Data Deletion Policy

Last updated: April 2026 · Bond & Learn AI Ltd.

1. Your Right to Delete

You have the right to request deletion of your personal data at any time. Bond & Learn AI is committed to honouring data deletion requests in compliance with GDPR (EU 2016/679), the Israeli Privacy Protection Law, and applicable platform policies including Apple App Store and Google Play Store guidelines.

2. How to Request Deletion

You can delete your data in two ways:

In-app: Go to Settings → Danger Zone → Delete Account. Deletion is immediate and irreversible.
By email: Send a request to privacy@bondandlearnai.com with your registered email address.
Via Facebook / Meta: If you connected via Facebook login, you may also request deletion through Facebook's data deletion callback URL: https://bondandlearnai.com/api/facebook/data-deletion

3. What Gets Deleted

Account access

Removed immediately upon confirmation. You cannot log in after this.

Profile data

Name, grade, school, bio, avatar, preferences — deleted within 24 hours.

Learning data

Flashcards, quiz history, session notes, study progress, matches — deleted within 30 days.

AI interactions

Chat history with your AI coach and agents — deleted within 30 days.

Content created

Apps, games, podcasts, and presentations built in the platform — deleted within 30 days.

Billing data

Payment method details are never stored by us (Stripe handles this). Invoices are retained for 7 years for legal/accounting compliance.

Support & security logs

Retained for up to 90 days after deletion for fraud prevention and abuse compliance, then purged.

Analytics data

Aggregated, anonymised analytics may be retained indefinitely — these cannot be linked back to you.

4. What We Cannot Delete

Certain records may be legally required to be retained:

Financial transaction records (invoices, receipts) — retained 7 years per Israeli accounting law.
Security logs related to fraud or legal investigations — retained per law enforcement requests.
Anonymised, aggregated statistical data that cannot be re-linked to any individual.

5. Deletion Timelines

Immediate: Account access revoked, login disabled.

24 hours: Profile and personal information removed from active systems.

30 days: Learning data, AI history, content deleted from primary databases and backups.

90 days: Security and support logs purged.

6. Third-Party Services

We may share your deletion request with relevant third-party processors:

Supabase — our database provider. Data deleted from Supabase within our 30-day window.
Stripe — payment processor. Payment methods are stored only by Stripe. Contact Stripe directly to delete payment data.
Resend — email delivery. Email logs are retained per Resend's policy (30 days).
Google / Vercel / Meta — analytics and infrastructure providers may retain anonymised logs per their own policies.

7. Confirmation

We will send a deletion confirmation email within 3 business days of processing your request. If you do not receive confirmation, contact us at privacy@bondandlearnai.com.