Privacy Policy

Version: 1.1 Effective Date: May 11, 2026 Last Updated: May 11, 2026

BridgeLDR ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information when you use the BridgeLDR mobile application ("the App").

By creating an account or using the App, you agree to the practices described here. If you don't agree, please don't use the App.

---

1. Overview

BridgeLDR helps couples stay emotionally connected, especially across distance. We collect only the data we need to make the experience work — and we give you control over what you share and store.

This is not a therapy, counselling, or crisis intervention app. If you or someone you know is in crisis, please contact your local emergency services or a helpline.

---

2. Information We Collect

a. Account & Profile

When you sign up and set up your profile, we collect:

• Email address — for signing in via a one-time code. No passwords.
• Nickname — the name your partner sees.
• Pronouns — including a custom free-text option if you prefer.
• Country of residence — used to suggest cultural holidays and estimate the distance between you and your partner.
• Time zone — from your country or device, so dates and reminders appear at the right time.
• Birthday (optional) — stored as month and day only (the year is replaced with a placeholder). Used to create a birthday event for your partner.
• Profile photo (optional) — uploaded from your camera or photo library and stored in our cloud storage.

b. Relationship & Partner Info

• Partner's email — provided by you when you send an invitation.
• Partner pet name — a name you give your partner inside the App.
• Couple status — pending, active, or inactive.
• Anniversary date and next visit date (optional) — milestones you choose to track.
• Approximate distance — calculated from both partners' countries (not your precise location — we never track that).

c. Content You Create

Depending on how you use the App, we may store:

• Chat messages — real-time chat between you and your partner, hosted by TalkJS (see Section 5).
• Daily check-ins — an emoji for your mood, an optional sub-feeling label, and optional free-text context.
• "Thinking of You" signals — a pattern type (like "I love you" or "I miss you") sent to your partner. Only the signal type, timestamp, and delivery status are stored — nothing more.
• Bond responses — daily prompts you answer via text, photo, or audio (including waveform data so the playback looks right).
• Memories — text notes and/or photos, with an optional date and a visibility setting (private or shared).
• Gift ideas, visit plans, conversation topics, and important events — entries you create yourself or save from AI suggestions.
• Uploaded media — profile photos, memory photos, and audio recordings, stored in secure cloud storage linked to your account.
• Onboarding quiz answers — optional questions used to seed early suggestions.
• Cultural holiday selections — holidays you pick based on your country.

d. AI-Processed Data

Some features use AI to generate optional suggestions:

• AI batch processing — looks at recent chat messages to surface potential gift ideas, events, visit plans, memories, and conversation topics.
• "Help me say this" — takes a short text snippet you provide and suggests alternative wording.

What gets sent to the AI:

• Chat message text from TalkJS (only the most recent messages within a short window).
• Speaker identifiers are anonymised before processing — your real name and email are not sent.
• Timestamps, for chronological context.

What does NOT get sent:

• Photos, audio, or other media.
• Your email, real name, or personally identifiable information (beyond what you may have typed in chat).
• Check-in data, "Thinking of You" data, or anything outside the chat.

Safety measures we've built in:

• PII detection — if the AI encounters phone numbers, government IDs, or similar identifiers, those items are automatically discarded and never stored.
• Crisis-word detection — content flagged as potentially crisis-related is excluded from AI processing.
• Medical-advice guard — the AI is instructed never to provide medical or therapeutic guidance.
• The AI cannot evaluate, score, or interpret your relationship quality or emotional state.
• All AI outputs are suggestions only — nothing is saved unless you explicitly confirm it.

e. Device & Technical Data

We may collect:

• Device type, operating system, and app version — for crash reporting and compatibility.
• Push notification tokens — stored in your profile so we can deliver notifications (partner signals, reminders). These are device-specific and don't reveal your identity.
• Error and crash reports — sent to Sentry (see Section 5). These may include stack traces, breadcrumb logs, and device info. They don't intentionally include your personal content.
• App update metadata — BridgeLDR uses Expo Updates (EAS) to deliver over-the-air updates; this service may see your app version and platform to serve the right update.

f. Subscriptions and Purchases (BridgeLDR Plus)

If you subscribe to BridgeLDR Plus, we and our subscription provider process:

• App user identifier — your BridgeLDR account id, so purchases can be linked to your account across installs and devices.
• Subscription and purchase status — whether BridgeLDR Plus is active, the product you selected (for example monthly or yearly), and related entitlement information.
• Store transaction metadata — information returned by Apple or Google when you buy, renew, restore, or cancel through their app stores.

Payment card and billing-account details are handled by Apple or Google, not by BridgeLDR. We do not receive your full payment card number.

