Effective October 8, 2026

Bond is on a mission to capture people’s memories and make them useful. We at Bond want you to understand what information we collect, and how we use and share it.

Bond is an application (the “Bond Product”) provided by Dots Connected Inc. (“Bond”, “we”, “us”, or “our”). This Privacy Policy explains how we collect, use, and protect personal information when you use our services—including our Bond Product accessible via web or mobile application, visit our website (the “Site”), or access any other applications or services that link to this Privacy Policy (collectively, the “Services”).

Key terms. Capitalized terms such as Stories, Memories, Q&A and Your Content have the meanings in the Key terms of our Terms of Service. In short: Stories are your posts, Memories are the facts about your life Bond builds from them, and Simulations are research questions businesses ask that Bond answers using Partner Program participants’ de-identified Memories.

1. Personal Information We Collect

Personal information you provide to us directly:

• Account information, such as your name, phone number, username and password used to log into your account, your location and date of birth, and any social media handles or other biographical information you add to your profile. We may ask you to provide us with some additional personal information about you, such as topics that interest you, a profile picture, and a bio in your profile. This information helps others get to know you and allows us to personalize your experience with the Services.
• Your Content: We collect the Stories, Memories, Q&A and profile information you provide (Key terms in the Terms of Service define these)." Your Content is determined solely by you and may, at your discretion, include personal or sensitive information (such as names, contact details, or other information). We do not require or encourage the inclusion of sensitive data in Your Content, and you are responsible for ensuring that any Your Content complies with applicable laws. When providing Your Content, you are responsible for ensuring that your conduct does not violate rights, including privacy rights, of others. If you join the Partner Program, Memories we identify as revealing certain sensitive topics, such as your health, religion or personal finances, are used in Simulations only if you separately opt in, and some information, including precise location, is never used in Simulations. Section 5, "Sensitive personal information," lists both.
• Generated content (outputs): When you interact with the Bond Product, we may process Your Content to generate AI-based responses (“Outputs”) that are shown to you or other users. These Outputs may reflect, reproduce, or infer personal information from Your Content—about you or others—even if that information was not directly written or stated.
• Q&A with other users: When you ask or answer questions with your connections, we collect those questions and answers. We may review them if a user reports, or we detect, a potential violation, potentially illegal or illicit activity, violations of our Terms of Service and/or any other matter of concern, as permitted by applicable laws.
• Contact information of your connections: We may, with your permission, access your mobile contact list including saved phone numbers and names, to help you connect with people you know on the Bond Product. Where you provide us with the personal information of third parties, such as your connections, it is your responsibility to inform them about the processing of their personal information in accordance with this Privacy Policy, and to confirm that they have given their permission.
• Feedback or correspondence, such as information you provide when you contact us with questions, feedback, or otherwise correspond with us online. 
• Partner Program information: If you join, tax information such as your taxpayer identification number, payout account details (processed by Stripe), and information used to verify your identity, age and location.

Information we obtain from third parties:

• Third-party log-in: If you create an account or log into the Services using third-party services, such as Google, we will receive your name and email address and/or phone number as permitted by your profile settings on the third-party service in order to authenticate you. The information we receive when you authenticate through a third-party service depends on the settings, permissions and privacy policies of the third-party service. You should always check the privacy settings and notices in the relevant third-party services to understand what data may be disclosed to us or shared with our Services.

Automatic data collection. When you visit, use, or interact with the Services, we automatically log certain information about your visit, use, or interactions. This information includes:

• Usage data, such as how long was spent on the Bond Product, usage history, navigation paths, account and profile settings, information about activity on the Bond Product, page or screen, access times, and duration of access, and whether marketing emails were opened or links within them clicked.

• Your interactions with others. We collect information about how you connect and interact with other users on the Bond Product. This includes details like who you engage with, how often, and in what ways. We also learn about you through other users’ activity—such as when someone you know uploads a contact list that includes you, or when our system notices you share strong similarities with another user. This helps us suggest relevant connections to enhance your experience on Bond.

• Device data, such as the computer or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, device type (e.g., phone, tablet), IP address, unique identifiers, language settings.

• Crash and diagnostic data. We use Firebase Crashlytics to collect and analyze crash reports and diagnostic data when our mobile application encounters errors. This information—such as device model, OS version, and stack traces—helps us identify, prioritize, and fix stability issues. Crashlytics data is processed under Google’s privacy policies. For more information about Google’s privacy practices, click here.

• General location information, such as city, state or geographic area. We may determine the general area from which your device accesses our Services based on information like its IP address for security reasons and to make your product experience better, for example to protect your account by detecting unusual login activity.

