Ondar Privacy Policy

Last updated: October 28, 2026
Effective date: October 28, 2026

This Privacy Policy explains how Waystar Communications LLC, doing business as Ondar (“Ondar,” “we,” “us,” or “our”), collects, uses, discloses and retains personal information through our application, website, registration and interest forms, profiles, Stories, communications and related services (collectively, the “Service”).

Ondar is an adults-only plans-and-community app for gay adults. Participation, communications, ethnicity, physical attributes, preferences and location may be sensitive. Please use care when deciding what to share with other users.

1. Scope

This Policy covers your use of Ondar and your interactions with us, including account registration, participation in our community, purchases, support and website forms. The information we process depends on the features you use and the choices you make. Availability of the Service and individual features may vary by location and device.

Our Consumer Health Data Privacy Notice supplements this Policy where consumer health privacy law applies.

2. Information we collect

A. Account and eligibility

We collect email address, optional phone number, date of birth, age-eligibility status, username, public OnPin that you can change, account dates, last activity, settings and unit preferences. We also process sign-in credentials and, if you choose a third-party sign-in service, the account information that service provides to authenticate you.

Biometric authentication used to unlock the app takes place on your device. Ondar does not receive the underlying biometric template.

B. Profile

You may provide display name, biography, photos, pronouns, interests, intentions, height, weight, relationship status, ethnicity, tags, area and whether to hide age. Biography and other free-text fields may contain additional information you choose to enter.

C. Map presence

We process your availability, presence status and device location while the map is in use. We receive and retain the precise location needed to provide nearby features. The map shows you only to someone you have mutually added as a friend, by general area unless you choose to share your exact spot, and anyone who opens a place where you have checked in can see that you are there. You can choose a mode in which no one sees you. Map visibility is limited when too few users are nearby.

D. Location, plans and places

With your device permission, we collect location while the app is in use; we do not request background location. Location data can include precise device coordinates, the general-area location shown on the map, approximate and precise profile location, plan areas, place check-ins and a location you intentionally send in a chat. We also process plan activity, selected area, time window, notes and descriptions.

The website separately derives approximate country, region and city from IP information; this is not GPS location.

E. Communications and media

We collect one-to-one and group messages, participants, message text, attachments, type, read/open status, replay count, expiration status and whether media originated from the camera, photo library or in-app media library. Messages are stored on our servers and are not end-to-end encrypted.

Media includes profile photos, private albums, photos and videos from the camera or photo library, view-once media, audio/voice messages and media saved to the in-app library. We request camera, microphone, photo-library read/save and notification permissions when relevant to the feature you choose.

F. Stories

Stories are temporary photos or short videos that you choose to share with your Circle or with eligible people nearby. When you publish a Story, we process the photo or video, your account and profile identifiers, the audience you selected, posting and availability information, moderation status and associated reports or mute actions. Stories are reviewed before they become visible to other users.

If you select the nearby audience, Ondar uses location information associated with you and other users to determine who is eligible to receive the Story. Selecting “nearby” does not make a Story private or guarantee that only people at an exact distance will see it. People who can view the Story may see the photo or video, the profile identity and other context displayed with it. Location or proximity can sometimes be inferred from the nearby audience or from the content itself.

When you view or interact with a Story, we process the account, device, request and interaction information needed to deliver the Story, apply the selected audience, maintain security, honor a mute and receive a report. If Ondar identifies individual viewers to the person who posted a Story, the interface will disclose that before or when the viewing feature is used. Recipients may capture, record, copy or redistribute a Story despite its temporary availability or our rules.

G. Social graph, safety and moderation

We collect Your circle and friend relationships, including ADD by code, scan or link; blocks; reports and their category, details and evidence; moderation status, decisions and history; trust and abuse-prevention assessments and the activity supporting them; and OnPin search activity and protected identifiers derived from IP addresses to prevent automated account discovery and abuse. These derived identifiers may still be personal information.

Reports can preserve otherwise expiring messages or media. Authorized reviewers may access relevant content, reports, account information and associated evidence to investigate and address safety concerns.

H. Purchases

When you make a purchase, we collect the product, purchase platform, transaction identifier, amount, currency, subscription status, credit balance and credit activity. The payment or app-store provider processes payment credentials; Ondar does not receive the full payment-card number.

