Bondi is an app you talk to about the people in your life. To help, it has to remember what you tell it. This policy explains what we collect, why we need it, who helps us run Bondi, how long we keep it, and the choices you have.
Arcturus Arc LLC ("we", "us") runs Bondi. If anything here is unclear, write to support@askbondi.com.
What we collect
- Your account: the name and email that Sign in with Apple shares with us (the email is often a private relay address), the first name you add in Settings, and your time zone.
- Your account id: a random id for your account. RevenueCat and Superwall use it too, to match your plan to you.
- Your voice in calls: it streams to OpenAI so Bondi can understand and answer you. We never store a recording.
- What you tell Bondi: what you say in calls and type in text, kept as written transcripts.
- Bondi's memory: the people you mention (by name or as "my mom"), the details and dates you share about them, the moments you talk about, and notes about you, like how you prefer Bondi to talk.
- Your subscription: which plan you have, whether it's active, its renewals and any refunds, as Apple reports them through RevenueCat. We never see your card details.
- Usage: the calls you start, the minutes you use, what each conversation costs us to run, and when you see the subscription screen. These records never contain what you said or the names of your people.
- A device id: the id Apple gives our app on your iPhone (its vendor id), which Superwall keeps.
- Your approximate location: your city, region and country, which Superwall works out from your internet address to show you the right subscription screen and prices. We never collect your precise location.
- Your free first talk: whether this iPhone has had it. Apple's DeviceCheck keeps that yes or no for us, without telling us who you are.
- Your age: that you told us you're 18 or older.
- Your consent: a record that you agreed to what you say going to OpenAI to be answered.
- Reports: when you press and hold one of Bondi's messages to report it, we keep the reason you pick and that one message, never your words and never the rest of the conversation.
- What you send us: the emails you write to support.
What we don't collect
- Your precise location, your contacts, your photos or your camera.
- Your age range from Apple. Where the law requires an age check, the app asks Apple for it on your iPhone, only to confirm you're 18 or older. It never leaves your phone.
- Advertising ids. We don't track you across other apps and websites, and there are no ads in the app.
How we use it
- To hold your conversations and remember your people, so Bondi can pick up where you left off.
- To run your account and your plan, including your monthly voice minutes, and to show you the right subscription screen and prices.
- To give each iPhone one free first talk.
- To make sure every account belongs to an adult.
- To keep you safe: every line is checked for signs of crisis so Bondi can show help, and Bondi's replies are checked before you hear or read them (see our Safety page).
- To look into the messages you report, and fix what caused them.
- To fix problems, keep costs in check and see how the subscription screen is doing, using records that never include what you said.
We don't use what you share to advertise to you, and we never sell it or share it for advertising.
Who helps us run Bondi
These companies process data for us, only to provide their service to us:
| Company | What it does for Bondi |
|---|---|
| OpenAI | Understands and answers you in calls and in text, updates the memory after each conversation, and runs our safety checks. |
| Supabase | Stores your account, memory and transcripts, and runs our server. |
| Apple | Sign-in, payments and refunds, and DeviceCheck, which marks whether an iPhone has had its free first talk. |
| RevenueCat | Keeps track of your plan, its renewals and refunds, and tells us whether it's active. |
| Superwall | Shows the subscription screen. It keeps your account id and a device id, and works out your approximate location from your internet address, to pick the right screen and prices. |
| Expo | Delivers app updates to your phone. |
Under OpenAI's terms for businesses, data sent through its API isn't used to train its models unless a business opts in, and we haven't. OpenAI may keep it for up to 30 days to watch for abuse. If we change or add a partner that handles what you say, we'll update this list first.
How long we keep things
| What | How long |
|---|---|
| Call audio | Never stored by us |
| Transcripts of calls and texts | 30 days |
| Bondi's memory of you and your people | Until you delete it or your account. If your plan ends, it's deleted 12 months later. |
| If you only try the free talk | That account and everything in it is deleted after 30 days, unless you sign in with Apple or start a plan. |
| Usage and cost records | 13 months, with no conversation content |
| Crisis help counts | As long as California's yearly report requires. They hold no account id and no words. |
| Bondi sentences stopped by our safety check | 30 days. Only Bondi's words, never yours. |
| Message reports | Up to 12 months, and sooner if your account is deleted. Only the reason you picked and the one message you reported. |
| Backups | Deleted data leaves our backups within 30 days. |
Your choices
- See what Bondi remembers in My galaxy, and ask Bondi to correct or forget anything.
- Delete any person or any conversation in the app.
- Delete your account in Settings, under Delete my account. Everything tied to it is wiped from our servers right away, and from backups within 30 days. Deleting your account doesn't cancel your subscription; cancel that in your iPhone's Settings.
- Ask for a copy of your data by writing to support@askbondi.com.
Depending on where you live, including California, you may have the right to know what we hold about you, to correct it, to delete it, and not to be treated differently for asking. We'll answer any request sent to support@askbondi.com within the time the law gives us.
What you say about your health, including your mental health, is handled with the same care as everything else: it's used only to help you and is never sold or used for ads.
The people you talk about
You'll mention people who don't use Bondi. We use what you tell us about them only to help you. Bondi never contacts them, and you can delete anyone from its memory at any time.
Keeping it safe
- Everything is encrypted on the way to us and while it's stored.
- Access rules on every table mean each account can only reach its own data.
- Service keys stay on our server, never in the app.
- On your phone, cached conversations sit in encrypted storage.
- Only two people can reach the live database, with two-step sign-in. Nobody browses your conversations.
If a breach ever affects your data, we'll tell you and the authorities as the law requires.
Adults only
Bondi is for adults 18 and over. If we learn an account belongs to someone younger, we lock it and delete its data within 30 days.
Changes and contact
If we change this policy in a way that matters, we'll tell you in the app or by email before it takes effect.
Questions or requests: support@askbondi.com.