• Precise location-related information. If you enable Location Services on your device, we may collect precise geolocation information—such as GPS coordinates and other device signals—to add contextual relevance to your queries. We use this data to tailor and personalize the answers you receive on our platform. You can control precise geolocation settings from the operating system of your device.

We collect this information using cookies and similar technologies, which may be provided by third parties. These technologies may store information on your device or in the browser for the purpose of helping you navigate between pages efficiently, remembering your preferences, enabling functionality, and helping us understand user activity and patterns. These technologies include:

• Cookies, which are text files that websites store on a visitor’s device to uniquely identify the visitor’s browser or to store information or settings in the browser for the purpose of helping you navigate between pages efficiently, remembering your preferences, enabling functionality, and helping us understand user activity and patterns.

• Local storage technologies, like HTML5, that provide cookie-equivalent functionality but can store larger amounts of data, including on your device outside of your browser in connection with specific applications.

• Web beacons, also known as pixel tags or clear GIFs, which are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked.

2. How We Use Personal Information

We use personal information for the following purposes:

To operate our Services. We use your personal information to provide, operate, and maintain our Services. This includes using your personal information to:

• Generate answers in Q&A based on Your Content, to improve relevance.

• Index your searches for future retrieval. Your Q&A and search activity are privately stored and analyzed to help you rediscover relevant information later and receive better answers in the future.
• Communicate with you about our Services, including by sending you announcements, updates, security alerts, and support and administrative messages.
• Respond to your requests, questions, and feedback.

To develop and improve our Services, including:

• Personalization: We analyze Your Content to improve recommendations, search relevance, and Bond Product behavior. This helps the system become more helpful and tailored to you the more you use it.
• Troubleshooting and Enhancement: To monitor how the Services are used, troubleshoot issues, and improve functionality.
• Product Development: To identify opportunities for new features or products and to enhance the performance of the Bond Product.
• Surveys and research: To conduct surveys and other research about what you like about our Services and what we can do better.

For direct marketing. We may from time-to-time send you direct marketing communications as permitted by law, such as newsletters. You may opt out of our marketing communications as described in the “Opt out of marketing communications” section below.

For compliance and protection. We may use your personal information to comply with legal obligations and to defend us against legal claims or disputes, including to:

• Verify accounts and activity
• Find and address violations of our terms or policies
• Investigate suspicious activity
• Detect, prevent and combat harmful or unlawful behavior
• Detect and prevent spam and other bad experiences
• Detect when someone needs help and provide support
• Detect and stop threats to our personnel and property
• Maintain the integrity of our Services

Partner Program. If you join, we de-identify your memories and use them with other participants' to generate answers for businesses testing products, messaging and advertising.

3. How We Disclose Personal Information

Service providers. Your data—including Your Content and Outputs—may be disclosed to third-party providers of artificial intelligence and large language models (LLM) that power our Services. We disclose personal information to service providers that help us operate the Services, such as hosting services, cloud services, information technology services, email communication software and email newsletter services, marketing services, payment processors, user relationship management and user support services, and web analytics services.

Professional advisors. We may disclose personal information to professional advisors, such as lawyers, bankers, auditors and insurers, where necessary in the course of the professional services that they render to us.

For compliance, fraud prevention and safety. We may disclose personal information for the compliance, fraud prevention, and safety purposes described above. 

Business transfers. We may sell, transfer or otherwise share some or all of our business or assets, including personal information, in connection with a business transaction (or potential business transaction) such as a corporate divestiture, merger, consolidation, acquisition, reorganization or sale of assets, or in the event of bankruptcy or dissolution.

Other users. Some of your information, including your username and profile picture, are visible to any signed up user. When you post Stories or take part in Q&A, you may choose a visibility level that either makes your content accessible to everyone on the platform, restricts it so that only your direct connections can view it, or restricts it to just yourself.

SMS Information Protection. When you provide your mobile phone number during onboarding, Bond uses it to send recurring automated text messages including account updates, event notifications, and user mentions. Message frequency varies based on your account activity. Message and data rates may apply. You can opt out at any time by replying STOP, or get help by replying HELP. Notwithstanding anything to the contrary in this Privacy Policy, Bond does not share, sell, or rent mobile phone numbers or personal data collected through our SMS program to third parties or affiliates for marketing or promotional purposes.

Simulations. Simulation Customers never receive your name, contact details, images, raw content or account identifiers. See the Notice of Financial Incentive for more.

4. Your Choices

You can choose who sees your Stories and Q&A (just you, your connections, or the public).