RevenueCat (see Section 5) helps us validate purchases and keep your entitlement in sync. It does not receive your chat, memories, check-ins, Bond responses, or other relationship content.

g. On-Device Storage

Some preferences live only on your phone and are never sent to our servers:

• "Thinking of You" preferences (vibration and animation settings) — via local storage.
• Authentication session tokens — in encrypted device storage (Expo SecureStore).
• Temporary UI state (like cleanup prompt dismissals).

---

3. How We Use Your Information

We use your data to:

• Run the App — chat, Bond prompts, check-ins, memories, events, gifts, visits, topics, and "Thinking of You" signals.
• Connect you with your partner — invitations, shared content, and partner-visible data.
• Generate optional AI suggestions — structured suggestions from your chat, to help you remember things and plan ahead (see Section 4).
• Send notifications — via Expo, Firebase Cloud Messaging (Android), and Apple Push Notification Service (iOS).
• Keep things reliable — crash and error reporting through Sentry. Internal performance tracking (development only, not shared externally).
• Update the App — over-the-air updates via Expo Updates.
• Provide paid features — if you subscribe to BridgeLDR Plus, to confirm your entitlement, restore purchases, and show subscription management options in the App.

We do not:

• Use your data for advertising or ad targeting.
• Sell, rent, or trade your personal data to anyone.
• Build marketing profiles from your data.
• Track your location — we only store the country you tell us.

---

4. AI Features — How They Work

BridgeLDR includes optional AI features powered by OpenAI's API (currently the GPT-4o-mini model):

• AI batch processing — extracts structured suggestions (gifts, events, visits, memories, topics) from recent chat.
• "Help me say this" — suggests rephrased wording for a message you're composing.

The important bits:

• AI features are optional. You can use BridgeLDR perfectly well without them.
• Processing happens on our server-side infrastructure (Supabase Edge Functions) and through OpenAI's API. Chat text is sent to OpenAI for processing and is subject to OpenAI's data usage policies.
• No one at BridgeLDR reads your private conversations or reviews AI outputs.
• AI suggestions may not always be accurate or appropriate — they're starting points, not answers.
• Nothing is saved unless you review and confirm it.
• The AI does not make decisions about your account, content visibility, or relationship.

---

5. Third-Party Services

We share data only with providers we need to run the App. They process your data solely to deliver their part of the service:

We don't share your data with anyone else for advertising, marketing analytics, or cross-app tracking.

If you use BridgeLDR Plus, billing is processed by Apple or Google through their app stores. RevenueCat helps us validate purchases and keep your entitlement in sync across installs and devices. RevenueCat's handling of that data is described in RevenueCat's Privacy Policy.

If you use subscription management in the App, RevenueCat Customer Center may show options we configure (for example restore purchases, manage a subscription, or contact support). Any optional feedback you submit there is handled under this policy and RevenueCat's terms.

---

6. What Your Partner Can See

BridgeLDR is a couples app, so sharing is part of the design. Here's a clear picture of what your partner can and can't see:

Your partner CAN see:

• Your nickname, pronouns, profile photo, and the pet name they gave you.
• Chat messages you send.
• Bond responses — but only after you've both responded to the same prompt.
• Items you explicitly mark as "shared" (events, memories, gift ideas, visit plans, topics).
• Your check-in emoji and sub-feeling (when shared).
• "Thinking of You" signals you send.

Your partner CANNOT see:

• Your email address.
• Your birthday details (they see a birthday event, not the date itself).
• Items you mark as "private" (private memories, private gifts, etc.).
• Your AI suggestions — not until you choose to save them.
• Your quiz/onboarding answers.
• Your notification preferences or app settings.

If your partner deletes their account, you'll be notified. Shared data between you may be removed or become inaccessible.

---

7. Data Storage and Security

• All server-side data lives in Supabase (PostgreSQL), hosted on modern cloud infrastructure.
• Media files (photos, audio) are stored in Supabase Storage with access controlled by Row Level Security — meaning you can only access your own data and your couple's shared data.
• Session tokens are kept in encrypted device storage (Expo SecureStore) on your phone.
• All communication between the App and our backend uses HTTPS/TLS encryption.
• We take reasonable technical and organisational measures to protect your data.

No system is perfect. If you discover a security issue, please let us know right away at the email below.

---

8. Your Control and Choices

You're in charge of your data:

• You choose what to share — every entry can be private or shared. AI features are entirely optional.
• AI suggestions need your approval — nothing is auto-saved. You review, then decide.
• Bond is mutual — your response isn't revealed until your partner responds too.
• Notifications are flexible — adjust timing, toggle "Thinking of You" vibrations, or turn off push at the OS level.
• Edit your profile anytime — nickname, pronouns, country, timezone, birthday, photo.
• Remove your photo — from Settings → Account → Personal Info.
• Manage subscriptions — upgrade, restore purchases, or open subscription management from Settings. Ongoing billing changes are completed in your Apple or Google account settings.
• Delete your account — see the next section.

