Privacy Policy

This page explains how AZORES LABS, INC. collects, uses, stores, discloses, and protects personal information when you use Bondings services.

Privacy at a Glance

This summary is provided for convenience. The full Privacy Policy below controls if there is any difference between this summary and the full policy.

• We do not sell personal data. We do not sell personal and sensitive user data, and we do not share personal information for cross-context behavioral advertising or targeted advertising.
• Photos are user-directed. We access photos only when you select them or otherwise direct the Service to use them. We do not scan or index your full photo library.
• Nearby setup data is limited. Bluetooth and Wi-Fi scan results are used for setup and are not uploaded to our servers or retained as a location history.
• You can request deletion. Account deletion is available in the app and by contacting support@bondings.ai.

Privacy Policy

This Privacy Policy explains how AZORES LABS, INC., the company that operates the Bondings.ai application and connected smart photo frame services ("AZORES LABS," "we," "us," or "our"), collects, uses, stores, discloses, and protects personal information when you use the Bondings mobile application for Android, identified by the package name com.azoreslabs.bondings, any Bondings mobile application for Apple platforms where available, our related websites, and connected Bondings smart photo frame products and services (collectively, the "Service").

This Privacy Policy applies to the current production version of the Service. It does not describe features or software development kits that have not yet been enabled in the released application. If we introduce new data practices, including analytics, crash reporting, advertising, or push notification services, we will update this Privacy Policy and the applicable Google Play Data safety and App Store privacy disclosures before those practices begin.

By using the Service, you acknowledge the practices described in this Privacy Policy. Where consent is required by law or by app store policy, we will request it separately and before collecting or accessing the relevant data.

1. Information We Collect

We collect the categories of information described below, depending on how you use the Service.

1.1 Account and Authentication Information

When you register, sign in, reset a password, or verify an account, we may collect your email address, password or other authentication credential, verification codes, account identifier, and authentication tokens. The mobile application does not retain your password locally after it is submitted. Authentication tokens and the account identifier may be stored in app-private storage to keep you signed in.

If you choose Sign in with Google, we receive information authorized by you through Google, which may include a Google identity token, email address, display name, profile image URL, and Google account identifier. Google Sign-In is optional.

1.2 Information About Your Paired Bondings Device

To discover, bind, configure, maintain, and display the status of a Bondings smart photo frame, we may collect information about the paired frame, including its serial number (SN), MAC address, eSIM EID or ICCID, operating system version, hardware version, network type, Wi-Fi network name (SSID), battery level, charging status, and a device name chosen by you.

These identifiers relate to the Bondings frame that you choose to pair with the Service. We do not use the application to collect the IMEI, IMSI, or SIM serial number of your Android phone.

1.3 Photos and Other User Content

We collect content that you choose to provide or create through the Service, including photos selected from your device, photos selected through Google Photos, images generated through AI features, images received from a paired device, AI text prompts, transcribed prompt text, device playlist configurations, custom device names, and related metadata such as photo dimensions, upload status, cloud photo identifiers, and file URLs.

We do not scan or index your full photo library. Photos are accessed only when you select them or otherwise direct the Service to use them.

1.4 Voice Recordings

If you use voice input for an AI prompt, the Service records the audio you intentionally provide and sends it to our backend and/or a speech-to-text service to create a transcription. The temporary local audio file is deleted after transcription processing is completed. Server-side copies of the audio are retained only for as long as necessary to complete the transcription process and are permanently deleted within 24 hours. We do not use original audio recordings for advertising or AI model training.

1.5 Payment and Transaction Information

If payment functionality is offered, Stripe, app stores, or other payment providers may process your payment method information. Bondings.ai does not receive or store your full payment card number. We may receive transaction identifiers, subscription or order status, purchase history, payment status, and limited billing-related information needed to provide the purchased service, manage transactions, prevent fraud, and comply with legal obligations.

1.6 Information Collected Automatically

When your device communicates with our servers, we may automatically receive technical information such as your IP address, application version, package name, platform, request headers, date and time of access, and security or error information. We use this information for authentication, routing requests, preventing abuse, maintaining security, and troubleshooting the Service.

The application may create rotating diagnostic log files in app-private local storage. These logs may contain technical events, error stacks, a device serial number, or a partially masked account reference. Logs are not automatically uploaded. They may be shared with us only when you choose to provide them for support or troubleshooting.

1.7 Nearby Device, Bluetooth, Local Network, and Wi-Fi Scanning

The Service uses Bluetooth and, on some Android versions, location-related system permissions to discover nearby Bondings frames and Wi-Fi networks during setup. On Apple platforms, the Service may request Bluetooth, local network, photo library, camera, or microphone access where needed by an enabled feature. Nearby Bluetooth, local network, and Wi-Fi scan results are used for setup and are not uploaded to our servers or retained as a location history.

We do not collect precise GPS location through the Service. Our servers may receive your IP address as part of normal network communications; an IP address may reveal an approximate geographic area even though we do not use the application to perform GPS tracking.

1.8 Information We Do Not Currently Collect

The current released version does not include advertising SDKs, Firebase Analytics, Firebase Crashlytics, or Firebase Cloud Messaging. We do not currently collect advertising identifiers for targeted advertising, contacts, SMS messages, call logs, calendar data, health data, fitness data, or precise GPS location.

2. How We Use Information

We use the information described above to:

• Create, maintain, authenticate, and secure accounts.
• Send verification and service-related messages.
• Discover, bind, configure, activate, and maintain paired Bondings devices.
• Display device status and connect a frame to Wi-Fi.
• Upload, store, organize, synchronize, display, and delete photos.
• Manage device playlists and user-selected display preferences.
• Generate AI images and transcribe voice prompts when you request those features.
• Process eligible payments and subscriptions.
• Provide customer support and diagnose errors.
• Prevent fraud, abuse, security incidents, and unauthorized access.
• Comply with law and enforce our agreements.

