Privacy & Data

Account information

Your name and email address, used solely to identify your account and personalise your experience.

Conversation history

Messages you exchange with your AI companions are stored to provide context and continuity across sessions.

Usage data

Basic interaction signals (e.g. streaks, last active time) used to personalise proactive messages and recommendations.

Powering your companions

Conversation history and memory items are sent to the AI model to generate contextual, personalised responses.

No selling or advertising

Your data is never sold to third parties or used to build advertising profiles. We have no ad business.

AI processing

Messages are processed by Anthropic's Claude API. Anthropic's privacy policy applies to data sent for inference. We do not use your data to train models.

Access your data

You can view all memories your companions have stored about you from each Bondi's profile page.

Delete memory

You can clear a companion's memory at any time from their profile page. This removes all learned facts about you for that Bondi.

Delete your account

You can delete your account from Settings → Privacy at any time. Deletion is a soft delete: your personal details (name, email, birthday, profile fields) are immediately anonymised in our database, your active sessions on every device are revoked, and you can no longer sign in or use the app. Conversation and message rows are retained in anonymised form for product-quality analytics and safety review.

Retention before permanent deletion

Anonymised conversation data is kept for up to 24 months from the deletion date and is then permanently purged on a rolling basis. You can request earlier permanent erasure of all rows associated with your deleted account by emailing privacy@bondi.life — we'll process the request within 30 days.

Account suspension

If your account is suspended (typically for breach of the Terms of Service), you cannot sign in or use chat, games, or activities. Your personal data is not modified or deleted by a suspension — it is preserved unchanged so the suspension can be reviewed and reversed if appropriate. Active sessions on every device are revoked at the moment of suspension.

Admin actions are logged

When our staff suspend, delete, or restore an account, we record who took the action, when, the affected user, and an optional reason in an internal audit log. The log is used for accountability — for example, to review your case if you appeal a suspension or deletion — and is retained for the same window as account records.

Data storage

Your data is stored in encrypted databases. Conversation data is retained for as long as your account is active, or — after a soft delete — for up to 24 months in anonymised form before being purged.

Local storage

Streak counts, story read states, and theme preferences are stored locally on your device and never sent to our servers.

Data location

Data is stored and processed in the European Union. No cross-border transfers outside the EU take place without adequate safeguards.