Privacy Policy

Updated on September 5, 2026

What is this Privacy Policy and what does it cover?

Highlights We want you to understand what information Bonfire collects, and how we use, share, keep, and delete it. This Policy also explains your choices and how to contact us.

Bonfire is a private app for friend groups. There is no public discovery feed. This Policy describes our practices for the Bonfire iOS app and for this website.

Each section below includes a short summary, then the details. If something here does not match what you see in the app, email us and we will fix it.

Operator: Dhilan Saluja. Contact: dhilan.saluja@gmail.com.

What products does this Policy cover?

This Policy covers:

The Bonfire mobile app on iOS
This Privacy Center website, including Support and Terms

This website is static. It does not set cookies, run advertising, or collect analytics. If you email us, we receive whatever you put in that message.

What information do we collect?

Highlights What we collect depends on how you use Bonfire. Signing in is required. Contacts, location, notifications, a phone number, and a profile photo are optional. We do not collect location in the background.

Here is the information we collect:

Your activity and information you provide

Account When you sign in with Apple or Google, we receive your name and email address, including Hide My Email addresses from Apple. You may add a phone number and a profile photo.

Content you create Photos, videos, chat, captions, polls, GIFs, Spark details (including a meetup note or pin if you add one), crew names, and other posts you share in a Crew.

Reports If you report or block someone, we receive the information needed to review that report.

Friends and other connections

Crew membership is how Bonfire works. We store who is in each Crew you join or create, invite codes you share, and, if you use Find Friends, hashed phone numbers used only to match people already on Bonfire. Your address book stays on your device. We do not upload your full contact list.

App and device information

Notifications A device push token if you allow notifications, so we can send alerts you turned on (for example a Spark or a new post in a Crew).

Location Precise or coarse location only if you choose to pin a meetup spot on a Spark. We do not collect location in the background and we do not use location for advertising.

Diagnostics Crash or performance data from Apple or Expo when something breaks, used to keep the app working.

Information from partners

Apple and Google send us the sign-in details needed to create your account. If you buy Bonfire Pro, Apple sends us enough to unlock and restore that subscription. We do not receive your full payment card number.

What if you don’t let us collect certain information?

Some information is required for Bonfire to work: a sign-in from Apple or Google. Other information is optional. If you skip Find Friends, deny location, or turn off notifications, those features will not work, but you can still use the rest of the app.

How do we use your information?

Highlights We use information to run Bonfire: your account, Crews, Sparks, photos, chat, friend matching you opt into, notifications you allow, Bonfire Pro, reports, and keeping the service secure. We do not sell your information. We do not use it for third-party ads. We do not track you across other companies’ apps or websites.

Here are the ways we use your information:

To provide Bonfire. Create your account, show your profile, Crews, Sparks, photos, and chat, and keep those features working.
To connect you with people you already know. Match hashed phone numbers if you use Find Friends, and honor invite codes you share.
To communicate with you. Send push notifications you allow, and reply if you email support.
To process Bonfire Pro. Unlock, restore, and confirm a subscription you buy through the App Store.
To promote safety and integrity. Review reports, honor blocks, and stop abuse or spam.
To fix problems. Use crash and performance data to see if the app is broken and repair it.

We do not use your information to build an advertising profile. We do not show third-party ads in Bonfire.

How is your information shared on Bonfire?

Highlights People in a Crew can see what members post in that Crew. There is no public feed, no follower graph for strangers, and no Explore page of people you do not know.

Content you post is visible to members of the Crews you share it with. If you put a meetup pin on a Spark, people in that Crew can see that pin. Profile name and photo are visible to people who share a Crew with you, and to people who receive an invite you send.

If someone leaves a Crew or you delete a post (or it expires), other people in the Crew will no longer see that content in the app in the ordinary course. Copies on someone else’s device, or a screenshot, are outside our control.

How do we share information with third parties?

Highlights We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We use companies that process data on our behalf so the app can run.

We share information with these service providers, only as needed for their role:

Supabase Accounts, database, and file storage for photos, videos, and other app data.

Apple and Google Sign-in. Apple also handles Bonfire Pro purchases, renewals, and cancellation.

Expo Push notifications to devices that allowed them.

Google Maps Maps when you choose to share a meetup spot on a Spark.

We may also disclose information if we believe we are required to by law, to protect someone’s safety, or to defend a legal claim. If Bonfire is ever transferred as a business, information would move with it under this Policy or a successor notice.

How can you manage or delete your information and exercise your rights?

Highlights You can control contacts, location, and notifications on your device. You can report or block people in the app. You can delete your account under You → Delete account. You can also email us to access, correct, or delete your information.

Depending on where you live, you may have rights to know, access, correct, delete, or export personal information, or to appeal a decision we make about a request. To use those rights, email dhilan.saluja@gmail.com from the address on your account. We will need enough detail to find you and we may ask you to confirm it is you.

Email a privacy request Open Support

In the app and on your device

Skip Find Friends. Contacts are never required.
Deny location. Location is only used for a Spark pin you add.
Turn off notifications in iOS Settings → Bonfire.
Report or block someone from their profile or content.
Delete your account: You → Delete account.

How long do we keep your information?

Chat and photos are meant to expire after about 24 hours.

We keep your account and the information tied to it until you delete the account, or until we delete it for a policy or legal reason. When you delete your account, we delete associated personal data we are not legally required to keep, including Crews you own.

We may keep a limited record after deletion — for example a marker that the account was removed, or a purchase receipt — if we need it for security, abuse prevention, accounting, or the law.

How do we transfer information?

Bonfire is operated from the United States. If you use the app from another country, your information may be processed in the United States, where privacy laws may be different from the laws where you live.

How do we protect your information?

We use reasonable technical and organizational measures to protect personal information, including access controls and encrypted connections. No method of transmission or storage is completely secure. If we learn of a breach that requires notice, we will tell you and regulators as the law requires.

How will we notify you of changes to this Policy?

If we change this Policy, we will update the date at the top of this page. If a change is material, we will also try to notify you in the app or by email when we have an address for you.

How to contact us with questions

If you have questions about this Policy or about your information:

Dhilan Saluja
dhilan.saluja@gmail.com

This is also the contact for privacy requests, children’s requests, and complaints.

Additional information for certain places

Children

Bonfire is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you think a child created an account, email us. We will delete it.

United States, including California

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use or disclose sensitive personal information to infer characteristics for advertising. We do not use tracking technologies on this website.

Categories we collect, as described above: identifiers (name, email, user id), contact information, user content, device tokens, location you choose to share, hashed phone numbers for optional matching, purchase history for Bonfire Pro, and diagnostics. We use these for the purposes in this Policy, not for advertising.

If we deny a request, you can appeal by emailing us and writing “Appeal” in the subject. You may also contact your state attorney general.

If you are in the EEA, UK, or Switzerland

Bonfire is a small service operated from the United States. If those laws apply to you, you can ask us for access, correction, deletion, restriction, or a copy of your information, and you can complain to your local data protection authority. Email us to exercise those rights. Where we rely on consent (for example notifications, contacts, or a location pin), you can withdraw it in system settings or by not using that feature.