We do not use photos, voice recordings, Google user data, or AI prompts for targeted advertising. We do not use such content to train our own or a third party's general-purpose AI models unless we first provide a separate, clear disclosure and obtain any consent required by law.

3. Android and Apple Platform Permissions

The Service requests permissions only when needed for an enabled feature. You can deny or later revoke permissions in your device settings, although the related feature may stop working.

Your Wi-Fi password is used only to configure the paired frame. It is transmitted locally to the frame over Bluetooth and is not uploaded to our servers.

4. Google Account and Google Photos Data

If you use Google Sign-In or choose photos through a Google service, we access only the Google data and permissions you authorize and only for the user-facing feature you requested. OAuth tokens and selected photo information are used to authenticate your request and import the selected content into Bondings.ai.

Our use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or use it for purposes unrelated to the feature you authorized. You may revoke Bondings access from your Google Account security settings.

5. How We Disclose Information

We disclose information only as necessary to operate the Service, at your direction, or as required by law. Recipients may include:

• Our backend and hosting providers, which process account, device, photo, AI prompt, and service data on our behalf.
• Cloud object storage providers, which store photo files and related media.
• Google LLC, when you use Google Sign-In, select content from Google Photos, or use Google Cloud or Gemini-powered functionality.
• Stripe, Inc., app stores, or other payment providers, when you use payment functionality.
• OpenAI, ChatGPT, Gemini, speech-to-text, image-generation, or similar AI service providers, when you request those features.
• Professional advisers, law enforcement, regulators, courts, or other parties when disclosure is reasonably necessary to comply with law, protect rights and safety, investigate abuse, or establish or defend legal claims.
• A purchaser or successor in connection with a merger, financing, reorganization, or sale of all or part of our business, subject to appropriate notice and safeguards.

Our current infrastructure and AI service providers include Google Cloud in the United States, Gemini, and ChatGPT. We do not sell personal and sensitive user data. We do not share personal information for cross-context behavioral advertising or targeted advertising as those terms are defined under applicable U.S. state privacy laws.

6. Local Storage and Security

The application stores authentication tokens, account identifiers, photo metadata, cached images, temporary editing files, and diagnostic logs in app-private storage provided by the operating system. Temporary audio is removed locally after transcription. Signing out clears authentication tokens, account identifiers, Google sign-in state, and applicable media caches.

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including HTTPS encryption in transit, access controls, account authentication, app sandboxing, and limited access by personnel and service providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain account information while your account is active and for the period reasonably necessary to provide the Service. Photos, prompts, playlists, and paired-device records are generally retained until you delete them, unpair the device, or delete your account, subject to backup cycles and lawful retention needs.

Temporary local voice recordings are deleted after transcription. Server-side audio is retained only as long as necessary to complete transcription and is permanently deleted within 24 hours. Local diagnostic logs use rotating storage of approximately five files of up to five megabytes each, with older files overwritten.

When you request account deletion, we will delete or de-identify your account and associated user data within 30 days after we receive and verify your request, except for information that we are required or permitted to retain for security, fraud prevention, dispute resolution, tax, accounting, payment processing, or other legal obligations. Where our service providers process personal information on our behalf, we will instruct them to delete the relevant information as required and permitted by applicable law.

8. Your Choices and Privacy Rights

Depending on where you live, you may have rights to request access to, correction of, deletion of, or a copy of your personal information; to withdraw consent; to object to or restrict certain processing; and to appeal a decision about a privacy request. We will not discriminate against you for exercising a privacy right.

You can control your information by deleting photos or other content in the Service, unbinding a device, signing out, revoking Google authorization, changing device permissions, or deleting your account.

To submit a privacy request or appeal, contact us at support@bondings.ai. We may verify your identity before completing a request.

9. Account Deletion

Account deletion is available in the application through: My/Profile > Account Details > Delete Account.

You may also request deletion without reinstalling the application by emailing support@bondings.ai. Account deletion is permanent and includes deletion or de-identification of associated account data, subject to the limited retention described in Section 7.

10. U.S. State Privacy Disclosures

During the preceding 12 months, we may have collected the categories described in Section 1, including identifiers, customer records, commercial information, internet or network activity, device identifiers, audio information, photographs, and user-generated content. We collect and disclose these categories for the business and commercial purposes described in Sections 2 and 5.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. Residents of California and other U.S. states may have rights to know, access, correct, delete, or obtain a portable copy of personal information and to appeal certain decisions. Authorized agents may submit requests where permitted by law. Contact support@bondings.ai to exercise these rights.

11. Children's Privacy

Bondings is intended for adults who manage a connected household photo frame and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13. If you believe a child has provided personal information without appropriate parental authorization, contact us at support@bondings.ai and we will take appropriate steps to delete it.

12. International Data Transfers

We and our service providers may process information in the United States and other countries where we or they operate. These locations may have data protection laws different from those in your jurisdiction. Where required, we use appropriate safeguards for international transfers. Our primary hosting location and transfer safeguards are Google Cloud in the United States.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the Service, data practices, service providers, or legal requirements. We will post the updated policy, revise the "Last updated" date, and provide additional notice or request consent when required. We will update Google Play Data safety disclosures and App Store privacy responses when our data practices change.

14. Data Practices Summary

The following summary describes the main categories of information handled by the Service, the purposes for processing, and whether those categories may be processed by service providers that help us operate the Service.

Contact Us

If you have questions, requests, or complaints about these Terms, privacy, or data protection, contact:

AZORES LABS, INC.
Attn: Privacy
5405 Morehouse Dr., Ste 320
San Diego, CA 92121
United States

Email
support@bondings.ai

Website
www.bondings.ai