Bondyr
BondyrSwipe. Match. Collaborate.

Privacy Policy

Last updated: May 2026 · Draft pending legal review.

Bondyr ("we", "us") operates the Bondyr platform (web and mobile apps). We are committed to protecting your personal data in accordance with Morocco's Law 09-08 on the protection of individuals with regard to the processing of personal data, and the guidelines of the Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP).

1. Data we collect

  • Account: email, password (hashed), display name, role (seeker / employer), language preference.
  • Profile: photo(s), city, birthdate, gender (optional), bio, education, past roles, skills, languages, salary expectations, industry preferences.
  • Employer profile: company name, logo, headquarters, industry, mission, benefits, founded year, website.
  • Activity: swipes, likes, matches, job applications, messages, attachments shared in chat, blocks and reports.
  • Payments: subscription and credit purchase records (we do not store full card numbers — these are handled by our payment processor).
  • Device & technical: IP address, browser/OS, push notification tokens (if you opt in), basic crash logs.

2. How we use your data

  • Match candidates and employers based on stated preferences.
  • Power chat between matched users.
  • Process payments for premium plans and credit packs.
  • Send transactional emails (sign-up, password reset, match notifications).
  • Detect abuse, fraud and policy violations.
  • Aggregate anonymized analytics to improve the product.

3. Who can see what

  • Public on-platform: display name, photo, city, role title / company name, verified badge.
  • Visible to matched counterparts only: bio, salary range, skills, languages, full work history, chat messages.
  • Private to you: email, password, payment history, exact birthdate, raw IP / device data.

4. Third-party processors

We use the following sub-processors. They process data only on our instructions:

  • Lovable Cloud / Supabase — database, authentication, file storage.
  • YouCan Pay — payment processing for Morocco-based transactions.
  • Lovable AI Gateway — optional AI bio polish.
  • Email delivery provider — transactional emails.
  • Hosting / CDN — page delivery.

5. Retention

  • Active account data: kept while your account exists.
  • Deleted accounts: profile, swipes, likes, matches and chat are removed or anonymized within 30 days.
  • Payment records: retained for 10 years for tax/accounting purposes (legal requirement).
  • Backups: rolling 30-day window.

6. Your rights

Under Moroccan law (09-08) you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate data.
  • Object to processing on legitimate grounds.
  • Delete your account and associated data — see Delete account.
  • Lodge a complaint with the CNDP (cndp.ma).

7. Security

Data is encrypted in transit (HTTPS) and at rest. Database access is restricted by Row-Level Security policies. Chat attachments use short-lived signed URLs. We do not sell your data to third parties.

8. Children

Bondyr is not intended for users under 18. We do not knowingly collect data from minors.

9. Contact

For any privacy question or to exercise your rights: privacy@bondyr.com.