Legal
About This Policy. This Privacy Policy applies to the 1STBOND LLC mobile application and all related services. By creating an account or using 1STBOND, you agree to the practices described in this policy. Where required by law, including for biometric data, we will obtain your separate, affirmative consent before collection.
1STBOND LLC (“we,” “our,” or “us”) provides tools designed to enhance safety and trust during in-person interactions. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.
We are committed to transparency and responsible handling of personal data, including sensitive categories such as biometric and location data. We collect only the minimum information necessary to provide the Services.
Identity verification is performed by a third-party identity verification provider acting as a data processor on our behalf under a data processing agreement. When you submit a government-issued ID, our verification provider processes the full contents of that document, which may include your full legal name, date of birth, ID or license number, issuing jurisdiction, expiration date, and residential address as printed on the document.
1STBOND LLC does not store your residential address, ID number, or expiration date in our own systems. Identity data is matched against your face scan through our secure cloud infrastructure and the result is stored in our database. We may access or request full ID data from our verification provider only in limited circumstances: (a) investigating suspected fraud or identity impersonation; (b) responding to a valid legal request, court order, or law enforcement inquiry; or (c) resolving a safety incident where identity confirmation is necessary to protect users or comply with applicable law.
We collect and process biometric identifiers and biometric information in two contexts:
Onboarding identity verification: when you first create your account, we collect facial geometry and liveness detection data to verify your identity against your government-issued ID. Liveness detection confirms that verification is being performed by a live person and not a photograph or spoofed image.
Pre-meetup face scan: before each meetup session begins, we perform a real-time face scan to confirm that the person initiating the meetup is the same verified account holder. This scan matches your face against your verified ID photo and generates a timestamp verification. The face scan window opens 6 hours before the designated meetup time and closes 10 minutes before the meetup. If you do not complete the face scan before the 10-minute mark, 1STBOND marks the meetup as Unverified and discloses to all parties to proceed at their own discretion.
All biometric data is used solely for identity verification and meetup authentication. We do not use biometric data for advertising, profiling, or any purpose beyond these functions. Biometric verification is initially processed by our third-party identity verification provider (Didit). The resulting face match data and verification record are then stored securely in 1STBOND LLC’s own database and used to authenticate your identity for pre-meetup face scans throughout your use of the platform. Raw government ID biometric data (such as the photo on your ID document) is held by Didit and is not stored directly in 1STBOND’s own systems.
If you are a resident of Illinois, we collect biometric identifiers and biometric information as defined under the Illinois Biometric Information Privacy Act (BIPA), 740 ILCS 14/.
• Biometric data is never sold, leased, traded, or used for advertising or profit
• Biometric identifiers collected during onboarding verification and pre-meetup face scans are destroyed within 90 days of the relevant event or account closure, whichever is earlier
• You will be presented with a separate, written in-app consent screen before any biometric data is collected
• You may withdraw biometric consent at any time by contacting privacy@1st-bond.com
This notice satisfies our obligation to provide a written, publicly available retention policy prior to collection.
If you are a resident of Texas, we collect biometric identifiers as defined under the Texas Capture or Use of Biometric Identifier Act (CUBI), Tex. Bus. & Com. Code § 503.001.
• Biometric identifiers are collected only with your informed consent
• Biometric data is never sold or disclosed to third parties except as required to provide the Services or as required by law
• Biometric identifiers collected during onboarding verification and pre-meetup face scans are destroyed within 90 days of the relevant event or account closure, whichever is earlier
• You may contact privacy@1st-bond.com with questions about our biometric data practices
If you are a resident of Washington, we collect biometric data that may be regulated under the Washington My Health My Data Act (MHMDA), RCW 70.372.
• Biometric data is used solely to verify your identity and is not used for health-related profiling or advertising
• We do not sell, share, or disclose your biometric data to third parties for their independent purposes
• Biometric identifiers collected during onboarding verification and pre-meetup face scans are destroyed within 90 days of the relevant event or account closure, whichever is earlier
• You may contact privacy@1st-bond.com to exercise any rights available to you under applicable Washington law
1STBOND LLC provides in-app messaging to facilitate coordination between users. Messages are visible only to the two parties in a conversation and are stored on our servers to enable delivery and to support safety review in the event of a reported incident. Message content may be accessed by 1STBOND staff only when necessary for safety enforcement, violation investigation, or legal compliance in connection with a reported incident. We do not use message content for advertising or sell it to third parties.
When a meetup code is shared within the app messaging system, a direct Join Meetup button is automatically generated within that message thread, specific to that meetup code.
We request access to your device location in the following contexts:
Location data collected for navigation and live tracking is used only for the duration of the relevant meetup session. We do not track your location in the background outside of an active meetup session. You may revoke location permissions at any time in your device settings, though doing so will disable navigation and live tracking features.
Camera access for identity verification is required. Camera and photo library access for profile photos is optional. You may revoke either permission in your device settings at any time, though revoking camera access will disable identity verification and face scan functionality.
After completing a meetup, you may leave a star rating on the other party. 1STBOND LLC stores that rating in association with both your account and the rated user’s account. Ratings are displayed to other verified users as part of our trust and safety features.
We do not use ratings data for advertising or profiling, and we do not sell ratings data to third parties. Ratings submitted in violation of these Terms may be removed and may result in account action.
Subscription billing is managed through a third-party subscription management platform in connection with the Apple App Store and Google Play Store. The free tier includes 2 meetups per week. A Premium subscription provides unlimited meetups and live tracking. When you subscribe to a paid plan, we receive and store your subscription status (active, cancelled, expired), purchase date, and renewal date. We do not receive, store, or process your payment card number or bank account details. All billing is handled by Apple or Google.
