Privacy Policy
Updated September 2026
Who We Are
Bonding Bowls is a Singapore-based app project. Contact the team at support@bondingbowls.com with questions about this policy or your personal data.
What Information We Collect
Your Account and Identity Verification
You create an account with your email and password. Before matching, identity verification is required. Manual verification uses the identity documents and liveness images you submit. Singpass verification is subject to availability. Verification records are restricted to authorized staff and are not displayed to other members.
Your Profile
Photos, bio, interests, where you're from, whatever you choose to share. Voice prompts if you use that feature (encrypted). Location data is optional and only as detailed as you make it.
Conversations & Interactions
We process messages, likes and matches to run the app and investigate abuse. Authorized staff may access records for support and moderation. Connections are encrypted in transit; chats are not represented as end-to-end encrypted.
How Photos Work
The app uses on-device face detection for profile photos. Uploaded media is also processed by our backend for storage and security. Face detection is not a guarantee of identity or safety.
Optional AI Avatars and DeepAI
Before each generation, we ask your permission to upload your selfie to our private storage and send a processed copy with your chosen style to DeepAI, a separate AI provider. Your original selfie is not displayed to other members. The generated avatar is shown if you save it to your profile. You may cancel without generating an avatar. DeepAI processes images under its privacy policy, which permits model training and certain third-party sharing. We do not promise immediate deletion or no training by that provider. Do not upload identity documents or sensitive images for avatar generation.
Technical Stuff
Your IP, device type, crash reports. The boring stuff that helps us keep the app from breaking.
Payments
We process purchase identifiers, verification proofs and your Bowls transaction history. Mobile Bowls packs use native store billing when available; we do not receive your full card number. iOS purchases remain disabled until Apple setup and testing are complete.
Why We Need Your Data
Keep it simple:
- To make the app work: Showing you matches, letting you message, managing your profile
- To keep it safe: Blocking scammers, catching bots, protecting users
- Legal compliance: Singapore law requires we keep certain things for a while
- To improve the app: Crash reports help us fix bugs
Who Sees Your Data
We don't sell your information. Period. But we work with a few trusted services:
- Firebase: Notifications and crash tracking
- Apple and Google: Native mobile purchase processing and purchase verification, when enabled
- DeepAI: Optional avatar generation from a selfie, only after the photo-sharing notice is accepted
- Supabase, DigitalOcean and Vercel: Authentication, databases, media storage and application hosting
- Law enforcement: Only when they have a warrant or court order
Review DeepAI's privacy policy before choosing AI avatar generation. You can decline each request and contact us for help with a prior upload.
How Long We Keep It
- While you're active: Everything stays
- After you delete your account: 90 days, then permanently gone
- Messages: 12 months (in case someone disputes a transaction or reports abuse)
- Tax records: 7 years (Singapore requires it)
- AI selfies and avatars: Selfies are stored privately for processing; saved avatars remain associated with your profile. DeepAI has its own processing and retention practices. Contact us about removal of uploaded or generated images.
Your Rights
Singapore's PDPA gives you control:
- See it: Get a copy of everything we have on you
- Fix it: Tell us something's wrong, we'll correct it
- Delete it: Wipe your account
- Stop us: Withdraw consent for certain processing
Email privacy@bondingbowls.com and we'll handle it within 30 days.
Security
We use encrypted connections, access controls, private storage for sensitive media and password hashing. Native store billing handles mobile payment details. No security control eliminates every risk.
About Singpass
Where available, Singpass supports identity verification through government identity services. Its use does not mean the government endorses Bonding Bowls. The verification screen explains the information requested before you proceed.
Kids
You must be 18+. We'll delete any account from someone younger.
We May Update This
If something big changes, we'll email you and let you know in-app. Check back occasionally.
Questions?
support@bondingbowls.com
DPO: privacy@bondingbowls.com
Usual response: 30 days
Found something wrong? Complain to Singapore's PDPC at pdpc.gov.sg.