---

9. Account Deletion

You can delete your account at any time: Settings → Account → Delete account.

Here's what happens:

• Your profile (nickname, email, pronouns, country, birthday, preferences) is permanently removed.
• Your auth record is deleted.
• Your media (photos, audio) in cloud storage is deleted with your profile.
• Shared content (events, memories, Bond responses, chat) may be removed or become inaccessible to your former partner. Some shared items may be anonymised to preserve the integrity of your partner's remaining data.
• Your partner is notified that you've left.
• Your push tokens and check-in history are deleted.
• Local data (preferences on your device) stays until you uninstall the App or clear its storage.
• Active subscriptions — deleting your BridgeLDR account does not automatically cancel a BridgeLDR Plus subscription billed through Apple or Google. Cancel in your device subscription settings if you no longer want to be charged.
• This can't be undone.

Deletion is processed immediately. If something goes wrong technically, it will complete within 30 days.

---

10. Data Retention

• We keep your data only while your account is active and it's needed to provide the service.
• When you delete your account, your data is deleted or anonymised promptly (see Section 9), unless the law requires us to keep it.
• Sentry retains crash reports per their standard policy (typically 30–90 days). These don't intentionally contain personal content.
• TalkJS retains chat messages per their own retention policy, tied to your TalkJS user ID.
• AI processing is stateless — we don't store chat text for AI beyond the immediate processing window. OpenAI's own retention practices are described in their policies.
• RevenueCat retains purchase and subscription records needed to provide billing support, prevent fraud, and reconcile entitlements, in line with RevenueCat's Privacy Policy.

---

11. International Data Transfers

Our providers (Supabase, TalkJS, OpenAI, Sentry, Expo, RevenueCat, and Apple or Google when you use in-app billing) may process data in the United States or other countries outside where you live. By using the App, you consent to these transfers. We rely on Standard Contractual Clauses (SCCs) or equivalent safeguards where required by law.

---

12. Your Rights (GDPR, UK GDPR, and Similar Laws)

If you're in the European Economic Area (EEA), the UK, or a jurisdiction with similar data protection laws, you have the right to:

• Access — get a copy of the personal data we hold about you.
• Rectification — correct anything that's wrong.
• Erasure — ask us to delete your data (or just use the in-app delete feature).
• Restriction — ask us to limit how we process your data.
• Objection — object to processing based on legitimate interests.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent — where we process based on consent, you can withdraw it anytime.
• Automated decisions — our AI features generate suggestions only. No automated decisions are made about your account or access.

Contact us at the email below to exercise any of these. We'll respond within 30 days (or sooner, if your local law requires it). We may ask to verify your identity first.

Our legal basis for processing (GDPR):

• Contract — what we need to run the App for you (account, profile, partner pairing, content, notifications).
• Consent — AI features, optional data (birthday, photo, quiz), push notifications.
• Legitimate interests — crash reporting, security, and keeping the service reliable — balanced against your privacy.

---

13. California Residents (CCPA/CPRA)

If you're in California, you have additional rights:

• Right to know — what personal information we collect and why.
• Right to delete — request deletion of your information.
• Right to opt out of sale — we do not sell your personal information. Ever.
• Right to non-discrimination — exercising your rights won't affect how we treat you.

Contact us at the email below to exercise these rights.

---

14. Children's Privacy

BridgeLDR is not for anyone under 18. We don't knowingly collect data from minors. If we learn we have, we'll delete it promptly. If you believe a child has created an account, please let us know.

---

15. Device Permissions

The App may ask for certain permissions on your device. Each one is optional and only requested when you use the feature that needs it:

You can revoke any permission anytime in your device settings. The corresponding feature will stop working, but everything else stays the same.

---

16. Cookies and Tracking

BridgeLDR is a native mobile app. We don't use cookies, web beacons, or browser-based tracking. We don't use ad SDKs or cross-app tracking of any kind. Subscription billing uses store and subscription-management tools for app functionality only, not for advertising or cross-app tracking.

---

17. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we'll let you know through the App. The "Last Updated" date at the top always reflects the latest version.

Continuing to use the App after changes are posted means you accept the updated policy.

---

18. Contact Us

Questions, concerns, or requests about your data? We'd like to hear from you:

Email: support@bridgeldr.com

We aim to respond within 30 days.

---

19. One Last Thing

BridgeLDR is built to support connection — not to replace communication, therapy, or professional help. We hope you use it in a way that feels natural, respectful, and good for your relationship. If you or your partner are going through something serious, please reach out to a qualified professional or local helpline.