We offer a Restore Purchases feature as required by Apple and Google, which allows you to restore a previously purchased subscription on a new device or after reinstalling the app. For billing disputes or refund requests, contact Apple or Google directly.
You may report or block other users from their profile or from an active message thread. When you submit a report, we collect the reason for the report (harassment, fake identity, suspicious behavior, or other), the reported user’s account identifier, and any supporting context you provide. Reports are sent to our safety team at support@1st-bond.com for review. When you block a user, we store a record of that block to prevent future contact.
We collect only the minimum personal information necessary to provide the Services. We use your information to:
We do not sell, rent, or use your personal data for advertising or marketing purposes.
We use trusted third-party service providers that act as data processors on our behalf, including:
Each provider is contractually restricted from using your data for any purpose other than providing services to 1STBOND LLC. We conduct vendor due diligence and require data processing agreements with all providers handling personal or biometric data. You may contact privacy@1st-bond.com to request information about the specific third-party service providers we use.
By creating an account and using 1STBOND, you consent to the collection and use of your information as described in this Privacy Policy.
Onboarding consent: before we collect biometric data during account creation, you will be presented with a dedicated in-app Biometric Data Consent screen disclosing: (a) the specific data being collected (facial geometry and liveness detection data); (b) the purpose (identity verification and ongoing pre-meetup authentication); (c) that initial verification is processed by our third-party identity verification provider and the resulting face match data is stored securely in 1STBOND LLC’s database; and (d) the retention and destruction schedule (deleted within 90 days of account closure). You must affirmatively tap “I Agree — Continue to Verification” to proceed.
Pre-meetup scan consent: by agreeing to these Terms and initiating a meetup session, you consent to pre-meetup face scans as a condition of each meetup. You will be shown a Pre-Meetup Scan screen before each scan describing its purpose. Declining the scan will result in the meetup being marked Unverified.
You may withdraw biometric consent at any time by contacting privacy@1st-bond.com, though doing so will prevent access to identity-verified features and meetup functionality.
We request location permission for GPS navigation and live tracking. You may revoke location access at any time in your device settings, though doing so will disable navigation and live tracking features.
We request camera access for identity verification (required) and profile photo uploads (optional). We request photo library access for profile and banner photo uploads (optional). You may manage these permissions in your device settings.
We retain different categories of data for defined periods:
You may request deletion of your data at any time (see Section 9). We will acknowledge your request within 10 business days and complete deletion within 45 calendar days. Some data may be retained longer if required by law or to resolve a pending legal dispute.
We implement commercially reasonable safeguards including:
In the event of a data breach affecting your personal information, we will notify you as required by applicable state and federal law.
We do not sell personal data. We may share your information only:
Law Enforcement and Legal Requests: We respond to law enforcement and other legal requests only to the extent required by applicable law. Where permitted, we require a valid subpoena, court order, or warrant before disclosing personal data. We may make exceptions in emergency situations involving an imminent risk of serious harm. Where legally allowed and practicable, we will notify affected users before disclosing their information.
You have the right to:
To exercise these rights, contact: privacy@1st-bond.com. We will acknowledge your request within 10 business days and complete your request within 45 calendar days.
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
To submit a CCPA/CPRA request, contact privacy@1st-bond.com with the subject line “CCPA Request.” We will acknowledge your request within 10 business days and complete it within 45 calendar days.
California’s CalOPPA requires disclosure of how we respond to browser Do Not Track (DNT) signals. We do not currently respond to DNT signals, as no universal compliance standard has been established. We do not use your data for cross-site behavioral tracking.
Illinois residents have the right to receive our biometric data retention policy in writing prior to data collection, and to seek relief under BIPA for violations. See Section 2.3 for our full BIPA disclosure.
You may manage your account at any time through the Settings menu in the app:
1STBOND LLC is operated in the United States. If you access the Services from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence. By using the Services, you consent to the transfer and processing of your information in the United States.
We do not currently direct the Services at users in the European Union or other international jurisdictions with distinct regulatory frameworks. If this changes, this policy will be updated accordingly with at least 30 days’ advance notice.
1STBOND LLC is intended for users who are 18 years of age or older. Age is verified through our identity verification process, which requires a valid government-issued ID. A self-declaration alone is not sufficient to access the Services. We do not knowingly collect personal information from individuals under 18.
If we become aware that a user under 18 has created an account, we will terminate that account and delete their information promptly. Parents or guardians with concerns should contact privacy@1st-bond.com.
We may update this Privacy Policy from time to time. For material changes, including the introduction of new data collection practices such as payments or new location features, we will provide at least 30 days’ advance notice via in-app notification and email to the address associated with your account.
The updated policy will be posted at 1st-bond.com/privacy with a revised effective date. Continued use of 1STBOND after the effective date constitutes acceptance.
This Privacy Policy is governed by the laws of the State of Colorado, without regard to conflict of law provisions. Any disputes arising under this policy shall be subject to the exclusive jurisdiction of the courts located in Denver County, Colorado.
For privacy inquiries, data access or deletion requests, or consent withdrawal:
Privacy Email: privacy@1st-bond.com
General Support: support@1st-bond.com
Website: 1st-bond.com/privacy
Account Deletion: 1st-bond.com/delete-account
Mailing Address: 1500 N Grant St Ste N, Denver, Denver County, CO 80203