Privacy Policy

1. Introduction

Welcome to TrueBondr ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services (collectively, the "Service").

This policy applies to all users worldwide and complies with GDPR (EU), CCPA (California), and other international privacy regulations.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email, phone number, date of birth, gender, photos
• Profile Information: Bio, interests, preferences, location (city/region)
• Verification Data: Government-issued ID (for age verification), video selfie, facial recognition data
• Communications: Messages, photos, videos sent through the app
• Payment Information: Credit card details (processed securely by third-party payment processors)

2.2 Information Automatically Collected

• Device Information: Device type, OS version, unique device identifiers, IP address
• Usage Data: App interactions, features used, time spent, swipe patterns
• Location Data: Approximate location (city-level) via IP address or GPS (with your permission)
• Camera & Microphone: Access for photo/video uploads and video calls (with permission)
• Cookies & Similar Technologies: For authentication, preferences, analytics

2.1.1 Face & Biometric Verification Data

To help keep TrueBondr free of fake profiles, we offer an optional profile verification feature. If you choose to verify your profile:

• What we collect: A live selfie photo you capture in the app
• How it's used: The selfie is compared against your existing profile photo using our own facial-similarity AI model, built and operated by TrueBondr, to confirm the profile belongs to a real, matching person. This produces a similarity score only — we do not build or store a persistent biometric template, faceprint, or 3D face map
• Sharing: Your selfie and profile photo are processed by our own AI model on our own cloud infrastructure. They are not sent to any third-party company or vendor for facial analysis
• Manual review: If the automated score is inconclusive, a human moderator may review the selfie to approve or reject verification
• Retention: The selfie and verification result are retained only while your account is active. If you delete your account, both the verification record and the underlying selfie image are permanently deleted after the 30-day account recovery window (see Section 6)

2.3 Information from Third Parties

• Social media profile data (if you sign up via Facebook/Google)
• Identity verification services (for fraud prevention)
• Analytics providers (crash reports, performance data)

3. How We Use Your Information

• Provide Services: Create and manage your account, show your profile to potential matches
• Safety & Verification: Verify identity, detect fraud, prevent fake profiles
• Matchmaking: Use your preferences and behavior to suggest compatible matches
• Communication: Enable messaging, video calls, notifications
• Customer Support: Respond to inquiries, resolve issues
• Improve Services: Analyze usage, develop new features, personalize experience
• Marketing: Send promotional emails (you can opt-out anytime)
• Legal Compliance: Comply with laws, enforce Terms of Service, protect rights

4. Legal Basis for Processing (GDPR)

For users in the EU/EEA, we process your data based on:

• Consent: You agree to our data processing (e.g., profile creation, location sharing)
• Contract Performance: Necessary to provide the Service you requested
• Legitimate Interests: Fraud prevention, service improvement, marketing (when not overridden by your rights)
• Legal Obligation: Comply with laws (e.g., age verification, data retention for legal claims)

5. How We Share Your Information

We share your data with:

• Other Users: Your profile, photos, messages (to matches only)
• Service Providers: Cloud hosting (AWS/DigitalOcean), payment processors (Stripe), analytics (Google Analytics), customer support tools
• Identity Verification: Profile selfie verification is performed by our own AI model on our own infrastructure — no third-party company is involved in facial analysis (see Section 2.1.1). Government ID checks, where applicable, may involve a verification partner
• Advertising Partners: To show relevant ads (anonymized data)
• Legal Authorities: When required by law (court orders, investigations)
• Business Transfers: In case of merger, acquisition, or sale (with notice)

We do NOT sell your personal data to third parties for marketing purposes.

6. Data Retention

We retain your data for:

• Active Accounts: As long as your account is active
• Face & Verification Selfies: Retained only while your account is active; permanently deleted (including the underlying image) 30 days after you request account deletion
• Deleted Accounts: Other account data retained up to 90 days after deletion (for recovery and legal compliance)
• Legal Requirements: Longer if required by law (e.g., financial records for 7 years)
• Anonymized Data: Indefinitely for analytics (cannot identify you)

7. Your Privacy Rights

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure ("Right to be Forgotten"): Delete your account and data
• Portability: Receive your data in a machine-readable format
• Restrict Processing: Limit how we use your data
• Object: Opt-out of marketing, profiling, or data processing
• Withdraw Consent: Revoke permissions (e.g., location access)
• Lodge a Complaint: File a complaint with a data protection authority

To exercise your rights: Email contact@truebondr.in or use in-app settings (Settings → Privacy → Data Rights).

8. California Privacy Rights (CCPA)

California residents have additional rights:

• Know: What personal information we collect, use, and share
• Delete: Request deletion of your personal information
• Opt-Out: Opt-out of the "sale" of personal information (we don't sell data)
• Non-Discrimination: We won't discriminate against you for exercising your rights

To make a request: contact@truebondr.in

9. Data Security

We protect your data using:

• Encryption: SSL/TLS for data in transit, AES-256 for data at rest
• Access Controls: Limited employee access, multi-factor authentication
• Secure Infrastructure: Firewalls, intrusion detection, regular security audits
• Incident Response: We'll notify you within 72 hours of a data breach (as required by law)

No system is 100% secure. Please use a strong password and enable two-factor authentication.

10. International Data Transfers

Your data may be transferred to and stored in countries outside your residence (e.g., servers in the US, EU, Asia). We ensure adequate safeguards through:

• EU Standard Contractual Clauses (SCCs)
• Adequacy decisions by the EU Commission
• Certification frameworks (e.g., Privacy Shield successors)

11. Children's Privacy

TrueBondr is NOT for users under 18. We do not knowingly collect data from minors. If we discover a user is underage, we immediately delete their account and data.

Parents: If you believe your child created an account, contact us at contact@truebondr.in.

12. Third-Party Services

Our app may contain links to third-party websites or services (e.g., social media, payment gateways). We are not responsible for their privacy practices. Please review their policies before sharing data.

13. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified via:

• In-app notification
• Email to registered users
• Updated "Last Modified" date at the top

Continued use of the Service after changes means you accept the updated policy.

14. Contact Us