Account and profile information may include name, username, email address, phone number, profile fields, verification status, account settings, and security settings such as two-factor authentication status.

Authentication information may include access tokens, refresh tokens, verification tokens, pending two-factor tokens, and Google or Apple sign-in identity tokens used to authenticate your account.

Connected device information may include POND device identifiers, MAC address, firmware version, device name, pairing and binding status, online or offline state, winding configuration, LED settings, schedules, activity logs, telemetry, diagnostics, and device commands.

Bluetooth or nearby-device information is used to discover, connect to, provision, and control compatible POND hardware. Wi-Fi setup information you provide may be transmitted locally from the app to your POND device so the device can connect to your network.

Watch profile information may include watch manufacturer, model, recommended turns-per-day, winding direction, wind and rest timing, notes, and collection preferences.

If you choose to add profile or watch images, the app may access your camera or photo library. In the currently verified implementation, selected images are stored locally on the device unless a future backend upload feature is added.

Commerce information may include Shopify product, cart, checkout URL, totals, discount, variant, and buyer identity information where used to power cart and checkout. Payment card information is entered in Shopify checkout and should not be treated as collected by POND unless POND later gains access to it.

We use information to create, verify, secure, and manage your account.

We use information to connect, provision, bind, monitor, troubleshoot, and control POND devices.

We use information to store and sync watch profiles, device schedules, winding settings, preferences, telemetry, and activity history.

We use information to provide product browsing, cart, checkout, purchase support, and order-related experiences through Shopify.

We use information to send service messages, security notices, setup confirmations, support replies, optional notifications, maintain app security, prevent misuse, diagnose issues, improve reliability, and comply with legal obligations.

Bluetooth and nearby-device permissions are used to discover, connect to, provision, and control compatible POND hardware.

Location on Android may be requested only where Android requires it for Bluetooth or nearby-device scanning behavior. POND should not collect or store precise GPS location unless the shipped app changes to do so.

Camera and photo library access is used only when you choose to add profile or watch images.

Network access is used for account authentication, backend API communication, realtime device updates, support, and Shopify commerce.

We do not sell personal information.

We may share information with service providers that help operate hosting, authentication, storage, support, diagnostics if enabled, and commerce workflows.

Shopify processes product browsing, cart, checkout, payment, tax, shipping, discount, and order-related information according to Shopify and merchant policies.

Google and Apple may process information when you choose Google Sign-In or Sign in with Apple.

App stores, cloud providers, support tools, email providers, analytics or crash providers if added, and legal or compliance vendors may process data needed for their services.

We keep account and device information while your account is active and as needed to provide the service.

We may retain some information for security, fraud prevention, legal, accounting, warranty, tax, dispute-resolution, and compliance reasons.

You can request deletion through the app or by contacting harry@pondwinder.com. After deletion, we delete or de-identify information unless retention is legally or operationally required.

Locally stored images and preferences may remain on your device until you remove them, delete the app, or clear app data.

We use reasonable safeguards designed to protect information, including encrypted transport for server communication and secure token storage on supported devices.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

POND App is not intended for children under the minimum age required by applicable law. Information may be processed in countries other than where you live, using safeguards required by applicable law where needed.

We may update this policy and will post the revised version with a new effective date. Privacy and support questions can be sent to harry@pondwinder.com.