BondTime - Privacy Policy

Introduction BondTime ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how our mobile application — known as "BondTime by CycleWise" on the Apple App Store and "BondTime" on the Google Play Store (collectively, the "App") — handles your personal information. We believe in transparency and want you to understand exactly how your data is managed when you use our app. This Privacy Policy applies to both iOS and Android versions of the App. Our Core Privacy Principle BondTime operates on a privacy-first principle: All your personal and health data stays on your device. We do not collect, store, transmit, or analyze any of your personal information on our own servers. The only external data flow is to RevenueCat for anonymous subscription management. Information We Collect 1. Health & Cycle Data (Local Only) BondTime allows you to track menstrual cycle information, including period dates, cycle length, and PMS duration. This sensitive health data is stored exclusively on your device using local encrypted SQLite storage. It is never transmitted to any server. 2. Profile Information (Local Only) You may create profiles with names and optional avatar photos. Profile data is stored locally on your device using SQLite and the app's sandboxed local directory. This data never leaves your device. 3. Photo Library Access (Optional, Local Only) If you choose to set a profile avatar, the App may request access to your device's photo library. Selected images are copied to the app's local storage directory. Photos are never uploaded, transmitted, or shared with any third party. You can revoke photo library access at any time in your device Settings. 4. Subscription Information (Anonymous) If you use the App's subscription features, we use RevenueCat — a third-party subscription management service — to process and manage subscription status. RevenueCat receives only: - An anonymous, auto-generated device identifier - Purchase events and subscription status RevenueCat does NOT receive your name, health data, photos, or any personal information. For details, see RevenueCat's Privacy Policy: https://www.revenuecat.com/privacy 5. Trial Data (Local Only — iOS) On iOS, BondTime stores a trial start timestamp locally using iOS Keychain to manage the 7-day free trial period. This data persists across reinstalls and is never transmitted externally. On Android, the free trial is managed through Google Play's subscription system. 6. App Preferences (Local Only) Settings such as selected profile, onboarding state, and locale preferences are stored locally on your device using standard platform preferences (SharedPreferences on Android, UserDefaults on iOS). Information We Do NOT Collect BondTime does NOT collect, store, or transmit any of the following: - Email addresses, phone numbers, or account registration data - Analytics data (no Firebase, Amplitude, Mixpanel, or similar SDKs) - Crash reporting data (no Sentry, Crashlytics, or similar SDKs) - Push notification tokens - Location data (precise or approximate) - Advertising identifiers or ad tracking data - Social login data (no Google, Apple, or Facebook sign-in) How We Use Information We use the information described above solely to: - Provide period tracking and cycle prediction features - Display your profile information within the app - Manage your subscription status via RevenueCat - Determine free trial eligibility We do not sell your data. We do not use your data for advertising. We do not build user profiles for marketing purposes. Data Storage & Security All health and personal data is stored locally on your device using: - Encrypted SQLite databases - Platform-native secure storage (iOS Keychain / Android Keystore for trial data) - App-sandboxed local file storage (for profile photos) - No cloud synchronization or server-side backup of user data Third-Party Services 1. RevenueCat — Subscription Management - Receives: anonymous device ID and purchase events only - Does NOT receive: health data, names, photos, or personal information - Privacy Policy: https://www.revenuecat.com/privacy 2. Apple App Store / Google Play Store — Payment Processing - All payment and billing information is handled directly by Apple or Google - BondTime never sees or stores your credit card or payment details - Apple's Privacy Policy: https://www.apple.com/privacy/ - Google's Privacy Policy: https://policies.google.com/privacy Children's Privacy BondTime is not directed at children under 13. We do not knowingly collect personal information from children. Since all data remains on the device, we have no access to determine user age or collect any personal information from users of any age. Your Data Rights Since your data never leaves your device: - Access: You have complete access to all your data within the app - Correction: You can edit or update any information directly in the app - Deletion: You can delete individual items or all data by uninstalling the app - Portability: Your data exists only on your device under your control Data Retention & Deletion - Data persists on your device until you delete the app - Uninstalling the app removes all local data - On iOS, the Keychain trial marker may persist after uninstall - On Android, the free trial is managed through Google Play and is not stored locally - Anonymous RevenueCat subscription records may persist on RevenueCat's servers Data Backup and Transfer - iCloud / Google Cloud Backup: Your BondTime data may be included in device backups (controlled by your device settings) - Device Transfer: When setting up a new device, your BondTime data may transfer if you restore from backup - App Deletion: Deleting the app removes all local app data from your device International Users - GDPR Compliance: Since no personal data is transmitted to our servers, your data stays on your device in your own jurisdiction - CCPA Compliance: We do not sell personal information Changes to This Privacy Policy We may update this Privacy Policy from time to time. Any changes will be reflected in the app and on this page, and the "Last Updated" date will be revised. Since we don't collect your contact information, we cannot notify you directly of changes. Contact Information If you have questions about this Privacy Policy, you can contact us at: Email: bondtime@mattxox.com Website: bondtime.mattxox.com Compliance This Privacy Policy is designed to comply with: - Apple App Store Guidelines - Google Play Store Guidelines - California Consumer Privacy Act (CCPA) - General Data Protection Regulation (GDPR) - Other applicable privacy laws Disclaimer This Privacy Policy applies solely to the BondTime app (including "BondTime by CycleWise" on iOS). It does not apply to any third-party apps, websites, or services that may be linked from our app. Summary: BondTime is designed with privacy as a core principle. Your personal and health data never leaves your device. The only external data flow is anonymous subscription management via RevenueCat. We cannot access, analyze, or share your personal data because we simply don't store it on our servers.