You can choose what information you make publicly available to all users on Bond or to your connections only.

Access or update account information. Users who have registered for an account with us may review and update certain personal information in their account profile by logging into the account settings.

Delete your information or account. You can find and delete specific information or permanently delete your account. If you delete your account on Bond, we delete your information including Your Content, subject to the below.

• Timeline for deletion. It may take up to ninety (90) days to delete your information after we begin the account deletion process or receive a content deletion request. After the information is deleted, it may take us up to another 90 days to remove it from backups and disaster recovery.
• We reserve the right to keep information. We keep information as long as we need it to provide the Bond Product, comply with legal obligations or protect our or other’s interests. We decide how long we need information on a case-by-case basis.
• Preservation of information. We retain information to the extent needed to comply with certain legal obligations such as a legal request to comply with applicable law, a governmental investigation, a legal claim, complaint, litigation or regulatory proceeding. We may preserve your information longer to prevent harm, for safety, security, and integrity purposes. We also may preserve information from accounts that have been disabled and content that has been removed for violations of our terms and policies.
• Simulations. Once you delete a memory, we stop using it in new Simulations, even while deletion from our systems is still in progress.

Opt-out of marketing communications. You may respond "STOP" to any Bond text message to stop receiving all text messages from Bond.

You may opt out of marketing-related emails and other communications by following the opt-out or unsubscribe instructions in the communications you receive from us or by contacting us as provided in the “How to Contact Us” section below. You may continue to receive Services-related and other non-marketing emails.

Opt out of receiving updates from organizers or connections. Organizers may send you event invitations via Bond, unless you have opted out of receiving future event invitations from the organizer. If you receive an event invitation, you may respond “X” to the text message to stop receiving future event invitations from that organizer. Connections may send you mentions via Bond, unless you have opted out of receiving future mentions from the connection. If you receive a mention, you may respond “X” to the text message to stop receiving future mentions from that connection.

Limit tracking. There are a number of ways to limit tracking, which we have summarized below. Please note that these tools are not associated with us and we cannot guarantee that they work as their providers advertise them:

• Blocking cookies in your browser. Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. For more information about cookies, including how to see what cookies have been set on your device and how to manage and delete them, visit https://www.allaboutcookies.org/.
• Using privacy plug-ins or browsers. You can block our Site from setting cookies by using a browser with privacy features, like Brave, or installing browser plugins like Privacy Badger, Ghostery, or uBlock Origin, and configuring them to block third party cookies/trackers.  

Note that because these opt-out mechanisms are specific to the device or browser on which they are exercised, you will need to opt out on every browser and device that you use.

Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to "Do Not Track" signals. To find out more about "Do Not Track," please visit http://www.allaboutdnt.com.

5. Your US State Privacy Rights

This section applies to residents of US states with consumer privacy laws, including California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia. It supplements the rest of this Privacy Policy. Some rights described here apply only in certain states, and we note where that's the case.

Personal information we collect, use and disclose. In the past 12 months, we collected the following categories of personal information. We collect it from you, from your device, from other users (for example, when someone uploads a contact list that includes you), and from third-party log-in providers such as Google.

Sensitive personal information. We use sensitive personal information to provide the Services you request, verify your identity and eligibility, pay royalties and meet tax obligations, secure your account and prevent fraud, and, only as described below, in Simulations.

Never used in Simulations, whether or not you opt in: precise geolocation; citizenship or immigration status; government identification numbers; account log-in credentials and financial account, debit or credit card numbers; genetic, biometric and neural data; status as a crime victim; the contents of messages, emails or texts written by other people; and content about an identifiable minor. Before any Simulation use, we replace precise locations in Memories with general locations, such as a city or region.

Used in Simulations only if you opt in: your physical or mental health, including reproductive or sexual health and gender-affirming care; sex life or sexual orientation; transgender or nonbinary status; racial, ethnic or national origin; religious or philosophical beliefs; union membership; and personal finances. You can change this choice at any time in Settings > Partner Program > Sensitive Topics. A change applies to new Simulation Questions from that date.

If we find that content in these categories was used without your opt-in, we remove it from future Simulations. These categories are the same as those in the Partner Policy, Section 3. We don't use sensitive personal information to infer characteristics about you except as you direct through your opt-in choices.

If we add a category to the opt-in list, we won't use information in that category for you unless you opt in again.

Sale and sharing of personal information. We don't sell or share your personal information, as "sell" and "share" are defined by applicable privacy laws. If you join the Bond Partner Program, businesses receive only de-identified synthetic Simulation results, which are not personal information. We don't "share" it for cross-context behavioral advertising, and we don't process it for targeted advertising. We don't knowingly sell or share the personal information of consumers under 16.

