Privacy Policy

Last updated: June 4, 2026

Bonbon ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the Bonbon mobile application.

1. Information We Collect

Information You Provide

Data Type	Purpose
Email address	Account creation and authentication
Display name	Shown in app to your partner
Photos and images	Shared diary feature (user-uploaded)
Anniversary date	Milestone tracking feature

Information Collected Automatically

Data Type	Purpose
Purchase history	Subscription management
Device token (FCM)	Push notifications
App interactions	Product analytics (Firebase Analytics)
Crash data	App stability diagnostics (Crashlytics)

Information We Do NOT Collect

Location data (GPS or IP-based)
Contacts or address book
Health or fitness data
Financial data (card numbers, bank accounts)
Browsing or search history
Advertising identifiers (IDFA, GAID)
Biometrics, calendar data, SMS, or call logs

2. How We Use Your Information

To create and manage your account
To connect you with your partner
To provide app features (diary, games, questions, anniversary tracking)
To send push notifications you've opted into
To manage your subscription
To improve app stability and performance

3. Data Sharing

No data is sold to third parties
No ad networks — Bonbon contains no ads
No data brokers
Firebase (Google) processes: authentication, Firestore database, Cloud Storage, Analytics, Crashlytics, and FCM
Apple App Store / Google Play Store process: subscription and payment management exclusively on-device

4. Data Retention

Data	Retention Period
Account and profile data	Until you delete your account
Photos	Until you delete them or delete your account
Firebase Analytics data	14 months (Firebase default)
Crashlytics crash logs	90 days (automatic expiry)
FCM tokens	Until account deleted or app uninstalled

5. Data Deletion

You can delete your account from: Settings > Account > Delete Account

When you delete your account:

All Firestore documents for your account are queued for deletion
Photos are removed from Firebase Storage
Your Firebase Auth account is disabled, then deleted
FCM tokens are invalidated
Subscription records are removed
Full purge completes within 30 days

You may also email sendtoichime@gmail.com to request data deletion.

6. Data Security

Data encrypted in transit via HTTPS / TLS 1.3
Data encrypted at rest via Firebase encryption
Authentication secured through Firebase Auth
Firestore security rules restrict data access to authorized users only

7. Tracking & Advertising

Bonbon does not use advertising identifiers (IDFA or GAID). We do not track users across third-party apps or websites. No App Tracking Transparency (ATT) prompt is required because we do not engage in tracking as defined by Apple.

8. Children's Privacy

Bonbon is rated 17+ and is not intended for children under 17. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us at sendtoichime@gmail.com.

9. Your Rights (GDPR / CCPA)

European Economic Area (EEA) / UK Residents

Legal basis for processing: Contract performance (account features) and Legitimate interest (analytics and crash reporting). You have the right to access, rectify, erase, and port your data.

California Residents

You have the right to know what data we collect, request deletion, and opt out of data sales. We do not sell personal information.

To exercise any of these rights, email sendtoichime@gmail.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. Continued use of Bonbon after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us:

Email: sendtoichime@gmail.com
Data Controller: Revolution Sport Company Limited