Privacy Policy

On-Device by Design

Everything Bona Fide does with your material happens on your iPhone. Photos are read from your library, EXIF dates and GPS coordinates are extracted locally, chat exports are parsed locally, captions are stored locally, and the PDF is rendered locally. Your photos, your messages and the documents built from them are never uploaded to us or to anyone else, and we have no server holding them and no way to read them.

There is no sign-up, no account and no email address. The app works fully offline.

Data Stored on Your Device

• Your packets: the packet name, both partners’ names as you enter them for the cover page, and the agency template and document language you choose.
• Your exhibits: the photos you import and their extracted dates and place names, the chat excerpts you select, and the captions, dates, places, categories and exhibit numbers you set.
• Imported chat exports: the .txt file you choose is parsed on the device, and only the date windows you select are kept as exhibits.
• Settings and app preferences.
• Whether the export unlock has been purchased.

Photo Library Access

Bona Fide asks for access to your photo library so you can select photos to import. From each selected photo it reads the EXIF capture date and, where present, the GPS coordinates, which are turned into a place name using Apple’s on-device and network geocoding. Nothing else is read: there is no content analysis, no face detection and no scanning of photos you did not select. Photos with no capture date are placed in a queue for you to date yourself rather than being assigned a guessed date.

Your Messages

A WhatsApp chat export is a file you produce yourself and hand to the app through Files or the share sheet. It is parsed on the device into messages with timestamps and senders so that the date-range picker can show you counts and page estimates. Only the ranges you choose become exhibits in your packet. The message content is never transmitted anywhere, is not analysed for anything other than dates and senders, and is removed with the rest of your data when you delete it.

Exporting, Printing and Sharing

The PDF is generated on your device. When you export, print or save to Files, iOS hands the finished document to whatever destination you choose through the standard share sheet — that step is under your control, and where the file goes afterwards is governed by the app or service you send it to. Printing uses AirPrint and involves no server of ours.

The Export Purchase

The export unlock is a single non-consumable in-app purchase processed by Apple through StoreKit and managed with RevenueCat, which receives an anonymous app-user identifier and the purchase status so the unlock can be restored. We never receive or store your name, email address, payment details or Apple Account credentials, and RevenueCat never receives your photos, messages, captions or PDFs. Because there is no account, the identifier is device-local: Restore Purchase works through your Apple Account, and a fresh install attempts a silent restore before ever showing the paywall. Family Sharing is enabled.

What We Never Collect

• No accounts, email addresses or passwords — there is nothing to sign up for.
• No analytics, usage tracking, behavioural profiling or crash reports containing your content.
• No advertising identifiers, no ads, and no data sold, rented or shared with third parties.
• No copies of your photos, chat exports, captions or exported packets, anywhere off your device.
• No contacts, microphone, or background location access. Location is only what a photo you imported already carried.

Third-Party Services

• Apple StoreKit and RevenueCat — processing the one-time export purchase and restoring it on your devices.
• Apple geocoding — turning GPS coordinates already stored in your photos into place names.
• That is the complete list. Bona Fide integrates no analytics or advertising services of any kind.

Deleting Your Data

Settings › Delete all data removes every packet, exhibit, imported photo and parsed message from the device immediately. There is no server copy, so there is nothing left behind to request or chase. Deleting the app removes all local data as well. PDFs you have already exported are yours and live wherever you saved them.

Children

Bona Fide is rated 4+ and is intended for adults assembling their own filing. It collects no personal information from anyone, including children, and requires no account.

Not Legal Advice

Bona Fide organizes and formats documents. It does not provide legal advice, does not interpret any agency’s requirements, and cannot tell you whether a filing will be approved. Requirements vary by agency and change over time — check your agency’s current guidance, or speak to an immigration attorney.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last updated" date.