This Privacy Policy is effective as of October 22, 2023, or earlier if you are presented with it sooner, like when you create an account, pair your Bond Touch bracelets to a mobile device, or visit Bond Touch’s website.

Congratulations and thank you for purchasing and using your Bond Touch bracelets to keep in touch with your loved ones. We are honored that you are trusting us with being a part of your close relationships. For Bond Touch bracelets to work, we collect and use information that is important to you. This Privacy Policy explains how we use that information.

Here we describe the privacy practices for our bracelets, other devices, apps, chat and other functionality, software, websites, products, and services (the “Services”). We discuss the data we collect, how we use it, the controls we give you over your information, and the measures we take to keep it safe.

1. LEGAL BASES FOR COLLECTING, PROCESSING, AND USING INFORMATION

Our legal bases for collecting, processing, and using information from you in connection with the Services are as follows:

(a) CONSENT

Your purchase, activation, or use of a bracelet, or your opening of an account with us, or your use of our website, or your logging onto or use of our app, or your use of any of our Services, constitutes your legal consent to collection, processing, and use of information by us in accordance with this Privacy Policy under US law, the GDPR, the CCPA, or any other applicable law in your jurisdiction.

(b) NECESSITY

Collection and use of information by us in accordance with this Privacy Policy is necessary for these purposes:

2.INFORMATION WE COLLECT

When you use our Services, we collect the following types of information.

(a) INFORMATION YOU PROVIDE US

Account Information

Some information is required to create an account on our Services and to use such Services, such as your name, mobile telephone number, mobile carrier, password, email address, social media accounts, date of birth, residential address, and photo. The person that will exchange touches, chats, text messages, photos, or any other media or content with you through the bracelets will also create an account on our Services and will provide the same information to us. You may also choose to provide other types of information related to any other Services we may provide in the future.

Age-Related Information for Children and Parent/Legal Guardian Consent Purposes

We also collect age-related information for the purpose of complying with applicable laws regarding online access for children and obtaining the consent of a parent or legal guardian. We may collect such information from you, or, if we have a reasonable belief that you are below the applicable age of consent in your jurisdiction, we may seek to collect such information from your parent or legal guardian. Please see Section 7, “Our Policies for Children”.

Additional Information

To help improve your experience or enable certain features of the Services, you may choose to provide us with additional information, such as access to your contact list on your mobile device.
​

If you contact us or participate in a survey, contest, or promotion, we collect the information you submit such as your name, contact information, and messages.

If you choose to connect your account on our Services to your account on another service, we may receive information from the other service. For example, if you connect to Facebook, Twitter, or Instagram, we may receive information like your name, profile picture, age range, language, email address, and friend list.

Payment and Card Information

If you purchase Bond Touch bracelets or other merchandise on our website or an authorized seller’s website, you provide your payment information, including your name, credit or debit card number or PayPal account information, card expiration date, CVV code, and billing address. We store your shipping address to fulfill your order.

(b) INFORMATION WE RECEIVE FROM YOUR USE OF OUR SERVICES

Bond Touch Device and Apps Information

Your Bond Touch bracelet and apps, together with your mobile device, collect data on:

When information regarding touches syncs with our apps or software, or if information regarding text messages, photos, or other media and content is transmitted through the chat functionality in the app, data is recorded on your mobile device and is then transferred to our servers which may be operated by third parties.

Location Information

The Services include features that use location data to a city-level of granularity, which may be obtained from GPS signals, device sensors, Wi-Fi access points, and cell tower IDs. We may also derive your approximate location from your IP address, phone number, or email address. We do not collect location data to a level of granularity more precise than city-level.

Usage Information

When you access or use our Services, we receive certain usage data. This includes information about your interaction with the Services, such as when you turn on the Bond Touch bracelet, create or log into your account, pair your Bond Touch bracelet with your account, open or interact with the Bond Touch app or bracelet, log out of your account, or turn off the Bond Touch bracelet.

We also collect data about the devices you use to access the Services, including Bond Touch bracelet information, IP addresses, email addresses, mobile phone numbers and other identifiers, browser type, language, operating system, referring web pages, pages visited, location, and cookie information. among other sources of data collection.

Personally Identifiable Information (PII) Relating to Touches or Chat Functionality

Personally Identifiable Information (PII) includes names, mobile smartphone numbers, email addresses, photos, and anything else that could identify you or the person with whom you exchange touches or communicate using the app’s chat functionality or any other functionality.

