Bound ("we," "our," or "us") is a roommate and friend matching application for college students, operated by GoBound App ("Company"). We are headquartered in Austin, Texas, and reachable at jack@boundapp.io.
This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have over your data. By creating an account or using Bound, you agree to the practices described in this policy.
If you do not agree with this policy, do not use the app.
Bound is intended exclusively for individuals who:
We do not knowingly collect personal information from children under the age of 13. If we become aware that a user is under 13, we will immediately delete their account and all associated data. If you believe a child under 13 has created an account, contact us at jack@boundapp.io.
When you create an account and build your profile, we collect:
| Data | Purpose |
|---|---|
| Email address (.edu required) | Account verification, authentication, communications |
| Full name | Profile display |
| School / University | Matching users within the same institution |
| Major | Profile display and matching context |
| Graduation year | Matching preferences and profile display |
| Hometown | Profile display |
| Gender | Profile display and user-controlled matching preferences |
| Bio | Profile display (max 200 characters) |
| Profile photos (up to 6) | Profile display in the swipe feed |
| Interests | Profile display |
| Looking for | Roommates or Friends — used to filter feed |
| Instagram handle (optional) | Displayed on profile if you choose to share |
| Spotify username (optional) | Displayed on profile if you choose to share |
| Match preferences | Gender and graduation year filters for your swipe feed |
When you use Bound, we automatically generate and store:
We may collect the following technical data when you use the app:
We do not collect your precise GPS location. Your location is never tracked.
We do not use your data to serve third-party advertisements. We do not sell your personal information to any third party.
Your profile — including your name, photos, school, major, graduation year, hometown, bio, gender, interests, and any optional social handles you've chosen to share — is visible to other verified users at your institution within the Bound app. Your messages are visible only to you and the person you matched with.
| Provider | Purpose | Data Shared | Location |
|---|---|---|---|
| Supabase | Database, authentication, file storage | All profile data, messages, swipes, matches, photos | United States (Oregon) |
| Resend | Transactional email delivery | Your email address, OTP codes | United States |
These providers are contractually obligated to use your data only to provide services to us and are not permitted to use it for their own purposes.
We may disclose your information if required to do so by law, court order, or government authority, or if we believe in good faith that disclosure is necessary to comply with a legal obligation, protect the rights or safety of Bound, our users, or the public, or investigate fraud or security issues.
If Bound is acquired, merged with another company, or its assets are sold, your personal information may be transferred as part of that transaction. We will notify you via email or prominent in-app notice before your data is subject to a different privacy policy.
Your data is stored on servers operated by Supabase, located in the United States (AWS us-west-2, Oregon region). We implement the following security measures:
No method of transmission or storage is 100% secure. While we work hard to protect your data, we cannot guarantee absolute security. If you suspect unauthorized access to your account, contact us immediately at jack@boundapp.io.
| Data Type | Retention Period |
|---|---|
| Account and profile data | Until you delete your account |
| Photos | Until you delete your account or remove the photos |
| Swipes and matches | Until you delete your account |
| Messages | Until you delete your account |
| Reports you submitted | Up to 2 years for safety purposes |
| Auth tokens | Cleared when you sign out |
When you delete your account, we will delete your personal data within 30 days, except where we are required by law to retain it longer, or where data is needed for legitimate safety purposes (e.g., reports of harassment).
You can view and edit your profile at any time within the app under Edit Profile.
You have the right to delete your account and all associated personal data at any time. To do so:
This will permanently remove your profile, photos, swipes, matches, and messages from our systems within 30 days. This action cannot be undone. Alternatively, email us at jack@boundapp.io with the subject line "Account Deletion Request."
Transactional emails (OTP codes, security alerts) are necessary for the app to function and cannot be opted out of while you have an active account. We do not send marketing emails.
You may request a copy of the personal data we hold about you by emailing jack@boundapp.io. We will respond within 30 days.
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
To exercise your CCPA rights, contact us at jack@boundapp.io with the subject line "CCPA Request."
Residents of Virginia (VCDPA), Colorado (CPA), and Connecticut (CTDPA) have similar rights to access, correct, delete, and obtain a copy of their personal data. Contact us at jack@boundapp.io to exercise these rights.
Bound is a native iOS application and does not use browser cookies. We do not use third-party advertising trackers, analytics SDKs (such as Facebook SDK or Google Analytics), or cross-app tracking technologies.
If you choose to display your Instagram or Spotify username on your profile, those handles are shown to other users as text only. Bound does not connect to Instagram or Spotify APIs and does not access your accounts on those platforms.
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page, post the updated policy at boundapp.io/privacy, and notify you via in-app notice or email if the changes are material. Your continued use of Bound after any changes constitutes your acceptance of the updated policy.
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:
GoBound App
Email: jack@boundapp.io
Website: boundapp.io
Austin, Texas, United States
For account deletion requests, data access requests, or privacy complaints, please use the subject line that matches your request so we can respond promptly.