Privacy Policy
Scope. This Privacy Policy governs Fonder and all other applications and services distributed by Graphite Labs Pty Ltd(“Graphite Labs,” “we,” “us,” “our”). It applies wherever those apps are distributed, including the Apple App Store and Google Play.
Your privacy matters. This policy explains what data Graphite Labs collects, why we collect it, how it is used, and your rights over it. We are committed to keeping the data behind your experience with our apps personal and protected.
Contents
1. Who We Are
Graphite Labs Pty Ltd is a small, independent studio based in South Africa, designing and engineering deliberate mobile software for iOS and Android. References to “we,” “us,” or “our” in this policy refer to Graphite Labs Pty Ltd, the data controller for the personal data described here. Our apps include Fonder, a private journalling and connection app for couples. For privacy inquiries, contact us at [email protected].
2. Data We Collect
We collect only what is necessary to provide and improve our apps and services (collectively, the “Services”). Depending on which app you use, this may include:
- Account info:Name, email address, and authentication credentials when you create an account.
- App usage:Feature interactions, session duration, and usage patterns to help us improve the experience.
- Device info:Device type, OS version, and app version for diagnostics and compatibility.
- In-app content:Any content you create or submit within our apps. In Fonder this includes your written and recorded answers to daily questions, journal entries, milestones you add to your shared path, moments, and photographs you upload.
- Photographs and images:Images you choose to upload, such as profile pictures and photos attached to entries. We access your photo library or camera only after you grant permission, and only for the image you select.
- Voice recordings:Audio you record inside the app, such as answering a question with a voice note. We access your microphone only while you are actively recording.
- Purchase and subscription data:Product purchased, subscription and entitlement status, transaction identifiers, purchase and expiry dates, and the store the purchase was made through.
- Push notification identifiers:A device messaging token, so we can deliver notifications you have opted into.
- Diagnostics and crash data:Crash reports, error traces, and performance data used to fix defects.
- Correspondence:Messages and enquiries you send us directly.
Payment information. We do not directly collect or store payment card, bank account, or other payment credentials. Purchases are processed by the Apple App Store or Google Play, which handle payment details under their own privacy policies. We do receive and process information about a purchase, as described above, in order to grant and verify your subscription entitlement.
We do not collect biometric data, we do not track you across other companies’ apps or websites, we serve no advertising, and we do not sell your data.
3. How We Use Your Data
We use the data we collect to:
- Deliver and personalise your experience with our apps.
- Sync your data across your devices.
- Identify and fix bugs, improve performance, and develop new features.
- Send you important account or service communications.
- Comply with our legal obligations.
We do not use your personal content to train AI models without your explicit, opt-in consent.
4. Third-Party Services & Platform Providers
We use a small number of third-party providers to operate our apps. These providers process data on our behalf as service providers, and each operates under its own privacy policy. We do not sell data to them, and none of them are advertising networks.
Depending on which app you use, this may include providers for:
- Application hosting and data storage:Stores your account record, profile, and the content you create in the app, including media you upload such as photos and voice recordings.
- Authentication and push notifications: Sign-in (including Google and Apple sign-in) and delivery of notifications you have opted into. Processes your email address, name, authentication identifiers, and a device messaging token.
- Subscription management:Manages in-app purchases and subscriptions. Processes an app user identifier, subscription and entitlement status, purchase history, product identifiers, and transaction information necessary to provide subscription management.
- Crash and error reporting:Processes crash reports, stack traces, and device and OS metadata so we can diagnose defects.
- Product analytics:Processes pseudonymous usage events such as screens viewed and features used, so we can understand how the app is used and improve it.
- Apple App Store and Google Play:Distribute our apps and process all payments. We never receive your payment card details. We receive limited purchase and subscription information as governed by their respective privacy policies.
- Build and update infrastructure:Delivers app builds and over-the-air updates to your device.
When you use an integration you have authorised, we access only the data scopes you granted and use that data solely to deliver the relevant functionality. We are not responsible for the independent data practices of third-party providers. A full list of the specific providers behind each category above is available on request at [email protected].
5. Data Storage & Security
Your data is stored on secure cloud infrastructure with encryption in transit (TLS) and at rest. We apply industry-standard security practices including:
- Access controls limiting who can view your data internally.
- Regular security reviews of our infrastructure and third-party integrations.
- Prompt notification in the event of a data breach affecting your information.
No system is perfectly secure. While we take strong precautions, we cannot guarantee absolute security.
6. Data Retention
We retain your data for as long as your account is active or as needed to provide the Services. If you delete your account:
- Your profile and associated data are deleted within 30 days.
- Anonymised, aggregated analytics may be retained indefinitely.
- Legal or compliance obligations may require us to retain certain records longer.
7. Deleting Your Account
You can delete your account and its associated data at any time. Two routes are available, and you do not need to contact us to use either:
- In the app:Open the Account tab, tap Delete account, and confirm. This takes effect immediately.
- On the web:Submit a request at usegraphitelabs.com/delete-account, without needing to install or reinstall the app.
Deleting your account removes your profile, your journal and other in-app content, your uploaded photographs and voice recordings, your relationship and partner-pairing records, your pending invites, and your push notification tokens. If you are paired, the shared relationship record is dissolved and your partner is notified that the connection ended. Your partner’s own entries belong to them and are not deleted.
Deletion requested in the app is carried out immediately, not queued. Requests made by email are completed within 30 days of us verifying the request. We retain a limited subset of data for longer only where we are legally required to: records of purchases and refunds needed for tax, accounting, and store reconciliation, and any records subject to a legal hold. Anonymised, aggregated analytics that can no longer be linked to you may be retained indefinitely.
Subscriptions are billed by the app store, not by us, so deleting your account does not automatically cancel a paid subscription. Cancel your subscription in your Apple App Store or Google Play account before deleting, or you may continue to be billed.
8. Your Rights
Depending on your location, you may have the following rights over your personal data:
- Access:Request a copy of the data we hold about you.
- Correction:Update inaccurate or incomplete data.
- Deletion:Request erasure of your account and associated data.
- Portability:Receive your data in a structured, machine-readable format.
- Opt-out:Withdraw consent for non-essential data processing at any time.
To exercise any of these rights, email us at [email protected]. We respond to requests within 30 days.
9. Children’s Privacy
Our Services are not directed to children under 13. We do not knowingly collect personal data from individuals under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.
If you believe we have inadvertently collected such data, please contact us at [email protected] and we will take immediate action.
10. Changes to This Policy
We may update this Privacy Policy as our practices evolve or as required by law. We will notify you of significant changes via in-app notification or email. The “last updated” date at the top of this page reflects the most recent revision. Continued use of our Services after a policy update constitutes your acceptance of the revised terms.
11. Jurisdiction & Legal Basis for Processing
Graphite Labs is based in South Africa and operates globally. If you access our Services from outside South Africa, you do so at your own initiative and are responsible for compliance with your local laws.
For users in the European Economic Area, United Kingdom, or other jurisdictions with applicable data protection laws, our legal bases for processing your personal data include: performance of our contract with you, our legitimate interests in operating and improving the Services, compliance with legal obligations, and your consent where explicitly requested.
12. Contact
Privacy questions, requests, or concerns: