Privacy Policy

The unpaired experience stores its information on your device. If you choose partner pairing, Bondlings creates a random pseudonymous account and a private bond for two people. It does not ask for an email address, phone number, username, or password to create that account. Shared relationship content is visible to your paired partner.

Keep invite links and codes private. An invite page receives the code in its URL so it can open the app; the pairing service validates the invite. Optional camera access is used to scan partner-invite QR codes.

• Names and Bondling names you choose to enter.
• Relationship goals, care tasks, notes, completion history, and app interactions.
• Love signals and discreet intimate-interest signals exchanged with your partner.
• Pseudonymous account, bond, and device identifiers.
• Local settings, reminders, progress, and trial timing.
• If you turn on partner alerts, a push token for your device and the alert types you chose.
• Messages you and your partner write in your shared chat, the replies of Pip, the AI coach, and whether each of you allowed Pip to read your messages.
• Abuse reports you submit, including the selected reason and a copy of the reported message if you report a specific message.
• Subscription status and purchase identifiers from your app store through RevenueCat.
• Limited device, request, and security information for hosting, abuse prevention, and diagnostics.

We do not receive your full payment-card details.

Notifications are off until you allow them, and you choose each kind in Us → Notifications. The daily gentle reminder is scheduled on your device and is not sent to us.

If you turn on alerts from your partner, Bondlings stores your device's push token and the alert types you chose with your pseudonymous account. When your partner sends a heart or spark, completes or adds care, starts a goal, writes in your chat, or joins or leaves your bond, our server queues a short alert that may include your partner's chosen name and the care or goal title or the start of their chat message. Private previews replaces those with a generic message. Alerts are delivered through Google Firebase Cloud Messaging, and on iPhone through the Apple Push Notification service. Names and titles are removed from our alert queue once an alert is sent, and delivery records are deleted within two days. Turning alerts off or deleting your account removes the push token.

Your bond has a shared chat that both partners can read. Pip, an AI relationship coach, can answer in it for bonds with Bondlings Plus. Before you can post, the app asks whether you allow Pip to read your messages, because Pip's replies are written by OpenAI. Nothing you write is sent to OpenAI unless you allow it.

When someone writes, our server sends OpenAI the recent chat messages (up to the last 30) from people who allowed Pip, Pip's earlier replies, and your chosen first names. New messages are also checked with OpenAI's moderation service so that Pip can point to crisis resources when someone may be at risk. Instead of an account or bond identifier, we send an anonymous code for your couple, which OpenAI uses to detect abuse. We ask OpenAI not to store these requests for later retrieval. Under OpenAI's API terms, OpenAI does not use this data to train its models and may keep it for a limited time to monitor abuse.

Chat messages and Pip's replies are stored with your bond so both of you can see them. You can stop sharing from the chat menu; Pip then no longer reads anything you wrote, and you can't post until you allow Pip again. The whole chat is deleted when either partner leaves the bond or deletes their account. A reported message excerpt is kept separately for private support review, even if the bond ends. Reports are normally deleted after 90 days; deleting either related account removes them earlier. Pip is an AI and can make mistakes; it is not a therapist or a substitute for professional or emergency help.

We use this information to provide pairing and synchronization, display your shared bond, administer trial and subscription access, prevent abuse, provide support, and keep the service reliable. Supabase provides pseudonymous authentication, database storage, and realtime synchronization. Vercel provides hosting and abuse prevention. RevenueCat manages subscription entitlements and purchase-related analytics. Google Firebase Cloud Messaging delivers the notifications you turn on. OpenAI writes Pip's replies and checks chat messages for safety, only for people who allowed Pip. Google Play or Apple processes purchases.

The private bond identifier is used to associate subscription access with the paired bond. We do not sell Bondlings information, use relationship content for advertising, or include advertising SDKs. Providers may process the minimum information needed to deliver their services or meet legal obligations.

Pairing is optional. The built-in seven-day trial does not require a payment method or charge automatically; a monthly or yearly Plus subscription is required afterward. Privacy information and account deletion remain available without a subscription.

Local relationship data remains until you clear it or restart setup. Trial-access records are stored separately from setup data. Paired data remains while the pseudonymous account is active. Choose Us → Delete account & data, or use the same deletion control on the expired-trial screen. This deletes your identity, bond membership, content you created, signals involving your identity, and your bond's chat with Pip. Other content created by your partner may remain for them.

See the account-deletion instructions if you cannot access the app. Deleting app data does not cancel a store subscription. Store and pseudonymous transaction records may be retained for subscription administration, fraud prevention, accounting, or legal obligations.

Bondlings is intended only for adults aged 18 and over and is not directed to children. Contact us if you believe a child submitted personal information. We use HTTPS and authenticated access controls for shared data, but no storage or transmission method can guarantee absolute security.

If you contact us, we receive the email address, message, and other information you choose to send. We use it for support and retain it as needed to resolve the request or meet applicable obligations. For privacy questions or access, correction, and deletion requests, email support@treebytesoftware.com.

We may update this policy when the app or its data practices change. The current version and its effective date remain on this page.