PII related to data from touches sent and received through bracelets (“Touch Data”) remains saved within the mobile app on your smartphone until you uninstall the app. The Touch Data is transmitted to Bond Touch’s servers and is used to deliver touches between you and the person that is receiving and sending touches with you. We then pseudonymize the Touch Data to remove its personally identifiable aspects which are then deleted immediately from our servers after a touch is delivered. We keep the pseudonymized Touch Data for our analytics which we may share with third-party processors (see “How We Use Information”).

PII exchanged in connection with the use of the app’s chat functionality (“Chat Data”) will be encrypted. All Chat Data is pseudonymized except that we will know the identity of the sender and recipient of such Chat Data until the recipient receives the Chat Data from the sender. Chat Data is stored by us or our third-party processors for a maximum of three (3) days except for up to ten (10) photos that the user (either a sender or recipient) chooses to save. Any such saved photos will remain stored by us until the user deletes such photos, and any photos deleted by a user will be deleted on the user’s device and will no longer be stored by us. Any photos not saved by a user will be deleted within three (3) days. Text messages cannot be saved by a user and will be deleted within three (3) days.

Other PII Not Collected from Touches or the Chat Functionality or Other Functionality

We retain other PII that is collected from sources other than touches or your use of the chat or other functionality, such as your payment information, account information, shipping information, and any information from social media accounts that you allow us to obtain. We use that information as described in this Privacy Policy.

Cookies and Similar Technologies We Use

Like many online products, we use cookies, pixels, local storage, and software development kits (“SDKs”) to remember things about you so that we can improve our Services.

We and our partners use these technologies on our Services as follows:

To change your settings related to cookies and similar technologies, see Section 5(a) “Your Options Relating to Cookies and Similar Technologies”.

3. HOW WE USE INFORMATION

We use the information we collect to provide, improve, and develop our Services..

(a) PROVIDING, IMPROVING, AND DEVELOPING SERVICES

We deliver the Services, improve them, and research and develop new ones using the information we collect. For example, we use the information to do the following:

(b) COMMUNICATING WITH YOU

We use your information to send you Service notifications and inform you of new features or products. You can control marketing communications and most Service notifications by changing your account settings or via the “Unsubscribe” link in an email. We also use your information to respond to you when you contact us.

(c) PROMOTING SAFETY AND SECURITY

We use the information we collect to promote the safety and security of the Services, our users, and other parties. For example, we may use the information to authenticate users, facilitate secure payments, protect against fraud and abuse, respond to a legal request or claim, conduct audits, and enforce our terms and policies.

(d) INFERENCES

We may draw inferences from any of the information received from you in connection with the Services and this Privacy Policy.

4. HOW INFORMATION IS SHARED

We do not share your information, including your PII, except in the limited circumstances described below.

(a) WHEN YOU AGREE OR DIRECT US TO SHARE

You may direct or authorize us to share your information with others, for example, by choosing to connect to any of your social media accounts or to a third-party app to which you grant access to your account. If you do so, their use of your information will be governed by their privacy policies and terms. You can revoke your consent to share with third-party apps by changing your account settings.

 (b) FOR EXTERNAL PROCESSING

A list of processors and the data processed by them includes the following as of the date of this Privacy Policy is listed on Exhibit A at the end of this Privacy Policy. The processors are located variously in the United States, the European Union, or elsewhere. We may engage the services of other similar third-party processors or process other types of data from time to time at our discretion to maintain and enhance the quality of the Services.

We may engage other similar third-party processors or process other types of data from time to time at our discretion to maintain and enhance the quality of the Services.

(c) FOR LEGAL REASONS OR TO PREVENT HARM

We may preserve or disclose information about you to comply with a law, regulation, legal process, or governmental request; to assert legal rights or defend against legal claims; or to prevent, detect, or investigate illegal activity, fraud, abuse, violations of our terms, or threats to the security of the Services or the physical safety of any person.

Touch Data and Chat Data may be monitored for objectionable or illegal content through a BlackBox process in which we will not have access to the substance or content of such Touch Data or Chat Data except for time, location (if a user has enabled location information), properties and details of touches, photos, or text messages that are sent or received. The BlackBox process may involve applicable law enforcement agencies.