I. Devices, support and notifications

We collect notification-delivery identifiers, app version, device model and operating-system version. Support requests include their contents and relevant device and app information. We and our providers also process connection, sign-in, security and diagnostic information, including IP addresses and browser details, as needed to deliver and protect the Service.

J. Website and registration forms

Website forms collect your email, city, optional phone number, what brings you to Ondar, interest in invitations or participation programs, privacy choices and the version of the terms you accepted. We also process submission times, form and session identifiers, device and browser details, pages visited, landing and referring pages, campaign and advertising-click identifiers, permitted analytics identifiers, form interactions, completion time and errors, security-verification results and approximate country, region and city derived from IP addresses. Website registration records retain a protected identifier derived from the IP address rather than the original address. Our security providers may process the original address to verify a submission and prevent abuse.

We use cookies and similar technologies for essential website functions and, subject to your privacy choices, optional analytics and campaign measurement. Optional website measurement uses Google Analytics, which processes permitted browser identifiers and website interactions. We do not send form answers, email addresses, app content or sensitive registration information to website analytics. Learn how Google collects and processes information from sites using its services. You can change optional measurement choices through Privacy choices in the website footer. Separately, the app records usage events, such as which screens and features are used and how often, to understand and improve the product. These events do not include message content or location. We do not use app activity for advertising and we do not sell it.

Website security checks process browser and network signals to distinguish genuine submissions from automated abuse. See the security-verification privacy notice. We retain the verification outcome, not the temporary verification credential.

K. Potentially sensitive free text

Ondar does not currently ask for structured HIV status, STI status, PrEP use, diagnoses, medications or medical records. Users can nevertheless enter health or sexual-health information in messages, biographies, plan text, reports or support requests. We process that information to provide the specific communication, display, support or safety function the user requests and as explained in the Health Data Notice. Do not place medical information in a public profile or plan.

3. How we use information

We use information to:

• register, authenticate and administer accounts and confirm adult eligibility;
• provide profiles, discovery, Stories and their selected audiences, maps, plans, places, check-ins, messaging, albums, media, voice and notifications;
• process subscriptions, purchases, credits and entitlements;
• moderate Stories, images, video and reports; honor Story mutes and other safety choices; block abuse; prevent fraud, spam, impersonation, enumeration and underage access; and enforce our rules;
• operate support, investigate incidents and maintain moderation evidence;
• maintain, improve and troubleshoot the Service, including by measuring how its features are used;
• run the website and waitlist and measure it when permitted;
• communicate about accounts, safety, purchases, requested invitations and marketing you choose to receive; and
• comply with law, valid legal process and legal claims.

We do not sell personal information, share it for cross-context behavioral advertising, use private content or precise location for advertising, or train a general-purpose generative AI model on private messages, media or voice. We do not use optional health information to create advertising audiences.

4. Automated processing and moderation

We use automated image and video review to identify potentially prohibited material before it becomes visible, including media submitted as a Story. Content awaiting approval is not available to other users. Authorized reviewers may reassess automated decisions and review reported Stories and related evidence. We also evaluate activity and security signals to prevent spam, fraud and abuse. These assessments may affect content visibility, account access or feature availability. These systems can make mistakes; you may appeal a moderation decision at safety@ondar.co.

We do not use these systems to infer health diagnoses, attractiveness or eligibility for employment, housing, credit, insurance or healthcare.

5. Who receives information

Other users

Other users receive profile, Story, plan, place, message, media or location information according to the feature and audience you select. A Story viewer receives the Story media, the identity and context displayed with it, and information needed to understand why it is available to that viewer. Recipients can capture or copy information despite our rules.

Service providers

We engage service providers to support the operation, security and delivery of Ondar. Providers acting on our behalf may process personal information only as necessary to provide the services we engage them to perform, subject to our instructions and applicable contractual and legal requirements, including confidentiality, security and limits on use. The information available to each provider depends on its function; not every provider receives every category of information.

