Privacy Policy — Bondroot

Last updated: March 2026

Bondroot ("the app", "we") is a mobile application that helps you stay connected with the people who matter by reminding you of important moments in their lives and suggesting messages. This policy describes the data we collect and how we use it.

1. Data we collect

• Account: email address and password (or sign‑in via identity provider) to create and secure your account.
• App data: names of the people you add, types of life events (health, work, family, etc.), event dates, scheduled reminders, and text you enter or that the app suggests. This data is stored on our servers to provide the service (reminders, message suggestions).
• Technical data: device identifier for push notifications (if you enable them), timezone to display dates and reminders correctly.

We do not sell your data. We do not use it for targeted advertising.

2. How we use the data

We use the data to: provide and operate the app (account, reminders, message suggestions); send local or push notifications for your reminders (if you accept notifications); improve the service in a privacy‑respecting way; comply with legal obligations or lawful requests from authorities.

We may also produce aggregated and anonymised statistics (for example: distribution of event types, number of check‑ins completed, retention rates) for the purpose of improving the service. These statistics cannot in any way identify an individual user.

3. AI processing

The app uses artificial intelligence to extract information from the text you enter (person, event type, date) and to suggest personalised messages. This processing is performed exclusively on our own self‑hosted infrastructure (dedicated server running Ollama, a local AI engine). Your text is never sent to a third‑party cloud AI service. We do not use your data to train AI models.

4. Encryption of sensitive data

Sensitive data (names of your contacts, free-text descriptions you enter, suggested messages) is encrypted at rest using the AES-256-GCM algorithm before being stored in our database. The encryption key is managed separately and is never stored alongside the data.

5. Hosting and sub-processors

We rely on the following providers to operate the service:

• Railway (API and database hosting) — United States, with contractual safeguards compliant with GDPR.
• Supabase (authentication and account management) — European Union.
• RevenueCat (subscription and in-app purchase management) — United States. Payments themselves are processed by Apple App Store or Google Play depending on your platform.

None of these providers has access to your encrypted app data (names, free-text). We take technical and organisational measures to protect your data (HTTPS, restricted access, encryption at rest).

6. Data retention

We keep your data as long as your account is active. If you delete your account from within the app, all your personal data (contacts, events, reminders, messages) is deleted immediately and permanently from our servers, unless retention is required by a legal obligation.

7. Your rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Access: obtain a copy of your data.
• Portability: export your data in a structured format (JSON) using the "Export my data" button in the app's Settings.
• Rectification: correct inaccurate data.
• Erasure: delete your account and all your data from the app's Settings.
• Objection and restriction: object to certain processing or request its restriction.
• Complaint: lodge a complaint with a supervisory authority (in France: CNIL at www.cnil.fr).

To exercise these rights or for any question: contact@bondroot.app.

8. Changes

We may update this policy. The current version is the one published on this page with the "Last updated" date at the top. We encourage you to review it periodically.

9. Contact

For any question about privacy or your personal data: contact@bondroot.app.