We will notify you of legal process seeking access to your information, such as search warrants, court orders, or subpoenas unless we are prohibited by law from doing so. In cases where a court order specifies a non-disclosure period, we provide delayed notice after the expiration of the non-disclosure period. Exceptions to notifying you include exigent or counterproductive circumstances, for example, when there is an emergency involving a danger of death or serious physical injury to a person.

We may share non-personal information that is aggregated or pseudonymized so that it cannot reasonably be used to identify an individual. We may disclose such information publicly and to third parties to partners under agreement with us.

If we are involved in a merger, acquisition, or sale of assets, we will continue to take measures to protect the confidentiality of personal information and give affected users notice before transferring any personal information to any new entity.

5. HOW TO ACCESS OR DELETE YOUR PERSONAL INFORMATION

We provide you with account settings and tools to access and manage the personal information associated with your account. You can also download certain account information, including data about your activities.

We store information associated with your account until your account is deleted. You can delete your account at any time by contacting us at [email protected]. Please note that it may take a bit of time to delete your account information, and we may preserve it for legal reasons or to prevent harm, including as described in Section 4, “How Information Is Shared”.

(a) YOUR OPTIONS RELATING TO COOKIES AND SIMILAR TECHNOLOGIES

You have a number of options to control or limit how we and our partners use cookies and similar technologies, including for advertising.

Although most browsers and devices accept cookies by default, their settings usually allow you to clear or decline cookies. If you disable cookies, however, some of the features of our Services may not function properly.

Our websites do not respond to Do Not Track signals because we do not track our users over time and across third-party websites to provide targeted advertising. However, we believe that you should have a choice regarding interest-based ads served by our partners, which is why we outline the options available to you above.

(b) DELETION OF INACTIVE ACCOUNTS

We delete accounts that have been inactive for nine (9) months after the last account activity. All PII of the users of inactive accounts is also deleted.

6. ANALYTICS AND ADVERTISING SERVICES PROVIDED BY OTHERS

We work with partners that provide us with analytics and advertising services. This includes helping us understand how users interact with the Services, serving ads on our behalf across the internet, and measuring the performance of those ads. These companies may use cookies and similar technologies to collect information about your interactions with the Services and other websites and apps. Please see “Cookies and Similar Technologies We Use” and “Your Options Relating to Cookies and Similar Technologies” above.

​(a) USE OF VISITOR ACTION PIXELS FROM FACEBOOK

We use the “visitor action pixels” from Facebook, Inc. (1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are based in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”)) on our website.

The visitor action pixel is located in a Google container in the header section of our website.

This allows user behavior to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This enables us to measure the effectiveness of Facebook ads for statistical and market research purposes. The data collected in this way is anonymous to us, i.e. we do not see the personal data of individual users. However, this data is stored and processed by Facebook, which is why we are informing you, based on our knowledge of the situation. Facebook may link this information to your Facebook account (if you have one) and also use it for its own promotional purposes, in accordance with Facebook’s Data Usage Policy https://www.facebook.com/about/privacy/. You can allow Facebook and its partners to place ads on and off Facebook. A cookie may also be stored on your computer for these purposes.

The legal basis for the use of this service is Art. 6(1)(f) of the GDPR (defined in Section 9 below). You can object to the collection of your data by Facebook pixel, or to the use of your data for the purpose of displaying Facebook ads by contacting the following address: https://www.facebook.com/settings?tab=ads.

(b) USE OF VISITOR ACTION PIXELS FROM TWITTER

We use the “visitor action pixels” from Twitter Inc. (1355 Market Street, Suite 900, San Francisco, CA 94103, USA, www.twitter.com (“Twitter”)), which are used to target existing users and customers to create remarketing campaigns.

The visitor action pixel is located in a Google container in the header section of our website.

Targeting activity can include directly reaching out to users or visitors to our website and campaign pages and/or retargeting previous customer lists. Twitter sets a minimum size limit for a tailored audience to 100 users. If the tailored audience does not match 100 Twitter users, it will display as “audience too small” and will not be available for targeting.

