Your relationship is not our content.
Private defaults, deliberate sharing and strict relationship-level isolation are structural parts of Bonded—not premium add-ons.
Private by default
Profiles are private and there is no public member directory. Personal journals and wellbeing entries start private. Sharing is selected per entry, including summary-only sharing for check-ins.
Relationship isolation
Every protected query verifies active membership in the requested relationship. Partners from another relationship cannot see its tasks, agreements, journals, points, files or activity.
Sensitive information
Safewords, hard limits, private consent notes and sensitive aftercare details are encrypted at rest using deployment-managed keys. Keys are not committed with the application and may be rotated.
Discreet communication
Emails and browser notifications use neutral wording by default. Discreet mode changes the application title and shared concepts to neutral labels, hides chosen role titles and offers fast sign-out and automatic session locking.
Control and portability
You can export your personal data, revoke active devices, deactivate your account or request permanent deletion. Leaving a relationship immediately prevents access to newly created private information.