1. Scope and who we are
This Privacy Policy applies to the Bondling mobile app, this website and related support services (together, the “Service”). “Bondling,” “we” and “us” refer to the team that operates the Service. Bondling is made for couples: two people share a home and raise a companion together, so some information is shared with your partner by design, as described below.
This website does not use advertising cookies. It stores the language you choose in your browser's local storage, and our hosting provider processes standard request logs to deliver and protect the site.
2. Information we collect
We collect the information needed to provide, secure and support the Service. What we hold depends on the features you use.
- Account information: the account identifier and email address provided by Sign in with Apple or Google Sign-In through Firebase Authentication, your nickname, profile picture, user ID, language and time zone, and your confirmations that you are at least 16 and accept the current Terms of Service and Privacy Policy, with the version and time.
- Home and relationship information: your invitation code, the home you belong to, pairing and unpairing records, your shared Bondling and the appearance choices you make for it, and optional details you add, such as when your relationship started, your birthday or the cities shown for weather.
- Content you create: chat messages, photos, voice messages, stickers, drawings, answers to daily questions, notes, care records, game activity, home decoration and reports you submit about content.
- Photos for optional AI features: photos you choose to upload to create an avatar, a wall picture or other images, only after you agree to that specific use.
- Purchases and wallet: product identifiers, App Store or Google Play transaction identifiers and purchase tokens, order and subscription status, prices and currencies when the store provides them, refunds, and the Cookie and Heartgem history of your shared wallet. We do not receive full payment-card details.
- Device and technical information: app version, operating system, device language and time zone, notification tokens, IP address and security logs, and, only if you allow analytics and diagnostics, usage events and crash reports.
- Attribution information: only if you allow analytics, install and campaign information such as the install source, advertising-source details and limited purchase-event information, processed through Tenjin. On iOS, access to the advertising identifier also requires your App Tracking Transparency permission.
- Support information: feedback, screenshots, the contact email you give us and our replies.
3. Device permissions
Bondling asks for a permission only when you use a feature that needs it. Photo library access lets you choose images for your profile, chat, daily photos, AI features or feedback, and lets you save images to your library. Photos shared in chat have location and other embedded metadata removed before upload. The microphone is used only while you record a voice message, and the recording is sent only after you preview and confirm it. Notification permission lets us tell you when your partner or your Bondling needs you. On iOS, the App Tracking Transparency prompt controls access to the advertising identifier.
Bondling does not request your device location; weather uses the cities you choose yourself. You can change any permission in your system settings at any time.
4. How we use information
We use information to run the features you choose, including keeping your home in sync with your partner in real time; to verify purchases and deliver Heartgems and membership benefits; to send notifications you have enabled; to answer support requests; to review reported content; to keep accounts and the Service secure and to prevent fraud and abuse; to meet legal obligations; and, only with your permission, to understand how the app is used, diagnose crashes and measure where installs come from. We do not use your chats, photos or voice messages for advertising.
5. What your partner can see
Bondling is built for two. What you post in your home, including chat messages, photos, voice messages, stickers, notes, care records and decoration, is visible to the other member of your home, as are your nickname, profile picture and the shared wallet with its history. Answers to the daily question are revealed to your partner only after you have both answered.
Someone who joins a home sees what is created after they join, not earlier conversations. Either member can unpair; the member who joined then leaves the home and can no longer see its content. A pairing can be restored within 30 days only if both of you agree. Your partner may already have saved or remembered things you shared, and we cannot recall those copies.
6. Optional AI features
Some features use AI services: short replies when you mention your Bondling in chat, optional memories that help those replies, translation of a message you select, and creating images or videos, such as your Bondling's appearance, avatars made from your own photos, outfits, portraits, wall pictures, story photos and videos, and anniversary accessories. Each runs only after you agree in the app to the named service provider, policy version and purpose shown at the time, and confirm that you are at least 16. You can withdraw an AI consent in the app; this stops new processing but cannot recall requests that were already sent.
We send only what the feature needs. For replies, that is at most the last 10 chat messages from members who have agreed, with members labelled generically instead of by name, account ID or email. Translation sends only the text you choose. Memories stay off unless you turn them on, are limited to short excerpts from recent messages in your home's chat, and can be deleted at any time. Avatars may use only photos of yourself. Original photos uploaded for image creation are kept only as long as needed to finish the task, and finished results are kept with your home or archive as described in the retention section.
AI results can be inaccurate or unexpected. AI features may be unavailable at some times or in some places.
7. Service providers and international processing
We use service providers to operate Bondling. They process information on our behalf and may do so in countries other than your own, with safeguards appropriate to the service.
- Google Firebase for sign-in (Firebase Authentication), push notifications (Firebase Cloud Messaging) and remote configuration, and, only if you allow analytics, Google Analytics for Firebase and Firebase Crashlytics.
- Apple and Google for Sign in with Apple, Google Sign-In, app distribution, in-app purchases, subscriptions and purchase verification.
- Tencent Cloud for private storage of photos, voice messages and other files, and for delivering app content.
- AI service providers named in the app when you agree to an AI feature, which process the inputs needed for that feature.
- Tenjin for install attribution and campaign measurement, only if you allow analytics.
- Open-Meteo for weather, which receives only the location of the cities you choose, never your device location or account details.
9. Reports and moderation
You can report a message, photo or other content in your home. Reports are not shown to your partner. Authorized staff review the reported content and the minimum context needed, and may hide content that breaks our rules. Hidden content is no longer shown to either member, and AI caches and memories based on it are cleared. We keep report and review records to handle disputes and prevent abuse.
10. Retention
We keep account information and home content while your account is active and as long as needed to provide the Service. Original photos uploaded for AI image creation are kept only until the task finishes.
When you delete your account, sign-in is disabled, sessions and notification tokens are revoked, your profile details and consents are cleared, your home content is removed and your private uploads are queued for deletion. We keep a minimal record of the deleted account to stop the same sign-in from registering again and to match store transactions, and we keep purchase, wallet, refund, subscription, fraud-prevention, security and audit records for as long as the law or legitimate business needs require. Copies in backups, logs and caches are removed as those systems reach the end of their normal retention cycles. The account deletion page explains the details.
11. Security
We use encrypted connections, private storage opened through short-lived links, access controls, separated environments and monitoring to protect information. No system is perfectly secure, so please keep your Apple or Google account safe and tell us promptly if you suspect misuse.
12. Your choices and rights
You can turn analytics and diagnostics on or off in Settings, manage notification, photo and microphone permissions in your system settings, withdraw AI consents and delete AI memories in the app, withdraw your consent to the required Terms and Privacy Policy (which pauses use of the Service), and permanently delete your account from the Me tab.
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to restrict or object to its processing, and to complain to a data protection authority. To make a request, contact us. We may need to verify your identity first.
13. Age requirement
Bondling is intended for people aged 16 and over, and you must confirm that you are at least 16 to use it. We do not knowingly collect information from children under 16. If you believe a child is using Bondling, contact us and we will take appropriate action.
14. Changes to this policy
We may update this policy as Bondling or the law changes. Each version is published with the date it was last updated. When a change requires your agreement, the app shows the new version and asks you to review it before you continue using the Service.
15. Contact us
For privacy questions, data requests or complaints, email [email protected]. If you can, include the user ID shown on the Me tab. Never send passwords, sign-in codes or full payment-card numbers.
[email protected]