The legal bases for the use of this service is the GDPR (defined in Section 9 below), Art. 6(1)(a) (regarding your consent) to the extent that you do not object or opt-out, and Art. 6(1)(f) (regarding Bond Touch’s legitimate purposes). You can opt-out from Twitter's interest-based ads by following their instructions: https://support.twitter.com/articles/20170405. Details about Twitter’s policies for conversion tracking and tailored audiences can be found at https://business.twitter.com/en/help/ads-policies/other-policy-requirements/policies-for-conversion-tracking-and-tailored-audiences.html. You can learn more about the privacy practices and policies of Twitter by visiting their Privacy Policy page: https://twitter.com/privacy.

7. OUR POLICIES FOR CHILDREN AND AGE-RELATED INFORMATION

We take additional measures to protect children’s privacy. Persons under the age of 13 in the United States, or 16 in the European Union, or the equivalent minimum age in the relevant jurisdiction, are not permitted to create accounts unless a parent or legal guardian has consented to creating that account in accordance with applicable law and this Privacy Policy.

We will require all new users are required to submit information regarding their age on our app before being able to set up an account. We may also require existing users who have not submitted their age information to us to do so as a condition of being able to continue use of their accounts and the Services.

We may also request information regarding country of residence from all users to determine the applicable laws relating to consent by a parent or legal guardian for use of the Services. This may be done directly by us (e.g. asking for information regarding your country of residence) or indirectly through other types of information that we typically collect (e.g. country or area codes for telephone numbers).

If a user’s age is below the applicable age of consent, that underage user’s parent or legal guardian must provide us with written consent for the underage user to set up an account and use the Services. We will request additional information to verify the identity of an underage user’s parent or legal guardian, which may include a name, address, phone number, and/or email address. We may contact an underage user’s parent or legal guardian directly by any reasonable means of communication of our choice, including through the app, by email, by text message, or any other means. If an underage user’s parent or legal guardian does not provide such consent, the underage user may not set up an account and may not use the Services.

We rely on accurate and truthful self-reporting by all users and their parents or legal guardians if required. If we learn that we have collected the personal information of an underage user under the relevant minimum age without the written consent of that user’s parent or legal guardian, we will take steps to delete the underage user’s information as soon as possible and we will disable any account associated with such underage user. Parents or legal guardians who believe that their child has set up an account with us and/or used the Services without consent should contact us promptly through the contact information in Section 12.

Notwithstanding any disabling of any child’s account or the deletion of any related information, we reserve the right to retain an archival copy of information related to that account. The retention of an archival copy is for legal reasons and for preventing harm as described in Section 4(c), which may include providing assistance to law enforcement agencies. All such information will be segregated from other information held by us.

8. INFORMATION SECURITY

We use a combination of technical, administrative, and physical controls to maintain the security of your data. No method of transmitting or storing data is completely secure, however. If you have a security-related concern, please contact [email protected].

9. EUROPEAN PRIVACY DISCLOSURES

If you live in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, or are a citizen, national, or permanent resident of the European Union, please review these additional privacy disclosures under the European Union’s General Data Protection Regulation (“GDPR”).

Bond Touch is a corporation organized under the laws of the State of Delaware, United States of America, and is a “Controller” for the purposes of Regulation (EU) 2016/679 (General Data Protection Regulation) (“GDPR”). Please see the end of this Privacy Policy for our contact information.

We recognize the potentially sensitive nature of Touch Data as it may constitute “personal data” in connection with your personal relationships for purposes of Article 9 of the GDPR. The Touch Data is therefore pseudonymized and stored and processed separately from other PII to ensure that it cannot be used to identify you or any person with whom you exchange touches.

We may transfer information to our corporate affiliates, service providers, and other partners that process it for us based on our instructions, all of which are “Processors” for purposes of the GDPR. Such processors must act in compliance with this Privacy Policy, applicable law, and any other appropriate confidentiality and security measures. These partners provide us with services globally, including customer support, information technology, payments, sales, marketing, data analysis, research, and surveys.

As of the date of this Privacy Policy, we do not have a Data Protection Officer for purposes of Article 37 of the GDPR as we do not conduct regular and systematic monitoring users on a large scale or process any special categories of PII on a large scale.

(a) OUR INTERNATIONAL OPERATIONS AND DATA TRANSFERS

We operate internationally and may transfer information collected within the European Economic Area and Switzerland to the United States for the purposes described in this Privacy Policy. Bond Touch complies with the EU-US and Swiss-US Privacy Shield principles regarding the collection, use, sharing, and retention of personal information from the EEA and Switzerland, as described in our EU-US Privacy Shield certification and Swiss-US Privacy-Shield certification. Learn more about Privacy Shield at https://www.privacyshield.gov/welcome.

