BondKeeper privacy policy
Effective date: 30 October 2026.
Who we are
BondKeeper is operated by Point7 Studio (ABN 86 632 193 650), Australia. This policy covers the Android / Google Play app.
What stays on your device
BondKeeper keeps rental addresses, optional agent details and bond information, room and item labels, condition notes, checklist dates and photographs in app-private storage on your device. Saved photo records include a hash and device-reported capture metadata, including time and, if available and permitted, location and accuracy. Unknown values remain unknown. Generated PDF reports, purchase-entitlement records and report-send records are also stored locally. There is no BondKeeper account, backend server, automatic data upload, advertising or analytics. This does not mean the device or third-party services never transfer data.
Camera and location
The camera is requested when you use capture, not during onboarding. Photos are taken inside the app; there is no gallery import. Foreground location is optional and requested on capture. BondKeeper does not request background location or microphone access. If location is denied or unavailable, that is recorded rather than inventing a location. Photos and reports can contain private addresses, notes and location metadata; review them before exporting.
Backup
If Google device backup is enabled, the platform may include app data under its backup and privacy rules. The app does not verify backup completion or guarantee recovery. Device backup does not replace exporting and checking an evidence bundle. App data remains eligible for platform backup.
Purchases
Google Play processes purchases of the lifetime report unlock using your store account. BondKeeper queries the store and holds store transaction objects/identifiers in memory to process and finish purchases. It persists the product ID, store, entitlement status and related times, rather than transaction IDs or purchase tokens. It does not receive your payment card details through its purchase adapter and does not send receipts to a BondKeeper server or verification provider. Store services have their own privacy rules. Purchase restoration is tied to the same store account; evidence bundles do not contain your entitlement.
Exports and sharing
You may save or import an evidence bundle using the system folder/file picker. A chosen storage provider may transfer it under that provider's rules. Reports leave the app only when you choose email or share after unlocking and verification. The email address you enter for a report is used for that action and is not stored by BondKeeper; the recipient app may keep an unsent or sent message. Local send records contain status, counts, report hash and your own confirmation, not the address. Opening a mail or share app does not prove delivery. Recipient apps and people control their copies. Official guidance links open a browser; the destination receives normal web requests under its own privacy rules.
Support and diagnostics
Diagnostics stay in a bounded in-memory log. In Support you can preview an immutable export containing only registered event names and severity, then voluntarily open email or share with that exact text. Export omits fields, timestamps, errors, notes, addresses, photos and purchase tokens. It is not an automatic crash report. You may clear this log in the app; this does not delete evidence. Support recipients can receive your email address or anything you add in your mail app. We keep support correspondence for 24 months after the last message in a conversation, then delete it. You may request earlier deletion unless the correspondence is needed for an open refund, complaint or legal claim; in that case, we keep it until the matter closes.
Deleting your data
Original evidence has no in-app delete control. To remove the app's local records, uninstall the app or use Android's clear-storage control. First save and verify a separate evidence bundle if you want to retain originals. Uninstall or clearing local storage does not delete exported bundles, sent reports, recipient copies, store transaction history or platform backups. Manage those with their providers. Temporary hand-off and diagnostic attachments are cleared at launch or before the next staging operation; the local diagnostic ring is lost when the process ends.
Contact
Contact Point7 Studio at support@point7studio.com.
Changes
Effective date: 30 October 2026.