Privacy Policy
Last updated 2026-05-30. Effective immediately.
BondAI is a privacy-first app for couples and the partner who wants to understand. This page explains exactly what we collect, what we do not collect, and the controls you have. It matches our App Store privacy nutrition label one to one. If anything below ever disagrees with the App Store label, the App Store label is the binding source of truth.
The promise in one sentence
We never persist the raw text of your conversations, vents, or spoken answers. Everything that flows through the AI is processed in memory, returned to you, and then released.
What we collect, and why
We collect the minimum data needed to give you an account, charge the right plan, and keep the app stable. Every item below maps directly to a row on our App Store privacy nutrition label.
| Apple category | What | Linked to you | Purpose |
|---|---|---|---|
| Contact Info | Email address (only if you create an account) | Yes | App functionality, account management |
| Identifiers | User ID | Yes | App functionality |
| Identifiers | Device ID (anonymous mode only) | No | App functionality |
| Purchases | Purchase history (subscription status from Apple) | Yes | App functionality, entitlement gating |
| Diagnostics | Crash data | No | App functionality, stability monitoring |
| Diagnostics | Performance data | No | App functionality, performance monitoring |
| Other Data | Bond Memory patterns (behavioural signals only, no raw text) | Yes | App functionality, product personalization |
We do not use any of the above to track you across other companies' apps or websites. We do not sell data.
What we do not collect
Items below are either never sent off your device, or are processed in real time and then released. They are not stored on our servers.
- Raw conversation text from Bond Intelligence
- Raw vent or reflection text from Inner Voice
- Audio recordings (deleted immediately after transcription)
- Spoken answers from Pillow Talk gameplay
- Location data of any precision
- Contacts, Photos, or Camera content
- Health, Fitness, or Sensitive Information
- Financial account numbers or credit cards
- Browsing or search history
- Advertising identifiers
How analysis works
When you paste a chat into Bond Intelligence, or write or speak a vent in Inner Voice, the text is sent over an encrypted connection to the AI provider that generates the reflection. The text is held in memory only for the seconds the analysis takes. We do not write it to any database, log file, or analytics pipeline.
For voice mode, the audio is sent to the transcription service, converted to text, and the audio is discarded the moment the text is returned.
After the analysis returns, we keep the derived insights only: short patterns and metadata, capped at a few hundred characters per record, and never including direct quotes from your conversation. This is what powers Bond Memory, the per-user continuity layer that helps reflections stay coherent across sessions.
Third parties we share data with
We use the following service providers under contract. They process data on our behalf and may not use it for any other purpose.
| Provider | Role | Data shared | Retention |
|---|---|---|---|
| OpenAI | Real-time analysis of pasted text and reflections | Conversation text or vent text, transmitted in memory | Up to 30 days for abuse monitoring, then deleted (OpenAI policy) |
| Anthropic | Reflection generation (Inner Voice) | Vent text transmitted in memory | No training on our data; retained per Anthropic enterprise terms |
| Apple | Sign In with Apple, In-App Purchases, crash and performance reports | Anonymous account identifier, purchase status, diagnostic data | Per Apple policy |
| Sign In with Google (optional secondary auth) | Email and Google account identifier | Per Google policy | |
| RevenueCat | Subscription receipt validation | Anonymous user identifier and Apple receipt | Per RevenueCat enterprise terms |
Your controls
Live audit counter
The Privacy Dashboard inside the app shows a live counter of raw conversation messages stored on our servers. It is wired to the database and reads zero, always. If it ever reads anything else, that is a bug and we want to hear about it.
Export your data
Settings → Privacy Dashboard → Export My Data returns a downloadable archive of your analyses, derived patterns, and account metadata.
Delete everything
Settings → Privacy Dashboard → Delete Everything removes your account and all your data, including Bond Memory patterns and the Pillow Talk adult consent flag. The deletion is immediate. There is no recovery window.
Per-user, not per-couple
If you are in a partnership, deleting your data removes only your side. Your partner's analyses and patterns are not affected. We never merge the two of you into one record.
Children
BondAI is rated 16+ on the App Store and is not designed for children under 13. We do not knowingly collect data from anyone under that age. If you believe a child's data was collected, contact us and we will delete it.
International transfers
Our servers and our AI providers operate primarily in the United States. If you use BondAI from the EU, the UK, or another region, your data may be processed in the US under standard contractual clauses.
GDPR and CCPA rights
EU and California residents have the right to access, correct, or delete personal data, and to object to or restrict processing. The in-app Export and Delete flows satisfy these rights for most cases. For anything else, email us.
Changes to this policy
If we make a material change to how we handle your data, we will update this page and the App Store nutrition label, and we will notify you in the app. Minor wording fixes will be reflected by an updated “last updated” date at the top of this page.
Contact
Privacy questions, deletion requests, and security reports go to privacy@getbondai.com. We aim to respond within 7 days for general questions and within 24 hours for security issues.