. These replays are configured to mask the text you type and the content of your entries wherever technically supported. We do not intentionally record the substance of your entries in session replays. You can switch this off in the app under Settings → Privacy → Anonymous Analytics.
- AI usage records. Each time the app asks the AI to process something, we record a technical row for that request: which account it belonged to, which feature triggered it, which model answered, how much it consumed (token counts, or the approximate size of the input for the request types that do not report tokens), and how long it took. These rows never contain your entries or the AI’s reply — only counts and timings. We use them to understand what the Service costs to run, to diagnose reliability and performance problems, and to detect abuse. Because they are necessary to operate the Service, they are kept regardless of the Anonymous Analytics setting, which governs product analytics only.
How we use your information
- To provide the core Service: storing your entries and surfacing patterns and reflections across time.
- To create, authenticate, and secure your account.
- To process your subscription, give you the plan you paid for, and tell you about problems with it, such as a failed renewal.
- To send you account and service related messages (for example, sign-in and security notices).
- To send you occasional offers and product updates by email, such as an offer to come back after you cancel. You can turn these off anytime in Settings → Notifications or with the unsubscribe link in any of these emails.
- To maintain, debug, and improve the app’s reliability and performance.
- To detect, prevent, and address fraud, abuse, and security issues.
- To comply with legal obligations.
We do not sell your personal information, and we do not use the content of your entries to show you advertising.
How AI is used in Bondary
To turn your entries into reflections and pattern summaries, Bondary sends relevant text to a third-party AI provider, Google (the Gemini API), which processes it and returns a response to you inside the app. Photos or screenshots you attach to an entry are sent to the same provider so their content can be read into your entry.
If you use voice dictation, the recording is sent to Google (the Gemini API) to be transcribed into text. The transcript becomes part of your entry; Bondary does not keep the recording.
On the content you send for AI processing: Bondary uses Google’s Gemini API on a paid tier. Under Google’s terms for paid API use, Google does not use your prompts or the AI’s responses to train or improve its models. Google may process and retain this data as described in its then-current Gemini API terms and data policies, including for abuse detection, security, and legal compliance.
Bondary does not use your entries to train any AI models, our own or anyone else’s.
About the reflections Bondary gives you
Bondary’s reflections, summaries, and pattern reads are generated by AI. They can be incomplete or wrong, including when they describe other people you write about. They are meant to help you think, not to make decisions for you, and they are not professional advice of any kind (legal, medical, psychological, or otherwise). You should use your own judgment about your relationships and the people in your life. If a reflection contains inaccurate personal information about you, contact us and we will make a reasonable effort to address it.
When your entries mention other people
Because Bondary is about your dating life, your entries will often include details about other people, such as someone you are seeing. You decide what to record, and you are responsible for the information you choose to write. We use this information only to provide the Service to you, and we do not contact or build profiles of the people you write about. If someone believes information about them has been submitted to Bondary and contacts us, we will review the request consistent with applicable law, user privacy, and account security.
Sensitive information
Your entries may include sensitive personal information, such as details about your relationships, intimacy, emotional state, or other people in your life. You choose what to include. Please avoid entering information you would not want processed by the Service, and remember that you can edit or delete your entries at any time.
Service providers we share data with
We share information only with the vendors that make the Service work, and only as needed for them to perform their function. Each is bound to protect your data and use it only for the services they provide to us.
| Provider | Purpose | Their policy |
|---|---|---|
| Supabase | Database, account storage, and authentication. Stores your account and entries. | supabase.com/privacy |
| Vercel | Hosting and deployment for our web app (including the signed-in interface) and account email pages. Vercel handles hosting-layer data such as IP addresses, request metadata, and server logs. It does not receive or store the content of your entries, which your client sends directly to Supabase. | vercel.com/legal/privacy-policy |
| Google Identity Services | Sign-in and authentication when you choose to log in with Google. | policies.google.com/privacy |
| Apple | Sign in with Apple when you choose to log in with Apple, and payment processing for in-app subscriptions through the App Store. | apple.com/legal/privacy |
| RevenueCat | Manages in-app subscriptions: checks purchases with Apple and keeps your subscription status in sync. It receives a random account ID (not your name or email), your purchase and subscription history, and basic device information such as device type and operating system. It does not receive your entries. | revenuecat.com/privacy |
| Google (Gemini API) | AI processing of entries to generate reflections. | ai.google.dev/gemini-api/terms |
| Resend | Sending account and service emails, and offer emails unless you turn them off. | resend.com/legal/privacy-policy |
| PostHog | Product analytics and session replay to measure usage and improve the app. | posthog.com/privacy |
We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users or the public. If Bondary is involved in a merger, acquisition, or sale of assets, we will notify you before your information becomes subject to a different privacy policy.
Data retention
We keep your account information and entries for as long as your account is active. When you ask to delete your account, your account is paused immediately and your data is scheduled for permanent deletion. After a 30-day grace period — during which you can cancel by signing back in — we remove your entries and personal information from our active systems, and purge them from backups on a rolling schedule after that. We may retain limited information for longer where we are required to comply with legal obligations, resolve disputes, or prevent fraud and abuse, including keeping a record that a deletion request was made and honored.
We may also process information in aggregated or de-identified form (for example, overall usage trends) to understand and improve the Service. We do not attempt to re-identify this information.
Some information may also remain with our service providers for a limited period in line with their own retention policies, and certain data processed by Google through the Gemini API is retained by Google under its terms rather than by us.
Your choices and rights
- Access and delete. You can delete your account at any time from within the app. Your account is paused immediately and permanently deleted, along with all your data, after a 30-day grace period. You can cancel within that window by signing back in.
- Correct your information. You can edit your entries and account details in the app.
- Export your data. You can export a copy of your data from within the app.
- Turn off product analytics. Settings → Privacy → Anonymous Analytics switches off the product analytics and session replay described above. It does not switch off the AI usage records, which are counts and timings with no entry content and are necessary to operate the Service.
- Regional rights. Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA) or the EU General Data Protection Regulation (GDPR), including the right to access, correct, delete, or port your data, and to object to certain processing. Where applicable, you also have the right to lodge a complaint with your local data protection authority. We will respond to these requests as required by applicable law. We do not sell or share personal information as those terms are defined under the CCPA.
To exercise any right, use the in-app controls or contact us at the address below.
Data security
We use industry-standard measures to protect your information, including encryption in transit and access controls on our systems. No method of storage or transmission is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to respond promptly to any incident.
International users
Bondary is operated from the United States, and your information is processed and stored in the United States and in the regions where our service providers operate. By using the Service, you understand that your information may be transferred to and processed in countries with different data protection laws than your own.
Changes to this policy
We may update this policy as the Service evolves. When we make material changes, we will update the date above and, where appropriate, notify you in the app or by email. Your continued use of the Service after an update means you accept the revised policy.
Contact us
Questions about this policy or your data? Reach us at privacy@bondary.ai.
Bondary, Inc.
Delaware, United States