Privacy Policy
Policy version: 2026-09-17 ยท Last updated: 17 September 2026
Who we are
Best Joke Wins is operated by BondApp, based in Scotland, United Kingdom. BondApp is the controller responsible for deciding how personal information is used for this service. Contact seanfwalker@bondapp.co.uk about privacy, support, safety or deletion. Never send your password by email.
Information we collect
We receive the information you provide when registering and using the app: email address, account identifier, display or stage name, password authentication information, your adulthood declaration, policy acceptance records, profile details, selected city/country, any age you supply, profile photographs and answers to signup questions. Passwords are stored as hashes, not plaintext. We also process jokes, posts, prompt replies, comments, likes, votes, cohort chat, direct messages, connection requests, notification preferences, reports and support correspondence. Other members may provide information about you through interactions or reports. Our services and infrastructure providers process technical request and security information, such as IP addresses, to operate and protect the service.
Purposes and lawful bases
We use information necessary to perform our agreement with you to manage your account and provide cohorts, prompts, messages and member interactions. We rely on legitimate interests in protecting members, preventing misuse, responding to support, moderating content and understanding participation to maintain and improve the service, while taking account of your rights and reasonable expectations. Where a specific law requires us to retain or disclose information, we rely on that legal obligation. Where we separately ask for consent for optional processing, we explain its purpose and how to withdraw consent. Accepting this privacy notice is not blanket consent to every use of your data.
What other people can see
Profile information and submitted content are visible to other members according to the feature and its audience. Cohort conversations are shared with cohort participants. Direct messages are available to their recipients. Authorized administrators can access information for service administration, support and moderation. Messages are not end-to-end encrypted. Do not submit information you do not want the intended audience to see or copy; we cannot remove independent copies made outside the service.
Providers and sharing
We use Replit for application hosting and database services and Google Cloud Storage-backed object storage for uploaded files. Legacy sign-in paths also use Clerk. City search sends the text you enter directly to Open-Meteo's geocoding service; that provider also receives connection information such as your IP address. Selecting a city does not enable continuous GPS tracking. Our support-email service processes correspondence sent to the support address. Participation reporting is performed using the app's own database. The current beta does not have advertising or a third-party behavioral analytics feature. We may disclose information to authorities where legally required or necessary to address a safety incident.
International processing
Being based in Scotland does not mean that all information is stored in Scotland or the UK. Our infrastructure and support providers may process information in other countries, including the United States and countries in the European Economic Area. Where UK data-protection law requires protection for a restricted transfer, the applicable arrangements must provide an appropriate basis, such as an adequacy decision or approved contractual safeguards and any necessary supplementary measures. Replit's published Data Processing Agreement describes its use of standard contractual clauses, including the UK Addendum or International Data Transfer Agreement where applicable: https://replit.com/dpa. Contact seanfwalker@bondapp.co.uk for information about the providers, processing locations and transfer safeguards applicable to your information, or to request details of those safeguards.
How long we keep information
Ordinary cohort chat is scheduled for cleanup once the cohort has been ended for more than seven days. Administrator-saved messages and messages with unresolved cohort-message reports are exceptions. Direct-message content is scheduled for cleanup once it is more than three days old. Cleanup runs periodically, so these are not guarantees of removal at an exact hour. These rules do not by themselves delete profiles, prompt replies, winners, participation statistics or separate moderation records. Account and participation information is retained while the account and service need it, subject to account deletion. For saved content, reports, support correspondence and limited deletion/identity records, retention depends on whether an investigation, appeal, support request, prevention of recurring abuse or applicable legal obligation still requires the record. Information should not be retained merely because it may be useful someday. Operational logs and backup copies follow the relevant provider's retention and recovery arrangements and may remain after live account records are deleted; they are not retained for continued ordinary use of a deleted account. Contact us for the retention information applicable to a particular request.
Account deletion
You can delete your account from the Account screen or through our public account-deletion page. We verify your authority to make the request. The deletion process removes account data and associated content handled by the service and attempts cleanup of uploads with recorded ownership. Older uploads without proven ownership require manual review to avoid deleting another person's files; the response tells you when this is needed. Limited legal, safety, deletion-processing and identity-suppression records can remain where necessary. Not every retained record is anonymous. If you cannot authenticate or need help completing manual cleanup, contact seanfwalker@bondapp.co.uk. A network error is not proof that deletion succeeded or failed.
Your rights
Depending on the circumstances and legal basis, UK data-protection law gives you rights to access, correct or erase personal information, restrict or object to processing, and receive certain information in a portable format. You may withdraw consent where processing relies on consent without affecting earlier lawful processing. These rights have qualifications and exceptions. Contact seanfwalker@bondapp.co.uk to make a request. We may request proportionate evidence of identity and will respond within the applicable legal time limits. You can also complain to the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/.
Notifications, device storage and security
The app provides an in-app notification feed. The current beta does not provide automated push-notification or email-notification delivery, even where a preference has been saved. Staff may reply to support messages by email. Sign-in tokens and preferences are stored on your device as needed to operate the app. The release app uses HTTPS for API requests. Keep your device and password secure. No service can guarantee absolute security; transport encryption is different from end-to-end encrypted messaging.
Adults only
Best Joke Wins is for adults aged 18 and over. Eligibility is self-declared, not verified using identity documents. If you believe a minor is using the service, use in-app reporting or contact seanfwalker@bondapp.co.uk so the assigned team can investigate and take appropriate action.
Changes to this policy
Revised policies are identified by their published version and date. Material changes will be explained through the service. Where renewed acceptance or separate consent is needed, it will be requested before the affected use.