Privacy Policy

1. Who we are

Bondinary Ltd ("Bondinary", "we", "us", or "our") operates the Bondinary platform, including the mobile application and web dashboard. Our registered address is in the United Kingdom. For any privacy-related questions, contact us at [email protected].

2. What data we collect

We collect the following categories of personal data:

• Account information: display name, email address, and optional profile photo when you create an account.
• Content you create: signals (posts), comments, reactions, bonds, and other interactions within spaces you join.
• Device and usage data: device type, operating system, app version, and anonymised usage analytics to improve the product.
• Camera access: only when you choose to scan a QR code to join a space or upload a photo. We do not access the camera in the background.
• Push notification tokens: if you opt in to notifications, we store your device push token to deliver alerts about matches and activity.

3. How we use your data

• To provide and operate the Bondinary platform.
• To match you with relevant people in spaces you've joined, based on the signals you post and the intent you express.
• To send notifications about matches, bonds, and community activity.
• To improve our matching algorithms and product experience.
• To detect and prevent abuse, fraud, or violations of our terms.

4. Legal basis for processing

We process your data on the following legal grounds:

• Contract: processing necessary to provide you with the service you signed up for.
• Legitimate interest: improving the product, preventing abuse, and ensuring platform safety.
• Consent: for optional features like push notifications and camera access, which you can revoke at any time.

5. Data sharing

We do not sell your personal data. We share data only in the following circumstances:

• Within spaces: your display name, profile photo, and signals are visible to other members of spaces you join.
• Service providers: we use third-party services for hosting (AWS), error tracking (Sentry), and AI-powered matching (OpenAI). These providers process data on our behalf under data processing agreements.
• Legal obligations: if required by law, regulation, or valid legal process.

6. Data retention

We retain your account data for as long as your account is active. Signals and interactions within spaces may expire or be deleted according to their configured lifespan. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it by law.

7. Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, contact us at [email protected].

8. Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS), secure credential storage, and access controls. No system is perfectly secure, and we encourage you to use a strong password and keep your login credentials safe.

9. Children's privacy

Bondinary is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this privacy policy from time to time. We will notify you of material changes through the app or by email. Continued use of Bondinary after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this policy or our data practices, contact us at:

Bondinary Ltd
Email: [email protected]