Privacy Policy

This Privacy Policy explains how BondFlow, operated by Tinswin ("we", "us", or "BondFlow"), collects, uses, shares, retains, and deletes information when you use the app and related services. If you do not agree, please do not use BondFlow.

1. Information we collect

1.1 Account and device information

When you sign in with Apple, we receive an Apple account identifier and, if you choose to share them, your name and email or Apple relay email. We assign an internal user ID and process device identifiers, device model, operating-system and app versions, language, time zone, and network request metadata for authentication, security, attribution, troubleshooting, and service operation.

1.2 Profile and location information

We process profile information you provide, such as nickname, avatar, bio, birthday or age, gender, interests, country, state or province, and city. This information supports eligibility checks, profile display, recommendations, personalization, and safety. BondFlow does not require real-name verification, but information you publish may be visible to other users as shown in the app.

1.3 User content and safety information

We store and process letters, posts, images, search terms, report descriptions, feedback, and the related penpal, block, moderation, and enforcement records needed to provide and protect the service. User-written content may contain personal information that you or another user chooses to include. Please avoid sharing sensitive information that is not necessary for the conversation.

1.4 Purchases, invitations, and support

We process subscription product, transaction, status, and expiry information supplied by the App Store or Google Play. We may also process invitation codes and attribution records, reward history, and the contact and diagnostic information you choose to include in support or feedback requests.

2. How we use your information

• To authenticate accounts, prevent abuse, and operate the service
• To provide daily penpal recommendations, profiles, letters, posts, search, invitations, and personalization
• To provide AI-assisted topic and reply suggestions when requested
• To automatically filter or review text in posts and letters, automatically screen uploaded images with human review when needed, review reports, enforce community rules, and protect users
• To verify subscription status, provide benefits, process rewards, and handle support requests

3. AI processing and content moderation

BondFlow uses high-confidence keyword filtering and a configured third-party AI provider, currently DeepSeek, to review posts, letters, and uploaded images for safety. Newly uploaded images remain unavailable to other users while review is pending. High-confidence results may be applied automatically; uncertain results and reports may be reviewed by authorized personnel. When you request AI topic or reply assistance, relevant prompts and limited context may also be sent to the provider. Depending on the feature, information sent to the provider may include submitted text or images and limited context such as language, interests, country or region, or age group. Because users control submitted content, we cannot guarantee that it contains no personal information. We do not use user content to train our own general-purpose AI models.

4. Sharing and disclosures

We do not sell personal data or serve third-party behavioral ads. We share information only as needed with the users you communicate with, service providers that host data, process purchases, authenticate accounts, or provide AI and safety services, and authorities or advisers when required by law or necessary to protect rights and safety. Service providers may process information only for the relevant service purpose under their applicable terms and safeguards.

5. Data retention and account deletion

We retain account and service data while your account is active and for as long as needed for the purposes described above. You can request deletion in the app or by contacting us. An accepted request disables account access and begins a 30-day recovery period. After the request is processed, we delete or de-identify account-linked data from active systems, except limited records that must be retained for legal obligations, payment records, fraud and security prevention, dispute resolution, enforcement, or backup integrity. Backup copies may remain for a limited period and are not returned to active use except for disaster recovery.

6. Service providers

Providers used by BondFlow include Sign in with Apple for authentication, the App Store or Google Play for purchases, DeepSeek for configured AI assistance and text and image moderation, and hosting or object-storage providers for operating the service and storing uploaded media. Their processing is governed by their applicable privacy terms and our service arrangements. If a provider changes materially, we will update this policy.

7. Your choices and rights

You can edit available profile fields, manage or cancel subscriptions through the applicable store, report or block users, request account deletion, and contact us to request access, correction, export, or other privacy assistance. Rights and exceptions may vary by location.

8. Age eligibility

BondFlow is intended only for users aged 18 or older. We do not knowingly permit children to create accounts. If you believe an underage person has provided information, please report the account or contact us so we can investigate and take appropriate action.

9. Contact us

For privacy-related questions or requests, email us at: support@aicocorise.com