🔒 Privacy Policy

📱 Information We Collect

Account Information

When you create an account, we collect:

• Authentication Data: Email address (if provided), authentication tokens from Google Sign-In or Sign in with Apple
• Profile Information: Display name, profile picture (if provided)
• Account ID: Unique identifier for your account

Habit and Activity Data

To provide our core service, we collect:

• Habit Data: Habits you create, habit completion logs, streaks, targets
• Room Data: Rooms you create or join, room membership, room settings
• Pet State: Pet emotional state, mood, happiness levels, bond levels
• Event Feed: Events generated from your habit activities

Important: This data is shared with other members of rooms you join, as this is essential to the app's functionality.

Device and Technical Information

Our app may collect the following non-personal information:

• Device Information: Device model, operating system version, app version
• Usage Statistics: In-app interactions, feature usage, error reports
• Performance Data: App performance, crash reports
• Network Information: IP address (for security and service delivery)

Purchase Information

When you make purchases, we collect:

• Purchase History: Subscriptions and in-app purchases made through App Store or Google Play Store
• Entitlement Data: Premium status, owned pets and skins
• Transaction IDs: For purchase verification and support

Note: Payment processing is handled by Apple (App Store) or Google (Play Store). We do not store credit card information.

🎯 How We Use Your Data

We use the information we collect for the following purposes:

• To provide and improve app functionality (habit tracking, pet reactions, room sharing)
• To enhance user experience and personalize content
• To provide technical support and respond to inquiries
• For security and fraud prevention
• To comply with legal obligations
• To send important service notifications (not marketing emails)
• To analyze app usage and improve features (aggregated, anonymized data)

👥 Data Sharing with Room Members

Core Functionality: Bondly is a multiplayer app. When you join a room, the following data is automatically shared with other room members:

• Your habit completion status and logs
• Pet state changes triggered by your habits
• Event feed entries related to your activities
• Your display name and profile information

This sharing is essential to the app's core functionality. By joining a room, you consent to this data sharing with room members.

🔐 Data Security

We implement the following measures to protect your data:

• Encryption: Sensitive data is protected with encryption in transit and at rest
• Secure Connection: All data transmission uses HTTPS protocol
• Access Control: Only authorized personnel can access data
• Regular Security Updates: Security vulnerabilities are regularly checked and patched
• Authentication: Secure authentication through OAuth providers (Google, Apple)
• Database Security: Row-level security policies to ensure users only access their own data

📊 Third-Party Services

Our app uses the following third-party services:

• Supabase: Backend database, authentication, and real-time features
• Cloudflare: Content delivery, API hosting, and asset storage (R2)
• RevenueCat: Subscription and in-app purchase management
• Google Sign-In: Authentication service (iOS and Android)
• Sign in with Apple: Authentication service (iOS)
• Google Mobile Ads (AdMob): For ad display (non-personal data)
• Firebase Analytics: For app usage analysis (anonymized)

These services have their own privacy policies. We recommend reviewing them to understand how they handle your data.

🍪 Cookies and Local Storage

Our app stores the following data on your device:

• App Settings: User preferences and settings (notifications, theme, language selection)
• Cache Data: Temporary files for performance, cached pet animations (Lottie files)
• Authentication Tokens: Secure tokens for maintaining your session
• Catalog Cache: Pet and skin catalog data for offline access

👶 Children's Privacy

Our app is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected personal information from a child under 13, we will delete it immediately.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at elfionmobi@gmail.com.

🔄 Data Sharing

We do not share your personal data with third parties except in the following cases:

• Room Members: As described above, data is shared with room members as part of core functionality
• Service Providers: Third-party services we use (Supabase, Cloudflare, RevenueCat) for app operation
• Legal Requirements: When required by law or to protect our rights
• User's Explicit Consent: When you explicitly consent to sharing
• Security and Fraud Prevention: To prevent fraud or security threats

We do not sell your personal data to third parties.

🌍 International Data Transfer

Your data may be stored on our service providers' servers, which may be located outside your country of residence. These transfers are made with appropriate security measures and in compliance with applicable data protection laws.

Our primary data storage is through Supabase and Cloudflare, which have data centers in multiple regions. We ensure that appropriate safeguards are in place for international data transfers.

📝 Your Rights

You have the following rights regarding your data:

• Right of Access: To know what data we collect and how we use it
• Right of Rectification: To request correction of incorrect data
• Right of Erasure: To request deletion of your data (account deletion)
• Right of Restriction: To request restriction of data processing
• Right of Portability: To receive your data in a portable format
• Right to Object: To object to certain types of data processing
• Right to Withdraw Consent: To withdraw consent for data processing (where applicable)

To exercise these rights, please contact us at elfionmobi@gmail.com with the subject "Privacy Rights Request - Bondly".

🗑️ Data Retention and Deletion

We retain your data for as long as your account is active or as needed to provide services. When you delete your account:

• Your profile information is deleted
• Your habit data and logs are deleted
• You are removed from all rooms
• Your pet state data is deleted
• Some data may be retained for legal or security purposes (e.g., transaction records)

Data shared with room members (event feed entries, historical pet states) may remain visible to other members even after account deletion, as it is part of the shared room history.

📞 Contact

🔄 Policy Updates

We may update this privacy policy from time to time. For significant changes, we will notify you through:

• In-app notifications
• Email (if you have provided an email address)
• App updates with a notice

Updated policies will be posted on this page with a new "Last Updated" date. Continued use of the app after changes constitutes acceptance of the updated policy.