Services that also act independently

App distribution, third-party sign-in and payment services may process your account, device and transaction information for purposes they determine, such as managing your store account, processing payments and preventing fraud. Mapping and website security services may also process the relevant connection, location-related or verification information for their own service and security purposes. Their independent processing is governed by their own privacy notices, available through the relevant service or feature, including the mapping-service privacy notice. Ondar remains responsible for disclosures it makes under this Policy and applicable law.

Other disclosures

We may disclose limited information to professional advisers under confidentiality; during a corporate transaction subject to existing commitments; or to courts, regulators, law enforcement, NCMEC or others when permitted or required for valid legal process, child safety, security, prevention of serious harm or legal claims.

We do not share personal information with a corporate affiliate at this time.

6. Location and international processing

Your information is primarily stored in the United States. Our service providers and other recipients may process information in other countries where they operate. Those countries may have privacy laws different from those where you live. We apply the safeguards and transfer requirements required by applicable law; U.S. storage does not mean all processing occurs exclusively in the United States.

The Service is offered only in supported locations. This Policy does not establish availability in a country where Ondar has not offered the Service. Any additional regional privacy notice applies together with this Policy and does not limit your mandatory rights.

7. Retention

Ordinary retention is:

Visibility and technical retention are different. When a Story expires or you delete it, it stops being available through ordinary Story viewing, but removal from active systems and backups may not occur at the same moment. These periods describe ordinary operation. A report, security incident, fraud investigation, chargeback, legal hold or legal obligation can require limited longer retention. We restrict retained information to that purpose.

8. Account deletion

Request deletion in the app. Your account is deactivated and hidden for 30 days so you can reverse the request. After that period, we delete the account, profile, photos, media, active location, messages attributable to the account, credits, sessions and stored files, subject to the limited exceptions in Section 7. See Account Deletion and Privacy Requests for the process, including how to request final deletion without the recovery period.

We may retain a restricted former-identifier record where necessary to prevent impersonation or abusive reassignment. It is not an active profile and is not used for marketing. Information another person independently retained is not controlled by Ondar.

Deleting an account does not itself cancel an Apple subscription. Cancel subscriptions through Apple.

9. Your controls and rights

The app provides profile editing, location and device permissions, blocks, media deletion and account deletion. You can change your OnPin and manage notification or visibility choices. You may request access, correction, deletion, withdrawal of consent or a portable copy by emailing privacy@ondar.co. Our privacy team will help you exercise your rights; you do not need an in-app export tool to submit a request.

We verify a request proportionately, generally using the registered account/email. Do not send an identity document unless we explain why it is necessary and provide a suitable method. We respond within applicable deadlines and explain a lawful denial or extension. Appeal a privacy decision by replying or emailing the same address with “Privacy Appeal.” You may complain to the regulator available under applicable law. We do not unlawfully discriminate for exercising a right.

Depending on applicable state law, rights may include knowing or accessing information, receiving a list of specific third-party recipients where required, correction, deletion, portability, withdrawing consent, limiting sensitive-data use, and opting out of sale, targeted advertising or qualifying profiling. Ondar does not sell personal information or use it for targeted advertising.

Website analytics choices can be changed through Privacy choices in the website footer. A recognized Global Privacy Control signal is treated as a request to disable optional website measurement in that browser. Promotional email can be stopped through its unsubscribe mechanism or privacy@ondar.co.

10. Security

We maintain administrative, technical and organizational safeguards designed for the sensitivity of profile, location and private-content data, including restricted access, security monitoring and accountability for authorized reviews. Staff may access private information only for authorized operational, support, safety and legal purposes. No service can promise perfect security; protect your credentials and report suspected compromise to privacy@ondar.co.

11. Adults only

Ondar is not directed to minors and does not knowingly permit anyone under 18. If we learn that a minor used the Service, we restrict access, investigate, delete information as appropriate and make legally required reports. Contact safety@ondar.co with non-graphic identifying information.

12. Changes

We will update this Policy before materially expanding collection, use or disclosure and obtain consent where law requires it. We will identify the effective date and provide appropriate notice. Continued use does not substitute for required consent.

13. Contact

Waystar Communications LLC d/b/a Ondar
Privacy: privacy@ondar.co
Safety: safety@ondar.co
2100 Ponce de Leon Blvd, 111M
Coral Gables, FL 33134, United States