We are subject to the oversight of the US Federal Trade Commission and remain responsible for personal information that we transfer to others who process it on our behalf as described in Section 4, “How Information Is Shared”. If you have a complaint about our Privacy Shield compliance, please contact us. You can also refer a complaint to our chosen independent dispute resolution body, the International Centre for Dispute Resolution/American Arbitration Association, and in certain circumstances, invoke the Privacy Shield arbitration process. More information is available at http://go.adr.org/privacyshield.html.

(b) LEGAL BASES FOR PROCESSING PERSONAL DATA

For personal data subject to the GDPR, we rely on several legal bases for processing data each of which are described in Section 1.

(c) HOW TO EXERCISE YOUR LEGAL RIGHTS UNDER THE GDPR

Under the GDPR, you have a general right to object to the use of your information for direct marketing purposes.

Please see Section 2 for information on options for controlling how we and our partners use cookies and similar technologies for advertising. Please see Section 5 above for information on how your account settings and tools allow you to exercise your rights under the GDPR to access and control your personal data and marketing communications.

If you need further assistance regarding your rights, please contact us per the information in Section 12 and we will consider your request in accordance with applicable laws. You also have a right to lodge a complaint with your local data protection authority under the laws applicable thereto.

10. CALIFORNIA PRIVACY DISCLOSURES

If you are a California resident, please review the following additional privacy disclosures under the California Consumer Privacy Act (“CCPA”).

(a) HOW TO EXERCISE YOUR LEGAL RIGHTS UNDER THE CCPA

You have the right to understand how we collect, use, and disclose your PII, to access your PII, to request that we delete certain information, and to not be discriminated against for exercising your privacy rights. You may exercise these rights by reviewing and changing your account settings as described in Section 5, including (i) accessing your PII, (ii) understanding how we collect, use, and disclose your PII, and (iii) deleting your PII.

If you need further assistance regarding your rights, please contact us per the information in Section 12 and we will consider your request in accordance with applicable laws.

(b) TYPES OF INFORMATION WE COLLECT, USE, AND DISCLOSE FOR BUSINESS PURPOSES

We collect the types of information listed in Section 2 and in the table in Exhibit A. We receive this information from you, your device, your use of the Services, third parties (including social media accounts linked to your account), and as otherwise described in this policy. We use and disclose these types of information for the business purposes described in Sections 3 and 4.

We never sell our users’ PII. We do work with partners who provide us with advertising services as described in Section 6. Also, please refer to Section 5(a) for your options to control the use of your information regarding cookies and advertising.

Bond Touch is committed to adhering to all legal and regulatory guidelines associated with SMS marketing, as mandated by the Telephone Consumer Protection Act (TCPA).

We require explicit written consent from users before engaging in SMS marketing. Consent can be obtained through our website or mobile application where users can opt-in to receive SMS communications from us.

Upon obtaining consent, we will provide a clear disclosure regarding the nature and scope of the SMS communications users will receive. This includes, but is not limited to, the frequency of messages and the type of content to be shared.

Users have the right to opt-out of SMS communications at any time. An opt-out option will be included in every SMS communication sent. Users can also opt-out by contacting our customer support.

Users have the right to report any violations or revoke consent at any time. Any concerns or reports regarding our SMS communications can be directed to our customer support.

Non-compliance with TCPA regulations can result in significant penalties, including fines and legal actions. Bond Touch is committed to strict adherence to these regulations to ensure the privacy and satisfaction of our users.

This SMS Marketing and Compliance section is intended to ensure a respectful and lawful engagement with our users while leveraging SMS communications for a better user experience.

12. CHANGES TO THIS PRIVACY POLICY

We will notify you before we make material changes to this Privacy Policy and give you an opportunity to review the revised Privacy Policy before deciding if you would like to continue to use the Services.

13. HOW TO CONTACT US

If you have questions about this Privacy Policy, or about our use of your information, please contact us at:

Bond Touch inc,

101 Jefferson Drive, 1st Floor

Menlo Park

California 94025

USA

[email protected]

You may also chat with us directly at https://www.bond-touch.com/.