De-identified information. When we de-identify information, we take reasonable measures to ensure it can't be associated with you. We maintain and use it only in de-identified form, we don't attempt to re-identify it (except to test that our de-identification works), and we contractually require anyone who receives it to do the same.

Retention. We keep each category of personal information only as long as reasonably necessary for the purposes above:

• Account information and user content: until you delete it or your account, plus up to 90 days for deletion and 90 more days to remove it from backups.
• Royalty payment and tax records: 7 years after the payment, as required for tax and accounting purposes.
• Identity verification information: for the life of your Program participation.
• Usage, device and crash data: 24 months.
• Information needed for legal, safety or fraud purposes: as described in "We reserve the right to keep information" above.

Your rights. Depending on your state, you may have the right to:

• Know and access. Confirm whether we process your personal information and get the specific pieces we hold, along with the categories of information, sources, purposes and recipients.
• Portability. Receive your personal information in a portable, readily usable format.
• Delete. Have us delete personal information we collected from or about you, subject to legal exceptions.
• Correct. Correct inaccurate personal information.
• Opt out. Opt out of the sale of your personal information, targeted advertising, and profiling that produces legal or similarly significant effects. We don't currently engage in any of these.
• Limit use of sensitive personal information (California), or give or withdraw consent to its processing (other states). You can manage this with the Sensitive topics setting above.
• Get a list of third parties. Residents of Oregon and Minnesota can request a list of the specific third parties to which we have disclosed personal information.
• Question profiling decisions. Minnesota residents can question the result of profiling and request information about it.

Not be discriminated against. We won't deny you the Services, charge you different prices or give you a different level of service because you exercised these rights. The Partner Program is a financial incentive program you can join or leave at any time; see the Notice of Financial Incentive.

Financial incentives. The Bond Partner Program pays participants royalties and bonuses and uses their de-identified memories in Simulations. It is a financial incentive program. Its material terms, the categories of personal information involved, how to opt in and withdraw, and how we estimate the value of your data are described in the Notice of Financial Incentive (Exhibit A to the Partner Program Terms). You opt in by tapping Accept and can withdraw at any time in Settings > Partner Program. When you withdraw, Bond stops using your information in new Simulation Questions from that date.

How to exercise your rights. You can submit a request by emailing support@bond.now, or using Settings > Privacy > Your data in the app.

Verification. We'll verify your identity before fulfilling a request to know, delete or correct. Usually we do this by confirming control of your account, email address or phone number. We may ask for more information when the request involves sensitive information or financial records.

Authorized agents. You can use an authorized agent to submit a request. We may require written, signed permission from you and may ask you to verify your identity directly with us.

Response times. We'll confirm receipt within 10 business days and respond within 45 days. If we need more time, we may extend that by up to 45 more days and will tell you why.

Opt-out preference signals. We don't sell or share personal information or use it for targeted advertising, so there is currently nothing for an opt-out preference signal such as Global Privacy Control to opt out of. If that changes, we will treat these signals as a valid request to opt out.

Appeals. If we deny your request, you can appeal within 60 days by emailing support@bond.now with the subject line "Privacy Request Appeal." We'll respond in writing within 45 days and explain our decision. If your appeal is denied, you can contact your state attorney general.

Other state notices

• California "Shine the Light." We don't disclose personal information to third parties for their own direct marketing purposes.
• Nevada. We don't sell covered information as Nevada law defines it. Nevada residents can still submit an opt-out request to support@bond.now.
• Washington and Nevada consumer health data. Our Consumer Health Data Privacy Policy explains how we handle consumer health data under Washington's My Health My Data Act and Nevada's consumer health data law.

Contact. For questions about this section, contact us at support@bond.now or by mail at Dots Connected Inc., 8 The Green Ste A, Dover, DE 19901.

6. Security

We use organizational, technical and administrative measures designed to protect against unauthorized access, misuse, loss, disclosure, alteration and destruction of personal information we maintain. Unfortunately, data transmission over the Internet cannot be guaranteed as completely secure. Therefore, while we strive to protect personal information, we cannot guarantee its security.

7. Children

The Services are not directed to children under 13 years of age. If we learn that we have collected personal information from a child without the consent of the child’s parent or guardian as required by law, we will delete it.

8. Changes To This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Services. If you are a registered user, we will notify you using the email address you gave us when you signed up if we make material changes made to the Privacy Policy.

9. How To Contact Us

Please direct any questions or comments about this Privacy Policy to support@bond.now.