NaturalBond
Sign inGet started

Privacy Policy

Last updated: June 2026 — Version 1.0

1. Who we are

NaturalBond (“we”, “us”, “our”) is the Data Controller for personal data collected through this application. We are an EU-based company. Our contact for all data and privacy matters is hello@naturalbond.app.

NaturalBond is a daily parenting connection tool. Parents use it to receive personalised daily plans for strengthening their relationship with their child, guided by evening check-ins and AI analysis.

2. What data we collect and why

Account data

Your name and email address, collected when you create an account.

Legal basis: Article 6(1)(b) GDPR — necessary to provide the service.

Child profile data

Your child's first name and age (4–18). This is provided by you as a parent and is used to personalise the daily plans and activities you receive. We do not collect information directly from children. Only parents create accounts and interact with the service.

Legal basis: Article 6(1)(b) GDPR — necessary to provide personalised plans.

Evening check-in responses

Your daily reflections about how your day went with your child. These responses are used to analyse relationship patterns and generate your next day's plan. This data is sensitive by nature — it reflects your emotional state and parenting experience.

Legal basis: Article 6(1)(b) GDPR — core functionality of the service.

Parenting preferences and goals

Your communication style, time availability, biggest parenting challenge, and your relationship goal (building or rebuilding connection). Collected during onboarding to calibrate your plans.

Legal basis: Article 6(1)(b) GDPR — necessary to provide a personalised service.

Inferred insights

We use AI to infer relationship patterns, emotional signals, and love language tendencies from your check-in responses. These insights are used only to generate better plans for you — they are never shared with third parties as individual data points.

Legal basis: Article 6(1)(b) GDPR.

Email delivery preferences

Your preferred email delivery time, check-in reminder time, and timezone. Used exclusively to schedule when we send you your daily plan and evening reminder.

Legal basis: Article 6(1)(b) GDPR.

Consent record

The date and time you accepted this Privacy Policy, and which version you accepted. Stored to meet our GDPR accountability obligations.

Legal basis: Article 6(1)(c) GDPR — legal obligation.

Cookies and tracking technologies

We use cookies for authentication (keeping you logged in) and essential service functionality. We use Cookiebot to manage cookie consent. You can manage your cookie preferences at any time using the cookie settings button on our site. We do not use cookies for advertising or tracking your behaviour across other websites.

Legal basis: Article 6(1)(a) GDPR (consent) for non-essential cookies; Article 6(1)(f) GDPR (legitimate interest) for strictly necessary authentication cookies.

3. Data processors and transfers

We share data with the following processors to operate the service. All transfers to US-based processors are governed by Standard Contractual Clauses (SCCs) approved by the European Commission under Article 46(2)(c) GDPR.

Supabase Inc.
Database and authentication — EU region (Ireland/Frankfurt)

Stores all your account, child, check-in, and plan data. EU-hosted — no cross-border transfer.

Anthropic PBC (US)
AI analysis — United States (SCCs apply)

Processes your check-in responses and child profile (name, age) to generate personalised daily plans. Anthropic does not use API inputs to train its models by default. Transfer mechanism: EU Standard Contractual Clauses.

Resend Inc. (US)
Email delivery — United States (SCCs apply)

Delivers your daily plan emails and check-in reminders. Receives your email address and your child's first name as part of the email content. Transfer mechanism: EU Standard Contractual Clauses.

Upstash Inc. (US)
Job scheduling — United States (SCCs apply)

Used to schedule daily plan generation and reminder delivery. Receives only account identifiers (UUIDs) — no personal content. Transfer mechanism: EU Standard Contractual Clauses.

We do not sell, rent, or share your personal data with any other third party for marketing or commercial purposes.

4. Information about children (COPPA)

NaturalBond is a service for parents and carers only. We do not knowingly collect personal data directly from children. All accounts are created by adults (18+). Child profile data (first name and age) is entered by the parent on behalf of their child for the sole purpose of personalising plans.

Parents may review, update, or request deletion of their child's profile at any time by visiting Settings or contacting us at hello@naturalbond.app.

5. How long we keep your data

Your account data and child profiles are retained for as long as your account is active. If you delete your account, all associated data (child profiles, check-ins, game plans, and reports) is permanently deleted immediately. We do not retain backups of deleted user data beyond our standard 30-day database backup window.

Check-in and game plan data older than 2 years may be automatically deleted even if your account remains active, to minimise the data we hold.

6. Your rights

Under GDPR, you have the following rights:

  • Access — request a copy of all data we hold about you.
  • Rectification — ask us to correct inaccurate data.
  • Erasure — request deletion of your account and all associated data. You can also delete your account directly from Settings.
  • Portability — request your data in a structured, machine-readable format.
  • Objection — object to processing based on legitimate interests.
  • Restriction — ask us to restrict processing while a dispute is resolved.

To exercise any of these rights, email hello@naturalbond.app. We will respond within 30 days. We may need to verify your identity before fulfilling a request.

7. Complaints

If you believe we have handled your data improperly, you have the right to lodge a complaint with your national data protection authority. In the EU, you can find your local supervisory authority at edpb.europa.eu.

UK users: This policy also constitutes our compliance with the UK GDPR (retained EU law). Your rights are the same as described above. You may contact the Information Commissioner's Office (ICO) at ico.org.uk if you have concerns about our data practices.

8. Changes to this policy

If we make material changes to this policy, we will notify you by email and update the version number at the top of this page. Continued use of NaturalBond after notification constitutes acceptance of the updated policy.

9. Contact

For any privacy-related question, data request, or concern, contact us at hello@naturalbond.app.

NaturalBond

Built for parents who want to show up, not just mean to.

Privacy PolicyTerms of ServiceContact usSign inGet started